Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
File:                     CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json)
Hash identifier:          K0f3i2n+AJgPDcc5EkGlOgF9GZGT0GEq1HADFsXm9ao=
Subject key identifier:   D4:2A:5A:CD:71:69:86:69:AF:68:2F:63:34:CA:41:1B:03:E7:25:D9
Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
Certificate issuer:       /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Certificate serial:       02A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
Manifest number:          029E
Signing time:             Mon 27 Jul 2026 02:59:35 +0000
Manifest this update:     Mon 27 Jul 2026 02:59:34 +0000
Manifest next update:     Mon 03 Aug 2026 02:59:34 +0000
Files and hashes:         1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: zj3hY/NTRAhvj+Wler+3rbZxSj8IhtPlyNTwwEL5G/A=)
                          2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: iZ4HCtJL7rID/wZnZvAzs70hw+YNw3/gczs7CGb7Bb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
        Validity
            Not Before: Jul 27 02:59:34 2026 GMT
            Not After : Aug  3 02:59:34 2026 GMT
        Subject: CN=6a66c997-6324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:3a:6b:9d:14:6a:65:bc:25:19:06:1e:44:
                    87:63:e0:d1:0f:91:89:00:7a:17:09:37:ef:2a:3e:
                    11:30:fb:9d:29:21:47:b9:c0:0f:4a:25:52:12:80:
                    3b:7b:b2:0d:f2:4f:cb:72:ed:98:20:f0:81:8c:11:
                    ca:ef:38:81:57:0c:15:9b:0e:12:be:ad:67:b9:2f:
                    d0:32:3e:02:22:dc:34:23:55:36:84:75:ee:77:1b:
                    59:22:80:e5:cd:d5:be:50:58:2c:1b:70:e1:f4:e0:
                    11:da:28:48:80:7f:69:c7:01:e8:ab:16:5a:b3:f2:
                    e2:e2:f4:6f:3c:d0:19:7e:58:5d:2f:8d:07:f9:ec:
                    86:32:ac:90:d0:d7:c5:02:64:3d:d7:91:a4:35:0d:
                    29:41:4f:4f:1a:6c:18:da:06:88:98:62:51:5c:ba:
                    20:bf:20:a2:bc:bf:e1:15:be:a5:68:c1:4c:1f:75:
                    ee:ae:c2:ed:d4:bf:10:c7:1c:4d:38:bb:97:b1:78:
                    2d:2d:88:ee:0e:f9:09:3f:e4:24:4e:ae:63:7d:d4:
                    24:bf:83:ae:a5:cf:4a:e5:6b:5c:bf:6f:1a:93:2a:
                    c4:16:af:28:f3:55:3d:a9:6b:37:6a:e2:ba:99:bf:
                    dc:76:78:e1:7a:6b:1d:53:6e:d5:28:ae:81:98:93:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2A:5A:CD:71:69:86:69:AF:68:2F:63:34:CA:41:1B:03:E7:25:D9
            X509v3 Authority Key Identifier:
                keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:80:ca:a5:24:71:ec:49:57:6d:87:0e:06:60:1d:97:e8:b6:
         84:a7:49:5f:64:66:c4:83:cf:92:26:73:9b:07:2e:c7:02:48:
         f6:00:5a:32:fb:df:cd:45:41:5a:6a:44:da:17:cd:6c:06:ce:
         10:f5:c0:c0:e6:a7:d9:77:6d:89:5a:68:11:c6:3d:0e:ad:de:
         fe:f4:7f:de:61:32:7f:8e:f5:ce:b4:37:d7:38:43:11:6e:c8:
         dd:74:8e:2c:5a:24:0b:8d:58:f3:3f:3d:64:03:f7:67:0e:6a:
         0e:11:81:a0:8e:a6:fb:29:bf:cc:d0:45:91:b5:2c:5f:78:e3:
         ce:50:28:a5:c1:82:a3:ef:ff:da:1c:e8:e4:ed:03:cc:44:6b:
         d5:3c:c4:89:9f:d9:18:6b:13:66:4d:2a:8f:b6:0f:ce:52:f7:
         89:d2:19:77:53:2f:08:9a:aa:f4:bf:5e:b4:ae:86:cc:74:28:
         6e:af:06:94:0c:00:d2:19:40:5e:8b:66:73:42:1f:19:5a:be:
         bb:d5:c3:ab:45:70:ee:ca:e9:8d:98:39:a7:15:c9:25:ca:26:
         53:47:34:34:a5:8d:6d:52:cc:dc:0d:ac:48:3e:14:5c:37:f0:
         b3:75:dc:04:33:97:ee:97:83:a7:4a:5e:99:07:f5:20:e2:ec:
         e1:6f:91:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:49:58 2026 by rpki-client