Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft
File:                     z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft (raw, json)
Hash identifier:          dHX60xRkcI+9sY9js1Z/AyuQN76Kcxq0BqyR1FlTxjQ=
Subject key identifier:   99:78:53:53:AB:03:10:D4:22:FD:13:1C:51:A5:1F:BF:49:A1:64:09
Authority key identifier: CF:4A:9E:F5:92:73:0A:6C:AA:14:0A:1E:7C:B7:4E:CD:55:1C:D2:6E
Certificate issuer:       /CN=A91DF859/serialNumber=CF4A9EF592730A6CAA140A1E7CB74ECD551CD26E
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/z0qe9ZJzCmyqFAoefLdOzVUc0m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft
Manifest number:          2C
Signing time:             Tue 21 Jul 2026 01:06:48 +0000
Manifest this update:     Tue 21 Jul 2026 01:06:47 +0000
Manifest next update:     Tue 28 Jul 2026 01:06:47 +0000
Files and hashes:         1: z0qe9ZJzCmyqFAoefLdOzVUc0m4.crl (hash: tS96iZNN4z3LZfUuHoqtL62bLDA0x5ssG0olYry6PM0=)
                          2: 9F908B1A4E9311F1BBF071C1B9833773.roa (hash: e1C1hiUPlgxR3BhLn5hfnRbIiMCUtUsvPXB3GFFh1EE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.crl
                          rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/z0qe9ZJzCmyqFAoefLdOzVUc0m4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 01:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF859, serialNumber=CF4A9EF592730A6CAA140A1E7CB74ECD551CD26E
        Validity
            Not Before: Jul 21 01:06:47 2026 GMT
            Not After : Jul 28 01:06:47 2026 GMT
        Subject: CN=6a5ec627-b876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:c2:ce:70:c3:47:68:90:3a:01:dd:58:2c:
                    0a:0f:a7:2e:f1:74:b0:03:63:da:6a:80:69:84:e9:
                    0c:1f:a5:07:57:d3:ab:34:00:ab:5c:f6:69:75:67:
                    18:58:30:e1:ee:8a:61:2f:6f:f9:3d:f0:f2:31:cb:
                    94:62:0f:d8:cd:0d:64:c7:bb:48:4d:8f:1a:cd:f4:
                    0d:5d:2f:b2:ce:34:8d:7e:8e:ba:c8:59:bd:0a:26:
                    39:fc:ee:48:6d:d2:93:d5:98:85:50:ae:f2:50:de:
                    82:f6:b3:db:ab:34:b6:4a:fc:b1:db:7a:77:7c:93:
                    f2:2b:85:07:5a:ec:1a:7b:fd:df:2e:91:de:53:6a:
                    56:29:a4:91:29:23:9e:91:f0:34:b8:d2:da:58:0c:
                    e0:7d:86:ae:c1:68:40:b0:6a:38:46:af:d2:13:ee:
                    44:a9:e6:88:58:1b:30:2a:5a:a1:b1:83:01:12:d9:
                    7e:53:d8:14:4a:05:62:4d:d6:3f:63:2f:30:55:67:
                    05:40:51:3e:43:f8:0d:57:aa:5b:73:b2:62:0a:4e:
                    27:b0:cd:d3:93:94:ec:87:6d:94:c1:f8:62:05:51:
                    fc:71:ed:43:b2:e2:35:67:6a:d5:85:b4:fe:2e:ad:
                    11:2d:98:e3:32:be:5f:70:77:de:78:d7:47:ce:18:
                    c7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:78:53:53:AB:03:10:D4:22:FD:13:1C:51:A5:1F:BF:49:A1:64:09
            X509v3 Authority Key Identifier:
                keyid:CF:4A:9E:F5:92:73:0A:6C:AA:14:0A:1E:7C:B7:4E:CD:55:1C:D2:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/z0qe9ZJzCmyqFAoefLdOzVUc0m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e7:f3:e3:a5:34:f0:b2:68:e6:3d:0f:4a:e2:d8:83:6a:39:
         e1:85:19:cb:a0:e1:ae:db:b9:ee:22:e1:bb:7d:34:5e:a4:2d:
         26:8d:65:fb:69:82:34:23:6f:4b:1d:63:a0:6c:5e:d9:01:57:
         d2:d1:af:ed:aa:87:35:67:b5:33:5e:e3:c3:72:5d:f7:c2:ea:
         5e:05:84:ef:c7:68:00:23:9d:0e:df:16:45:e7:94:e2:0a:af:
         e4:86:47:99:9a:59:80:d8:14:5f:79:44:75:f7:d9:c4:ee:a8:
         95:3d:5a:bf:6c:2b:88:10:55:a2:bb:63:99:5c:3a:1b:20:4a:
         6e:6a:9c:90:f6:fe:73:b2:aa:ea:42:76:a6:5b:eb:fc:3d:c7:
         94:18:d4:ad:ce:28:34:71:76:c2:9f:66:69:87:72:ea:71:ca:
         a6:5d:8b:ce:63:04:66:1f:a7:f1:dd:63:3e:25:25:0e:ef:90:
         f6:2f:5d:a0:aa:af:41:11:97:7d:dc:88:ea:f7:b9:d0:41:56:
         13:e9:5f:1e:b5:8e:69:4d:9b:2a:48:84:e1:81:af:71:31:55:
         ac:ad:84:c8:0c:fb:a4:8c:99:2a:f2:63:3e:dc:be:3c:2f:b2:
         e9:86:1a:0c:ac:ef:c9:24:64:68:60:d7:f3:0f:01:24:6f:58:
         92:fe:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:54:45 2026 by rpki-client