Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
File:                     cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json)
Hash identifier:          VPB5XEv3qlP1SpOfw7EHZiepLVsUngUsjD9dpW3cWw4=
Subject key identifier:   FF:26:23:CD:8A:75:3A:7E:37:F5:53:6D:8F:3D:74:40:35:71:01:6D
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Certificate issuer:       /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial:       062F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
Manifest number:          05F1
Signing time:             Tue 04 Aug 2026 23:42:22 +0000
Manifest this update:     Tue 04 Aug 2026 23:42:21 +0000
Manifest next update:     Tue 11 Aug 2026 23:42:21 +0000
Files and hashes:         1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: +Xma7PS9a2+OUrWXuOrR2XV5V1CjgT3FV9XfnPFGuV0=)
                          2: C2D59C44559811F196E9B1D195833773.roa (hash: rPQ29Js0otbpC2kfjei1QmK5a7iDC6noRtlg8ljKwUg=)
                          3: B3110B8E5D6F11F181938A5ABF833773.roa (hash: 88VWidR+c8KxMwBLDiaixZqZwAYAjFYw2RjtohjUp1A=)
                          4: 45A587CE540911F181B8BB5591833773.roa (hash: tHX02Ge/HSWD6wrR/8JkpM5CyXcYX10IE87OI0QCTUo=)
                          5: C6EB59A8514811F18C98F063A3833773.roa (hash: +M6AGrSBwc8D2/Ub0BOuDHUMRKDibhdsw0NIJ/WIkdQ=)
                          6: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: qDBbxutM6whAYRqUGL23M9IPWqduEyKAvV9efNJXIMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 23:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583 (0x62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
        Validity
            Not Before: Aug  4 23:42:21 2026 GMT
            Not After : Aug 11 23:42:21 2026 GMT
        Subject: CN=6a7278dd-8908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:f7:97:72:a6:86:27:47:67:6a:83:2f:ad:
                    d5:1b:76:34:2c:3b:a6:b8:52:b1:47:32:94:5a:f3:
                    a5:56:67:9f:30:77:d1:aa:70:47:e4:37:af:72:88:
                    74:e5:d8:be:c8:37:0d:4f:91:f1:b1:6b:23:bf:1c:
                    f8:a8:22:f7:69:3b:e3:a7:28:b9:8a:58:2d:92:e7:
                    2b:6d:b6:5a:8e:27:61:9d:62:a5:80:50:9f:f8:5a:
                    cc:4c:f0:93:68:1b:8b:18:fc:5a:c5:eb:b4:ab:63:
                    7d:37:26:80:6d:38:86:70:b1:9b:26:f9:3c:f4:d8:
                    a2:4c:ef:72:fd:29:43:f0:37:84:9f:19:e2:aa:fb:
                    46:b0:5b:c4:94:77:fa:a3:cf:61:16:84:2c:00:42:
                    7a:c6:e7:e5:51:5b:5f:52:9c:ad:86:3f:83:3e:85:
                    8e:8b:ea:4a:ab:30:a3:51:1b:c8:22:2a:4c:e9:8d:
                    03:42:57:48:a8:2f:4d:a7:7c:df:e7:b6:a2:d9:e1:
                    9f:ed:05:a2:1e:e7:89:1d:d2:1c:44:a1:e7:6e:78:
                    11:db:c5:26:ea:91:ac:b3:26:0d:04:bd:39:fa:6d:
                    81:6e:b3:14:5f:98:35:b0:31:87:82:d8:bf:b7:e7:
                    fd:68:a6:25:a6:67:c0:6a:01:3d:48:14:50:83:bf:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:26:23:CD:8A:75:3A:7E:37:F5:53:6D:8F:3D:74:40:35:71:01:6D
            X509v3 Authority Key Identifier:
                keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ee:52:41:ed:bb:43:a5:53:03:26:26:67:ca:9d:4e:17:b3:
         70:2c:de:5b:cd:30:90:74:53:e5:2f:78:40:37:da:5b:8a:b2:
         05:8f:10:01:26:91:57:54:fd:49:7d:33:54:d9:dc:dc:ea:c2:
         a9:fd:87:48:31:39:9c:d9:97:e5:e9:0d:21:9e:4d:da:21:f7:
         70:69:a1:f4:0d:38:f9:e8:b2:de:ca:fb:e7:0a:1c:8d:87:6b:
         8b:47:7d:d8:94:b4:09:93:bd:74:46:94:80:a5:c6:1d:3d:91:
         af:a7:b0:d0:ea:89:20:4b:78:1c:fe:b1:1f:1c:e2:76:35:6b:
         57:15:32:42:20:b2:6d:76:b9:7c:c8:21:58:08:7a:d3:18:2b:
         5f:f7:ce:72:61:4b:d1:35:5b:cd:4e:8e:2e:d6:d8:f3:8b:4d:
         78:ca:33:28:74:0c:fc:71:fa:9d:4c:4c:d3:24:03:0e:82:07:
         8a:d3:52:6e:9f:1d:51:80:22:1d:dd:dd:a7:5f:ab:81:58:6c:
         56:02:ef:0b:88:e9:14:2d:6c:c8:77:d2:a2:9b:3e:47:f2:aa:
         68:50:46:be:5b:46:5b:b9:bc:19:a7:92:6d:ee:66:38:75:f8:
         30:cb:a6:41:7f:ed:36:1a:c9:2f:ce:c9:d4:a2:6a:bc:ab:5b:
         7d:73:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 23:10:58 2026 by rpki-client