Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
File:                     Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json)
Hash identifier:          lj0NreE/OuKzZvHtF+88nRNr51iElrWBSbC7vyROXvk=
Subject key identifier:   50:DA:13:D9:45:30:95:C3:20:E2:79:95:09:EE:E3:50:0D:7B:53:A7
Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
Certificate issuer:       /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Certificate serial:       0651
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
Manifest number:          0642
Signing time:             Tue 18 Aug 2026 23:04:50 +0000
Manifest this update:     Tue 18 Aug 2026 23:04:49 +0000
Manifest next update:     Tue 25 Aug 2026 23:04:49 +0000
Files and hashes:         1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: Naf9uKQqdAjiE3RtybVktOjrODOyxgwYA8DjBoyYy5w=)
                          2: 0FAA7244A7D211F0BEE84D58C4F9AE02.roa (hash: MlIegAxmiZi8feLlk0p4rXujBJW9bxtTttiOOMZiwZ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
                          rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6194, serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
        Validity
            Not Before: Aug 18 23:04:49 2026 GMT
            Not After : Aug 25 23:04:49 2026 GMT
        Subject: CN=6a84e512-a6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:82:f9:db:50:cc:bc:ff:99:dc:c8:9d:4b:9c:
                    d9:66:e3:a6:da:83:71:b9:2f:a6:ca:9e:c1:5f:34:
                    19:bd:d6:5a:e2:d6:1c:73:86:8c:47:d0:08:41:52:
                    6c:b8:6e:3c:f0:3d:38:4c:c1:7b:e6:25:9e:77:32:
                    a6:63:4a:fb:b7:d6:5e:89:29:33:36:92:4d:68:80:
                    39:fc:d1:98:8d:8c:a7:da:c1:c3:a3:b8:28:81:80:
                    6e:9c:3c:3c:c2:c1:43:fe:ce:ed:8c:d1:06:c6:9c:
                    3a:fe:60:56:d3:7c:62:31:1f:15:b8:a2:6a:ac:95:
                    53:e2:d8:03:d5:cd:00:51:8f:76:75:66:36:86:df:
                    a2:29:bc:04:ce:e0:3d:a1:56:86:4a:ee:0a:73:7f:
                    bd:35:ad:1c:d4:77:cb:a7:e6:c6:46:92:90:08:77:
                    34:5e:d1:4f:0a:12:8c:30:fe:24:7d:d3:a9:7d:38:
                    be:5f:6b:78:76:43:85:4a:27:d5:67:ac:d0:9e:8f:
                    40:08:cc:42:31:7c:f6:f2:57:24:ad:68:35:7b:6d:
                    66:5e:a8:52:72:33:e9:fa:cf:82:64:25:be:da:58:
                    80:ce:c4:92:62:9a:aa:cc:be:0f:96:bb:45:51:8d:
                    c9:94:82:24:5c:cf:3c:2e:15:4a:be:e9:e0:16:fd:
                    f9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DA:13:D9:45:30:95:C3:20:E2:79:95:09:EE:E3:50:0D:7B:53:A7
            X509v3 Authority Key Identifier:
                keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8e:bb:e1:32:bc:c8:33:96:c9:19:f7:8c:0c:af:19:64:a5:
         9d:e8:9b:09:36:bf:ac:7f:d9:2e:67:5a:f6:9c:49:9b:74:57:
         4f:b1:d9:b0:9c:ee:9f:80:0f:87:11:aa:7e:cd:de:1b:56:15:
         eb:7e:a1:5b:9a:ed:dd:7c:86:83:3e:95:bd:b4:63:ca:ed:90:
         53:2a:72:4d:6d:b9:14:da:fc:8e:10:4f:e0:e6:49:9d:eb:8d:
         b8:a9:20:b1:bf:eb:d3:b4:da:80:86:1c:36:5a:66:6c:09:8f:
         6b:81:f2:6c:a3:00:d9:a8:50:6e:66:c8:e8:79:01:91:7f:fd:
         fe:73:93:07:af:96:d9:17:4f:ad:82:0a:67:eb:ef:62:d5:c2:
         0c:04:d6:af:2e:25:57:c5:b8:26:c7:b2:e9:f9:fe:87:dd:a1:
         34:65:b9:4c:c7:ba:e2:5c:23:11:ea:41:fc:c1:b9:49:81:c2:
         4d:bd:32:32:09:1f:40:63:32:53:a7:b6:ef:41:67:f1:10:91:
         48:9d:69:a7:bb:19:3f:dc:0e:41:97:d6:93:78:61:08:58:aa:
         c7:3b:08:36:2f:b9:0b:4e:1c:2f:26:66:31:51:f0:56:7d:d7:
         dd:57:6e:20:75:60:f8:ba:9d:d2:30:dc:d9:c1:7c:f1:5c:28:
         1e:c2:9e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:32:36 2026 by rpki-client