Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
File:                     z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft (raw, json)
Hash identifier:          3GUrNWRT3W3U0w/5SBh6zRzx2gcujJhUTRueEwHiZ6g=
Subject key identifier:   38:B4:21:19:35:1C:A3:F8:12:4F:EA:64:92:30:C4:93:88:2D:30:08
Authority key identifier: CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF
Certificate issuer:       /CN=A91F8F9B/serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
Manifest number:          0167
Signing time:             Fri 17 Jul 2026 05:56:50 +0000
Manifest this update:     Fri 17 Jul 2026 05:56:49 +0000
Manifest next update:     Fri 24 Jul 2026 05:56:49 +0000
Files and hashes:         1: z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl (hash: UDQEClR+SeKmckK5AVF+axbm1EeuZBlJ0kikJ+K94yc=)
                          2: 7143C5B85DBF11EFB8714857C4F9AE02.roa (hash: HnPe7oTE/NJwLfNgQpYdaZfEzbuO3TebzvAvQ+UM9po=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl
                          rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8F9B, serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
        Validity
            Not Before: Jul 17 05:56:49 2026 GMT
            Not After : Jul 24 05:56:49 2026 GMT
        Subject: CN=6a59c422-b140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:57:fe:44:a8:98:a4:59:08:a9:a7:bb:b9:8a:
                    e7:95:ab:77:4a:c8:7b:e6:1b:1b:b4:c1:19:1e:6b:
                    01:04:e8:de:88:fc:be:32:08:85:62:3c:fa:fb:57:
                    5d:dd:dc:fd:c6:a0:7c:93:f1:3e:86:53:04:9d:35:
                    84:09:48:c5:30:dd:8e:13:73:ba:1f:2b:af:27:9b:
                    43:6d:a0:59:19:78:9d:ed:ca:b5:73:78:d7:ba:c5:
                    0d:ea:2c:ff:97:04:3c:f2:42:08:d7:16:a2:56:b5:
                    9f:32:28:8c:2a:f1:d6:c2:ee:7c:69:ad:92:11:1e:
                    ab:cf:0d:53:9a:73:d9:e2:a4:be:27:f0:ab:2c:93:
                    c5:12:d5:0f:6a:5a:f6:f1:e6:bd:fb:02:8e:18:5c:
                    c5:bf:b8:f7:b6:82:ea:91:8e:21:cc:99:d4:35:d9:
                    e7:91:ea:81:07:ae:13:4c:46:d1:90:76:de:f4:ed:
                    1b:4c:04:00:4b:42:5b:dc:1b:42:97:4e:b7:80:b3:
                    2b:50:ba:5d:97:49:a2:31:9b:26:4e:f1:79:fb:db:
                    dc:95:e8:7a:05:e1:17:3b:01:f2:ba:7c:f3:52:a9:
                    af:2f:a7:f8:e9:ce:df:65:12:f4:01:31:f5:f7:3a:
                    21:0a:d9:38:93:fd:ee:21:da:9b:6c:a7:e5:57:92:
                    4d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B4:21:19:35:1C:A3:F8:12:4F:EA:64:92:30:C4:93:88:2D:30:08
            X509v3 Authority Key Identifier:
                keyid:CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:73:91:8c:ea:30:6f:be:99:d4:36:4e:65:71:fe:87:63:41:
         3b:1d:ff:59:b3:c4:57:c7:e8:5b:c6:ea:21:a6:e2:1e:71:05:
         ed:93:87:9f:36:20:4a:9b:ec:7d:91:3c:3e:ed:95:e6:02:10:
         10:7b:f7:e3:48:7b:31:84:23:45:b9:ca:a4:6f:4b:2e:1c:d9:
         68:1b:a7:dd:03:b4:15:bd:02:5b:cf:df:4f:15:4d:42:8f:e3:
         d6:92:42:62:e0:49:24:13:d9:8a:c6:7d:f8:c2:93:5d:91:b4:
         e7:4c:da:89:3d:33:95:64:7a:23:b1:e9:df:15:e5:75:c6:7f:
         f3:bb:ea:f6:82:3c:08:af:c0:ca:e8:89:df:9d:c8:d6:ef:28:
         a3:f2:4b:34:41:ef:da:b4:5e:11:66:15:fb:f4:ab:c7:19:4a:
         43:42:39:ff:55:0f:34:6e:83:9f:2c:3b:88:2a:55:51:24:22:
         4c:58:df:89:c1:cb:c9:d3:d8:ac:98:b6:69:b7:df:04:a6:8d:
         96:d9:de:69:c7:9c:cb:40:2f:2b:2c:7b:62:95:03:ea:0d:69:
         75:ba:3c:b2:7f:c1:0a:31:a4:d8:ce:f3:9c:66:43:2d:dd:bc:
         40:ce:27:b0:00:98:7f:d1:39:ce:df:1c:e2:c6:cb:7f:a0:34:
         55:4e:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:10 2026 by rpki-client