Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
File:                     ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json)
Hash identifier:          NgQ1wTx5FVn4uetikf0hTVww9LrEnSYr99LsDIlrypA=
Subject key identifier:   BC:67:46:BB:B9:EA:5F:F1:34:C9:BD:DB:B6:BD:76:52:0E:93:6A:6C
Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
Certificate issuer:       /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
Manifest number:          9F
Signing time:             Mon 27 Jul 2026 09:25:26 +0000
Manifest this update:     Mon 27 Jul 2026 09:25:26 +0000
Manifest next update:     Mon 03 Aug 2026 09:25:26 +0000
Files and hashes:         1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: aAnfuK+yRXlbTBiEPXR/TsHrTSRzugPNO01i8t4qUZE=)
                          2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: ywYpRYCAQwXCZMjr3c7Rlx0ujNmnV92c95uYASJL2t0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
                          rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
        Validity
            Not Before: Jul 27 09:25:26 2026 GMT
            Not After : Aug  3 09:25:26 2026 GMT
        Subject: CN=6a672406-3cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ba:f1:d5:0d:a6:8b:b2:bd:3b:f1:9b:cf:9b:
                    34:88:fd:f7:7a:29:90:86:59:5b:8f:2b:b8:51:59:
                    6f:4e:fb:05:00:b4:50:f8:6f:a8:bf:ad:1b:30:82:
                    64:be:2e:44:e7:02:5f:9a:b9:07:ea:4f:b4:57:7f:
                    d9:ce:0a:c2:b8:bb:c6:bf:a8:a0:4f:c2:01:fd:73:
                    cd:06:94:bf:8e:c0:8f:61:8f:66:2b:17:a0:18:3d:
                    2a:95:2e:ac:fb:31:91:06:2b:35:92:81:f0:40:76:
                    a3:42:37:ae:e5:0b:56:5e:92:81:b9:73:5d:87:db:
                    e4:5c:bb:12:6a:69:c2:a1:d2:ba:97:b2:ed:11:3b:
                    40:60:a5:45:3b:07:8d:67:a2:3e:bc:62:84:b8:27:
                    e3:ad:9b:8b:20:f9:6a:e9:3d:1a:ef:92:4a:6f:d3:
                    f7:c8:ee:46:38:24:14:a2:aa:d8:f7:6f:33:9c:f2:
                    e5:34:75:16:c5:dc:97:41:28:2c:5b:ab:bb:01:03:
                    07:a0:ef:67:1b:49:6b:43:17:d3:e3:64:13:70:17:
                    27:d2:73:06:1a:fc:4f:06:29:9d:af:66:d9:fa:d9:
                    9c:eb:52:5e:18:24:0c:f0:f5:0d:e9:4c:0c:68:ae:
                    cd:31:a5:6f:67:27:3d:20:dd:28:0d:24:bf:20:16:
                    e8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:67:46:BB:B9:EA:5F:F1:34:C9:BD:DB:B6:BD:76:52:0E:93:6A:6C
            X509v3 Authority Key Identifier:
                keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:4c:eb:d4:28:3c:7a:cc:30:98:f6:2a:19:90:f5:39:5f:7c:
         63:61:5f:ea:26:f4:d5:ed:75:93:38:0d:4c:53:8e:9b:cb:d7:
         32:2b:8f:e4:98:07:14:92:81:0f:57:ea:d6:33:58:38:a0:ac:
         93:07:8f:bf:95:1f:b3:01:1c:fe:ff:ed:b7:83:70:c7:e8:8e:
         cf:8b:21:40:d4:c4:99:eb:59:38:9a:fd:df:c8:ba:74:12:5b:
         07:63:bb:6c:13:da:69:da:0f:33:2e:63:f5:14:52:64:0c:14:
         58:a9:7a:34:9b:b8:0c:95:8f:57:19:12:07:df:87:44:3d:11:
         20:19:ac:9b:56:3d:e7:d1:a3:34:55:31:04:71:39:55:76:ba:
         9b:bb:44:dc:2a:ac:5e:33:60:1b:f2:fd:71:69:ba:bf:8f:24:
         6d:2d:57:86:44:54:1d:1f:9e:09:20:27:c6:2f:02:49:5f:12:
         ab:ed:6b:a5:66:9b:d1:ce:3b:42:cb:8e:68:cd:01:e4:1b:50:
         7e:c7:b9:4c:47:9d:96:00:8f:6f:d1:7f:ff:d3:88:9e:90:48:
         9b:8a:b9:35:79:db:5b:db:37:f8:d7:52:78:06:7a:28:1a:e4:
         04:ae:29:46:d4:f4:02:07:7b:df:f0:c5:0b:6a:24:88:1f:79:
         18:18:54:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkYxNEQxMTAvBgNVBAUTKDY0Mzc3RTg3MTg2NkREMzc0RUM1OUUyMzgzQkExMEZB
NkEzMUZGRkQwHhcNMjYwNzI3MDkyNTI2WhcNMjYwODAzMDkyNTI2WjAYMRYwFAYD
VQQDEw02YTY3MjQwNi0zY2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmbrx1Q2mi7K9O/Gbz5s0iP33eimQhllbjyu4UVlvTvsFALRQ+G+ov60bMIJk
vi5E5wJfmrkH6k+0V3/ZzgrCuLvGv6igT8IB/XPNBpS/jsCPYY9mKxegGD0qlS6s
+zGRBis1koHwQHajQjeu5QtWXpKBuXNdh9vkXLsSamnCodK6l7LtETtAYKVFOweN
Z6I+vGKEuCfjrZuLIPlq6T0a75JKb9P3yO5GOCQUoqrY928znPLlNHUWxdyXQSgs
W6u7AQMHoO9nG0lrQxfT42QTcBcn0nMGGvxPBimdr2bZ+tmc61JeGCQM8PUN6UwM
aK7NMaVvZyc9IN0oDSS/IBboGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxnRru5
6l/xNMm927a9dlIOk2psMB8GA1UdIwQYMBaAFGQ3focYZt03TsWeI4O6EPpqMf/9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE0RC85MzUyQ0Q1RTkz
OUExMUYwOThCODJDMEVDNEY5QUUwMi9aRGQtaHhobTNUZE94WjRqZzdvUS1tb3hf
XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pEZC1oeGhtM1RkT3haNGpnN29RLW1veF9fMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjE0RC85MzUyQ0Q1RTkzOUExMUYwOThCODJDMEVDNEY5QUUwMi9aRGQtaHhobTNU
ZE94WjRqZzdvUS1tb3hfXzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe0zr1Cg8eswwmPYqGZD1OV98Y2Ff6ib01e11kzgNTFOOm8vXMiuP5JgHFJKB
D1fq1jNYOKCskwePv5UfswEc/v/tt4Nwx+iOz4shQNTEmetZOJr938i6dBJbB2O7
bBPaadoPMy5j9RRSZAwUWKl6NJu4DJWPVxkSB9+HRD0RIBmsm1Y959GjNFUxBHE5
VXa6m7tE3CqsXjNgG/L9cWm6v48kbS1XhkRUHR+eCSAnxi8CSV8Sq+1rpWab0c47
QsuOaM0B5BtQfse5TEedlgCPb9F//9OInpBIm4q5NXnbW9s3+NdSeAZ6KBrkBK4p
RtT0Agd73/DFC2okiB95GBhUIw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:46:49 2026 by rpki-client