Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
File:                     zk5vKarqdsaUOXp2Em3DgNPbb74.mft (raw, json)
Hash identifier:          wuvZMNVldu1r8WdDHsjJgFGldzAUrAbYfjKypviViyA=
Subject key identifier:   51:86:94:63:7E:FD:CF:37:2A:1A:53:2C:F0:3E:FD:D4:CB:A5:5C:EA
Authority key identifier: CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE
Certificate issuer:       /CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE
Certificate serial:       3563
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
Manifest number:          3563
Signing time:             Tue 28 Jul 2026 14:42:12 +0000
Manifest this update:     Tue 28 Jul 2026 14:42:11 +0000
Manifest next update:     Tue 04 Aug 2026 14:42:11 +0000
Files and hashes:         1: zk5vKarqdsaUOXp2Em3DgNPbb74.crl (hash: eFGordNFIhe1egCnukN7TPa1BL3zqEoKfXMojV9ZpKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl
                          rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13667 (0x3563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110B82, serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE
        Validity
            Not Before: Jul 28 14:42:11 2026 GMT
            Not After : Aug  4 14:42:11 2026 GMT
        Subject: CN=6a68bfc4-53e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:0e:8b:98:81:3a:fe:03:26:8c:77:01:61:
                    bb:fd:d0:7e:5c:36:03:f8:67:c9:2b:20:8f:84:70:
                    c5:01:dc:06:93:d8:ec:35:fb:c6:26:35:6b:68:42:
                    42:3d:21:ef:c6:cf:52:49:bb:ca:a5:cb:6e:d9:8f:
                    e9:10:64:0f:d8:5c:29:d9:21:a9:84:49:5d:fb:a2:
                    4e:aa:df:d4:39:0b:a8:cd:85:dc:26:26:e3:dd:59:
                    d5:12:f8:8f:6e:64:3b:0a:7b:ee:e0:1b:6c:e5:08:
                    33:d9:aa:c6:c7:68:0a:aa:d2:92:99:54:c6:56:e6:
                    08:10:27:63:87:a9:7f:5d:bf:2f:8c:ed:61:42:e0:
                    9d:49:fa:32:18:43:b5:d8:a8:70:42:25:14:49:73:
                    9b:40:8f:30:1b:86:bd:80:9a:b1:88:f4:ee:36:7e:
                    47:fa:71:f3:ed:a8:5e:bd:06:d0:76:d4:8f:0a:08:
                    2e:12:af:a0:79:87:c1:44:7f:e2:ed:f1:6f:2a:3a:
                    a7:48:50:97:79:e1:a4:7d:8a:a6:fc:6b:bd:78:c9:
                    f1:23:5c:75:4d:38:70:d1:58:65:76:49:a1:cd:4a:
                    d5:dc:ae:2a:92:c7:8b:c1:38:5d:14:0e:ee:7c:70:
                    ad:77:89:db:8b:51:25:9b:49:b1:a1:14:f5:fa:45:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:86:94:63:7E:FD:CF:37:2A:1A:53:2C:F0:3E:FD:D4:CB:A5:5C:EA
            X509v3 Authority Key Identifier:
                keyid:CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:52:da:61:35:53:e5:ca:ff:08:af:02:28:0a:67:d3:7d:37:
         9f:94:d5:61:2a:f9:a2:fa:2a:39:8d:c1:87:55:e0:53:16:11:
         a1:e7:c0:e8:97:00:7d:4e:29:5e:a6:17:f1:13:71:f4:a4:d9:
         a3:8b:ca:c7:49:de:c1:5b:9c:08:2a:b8:ef:f0:9a:98:d5:ee:
         24:f8:4f:54:d5:08:e7:4c:fa:9f:56:ed:97:4c:18:ee:b2:5d:
         19:ad:ad:c0:a4:6f:36:cf:c1:68:0f:03:0f:d9:a1:e4:a1:00:
         2b:1e:b7:01:07:e7:73:7b:85:57:04:28:9a:5b:08:fe:3f:51:
         e7:8a:49:66:9a:cc:15:6a:b8:26:3e:96:ae:ae:19:af:80:c7:
         30:2a:51:0d:ef:d5:b8:50:51:e3:ab:9a:c4:2d:06:9a:44:52:
         68:3b:88:24:78:80:ae:27:27:54:6b:b0:c4:32:5a:1c:6e:98:
         d9:45:01:86:9e:a5:98:54:91:8e:30:1d:7f:d8:0c:f4:31:d6:
         9a:a9:62:cd:d3:58:c8:59:37:51:bf:ce:d3:57:21:44:ed:c7:
         a1:f8:b5:f1:fc:99:d7:d9:f8:0a:d5:ac:84:57:2d:39:5e:fe:
         9c:70:ad:f3:35:a2:84:92:d1:03:44:a3:3e:3d:5a:58:31:d3:
         66:bb:b3:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBCODIxMTAvBgNVBAUTKENFNEU2RjI5QUFFQTc2QzY5NDM5N0E3NjEyNkRDMzgw
RDNEQjZGQkUwHhcNMjYwNzI4MTQ0MjExWhcNMjYwODA0MTQ0MjExWjAYMRYwFAYD
VQQDEw02YTY4YmZjNC01M2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuXYOi5iBOv4DJox3AWG7/dB+XDYD+GfJKyCPhHDFAdwGk9jsNfvGJjVraEJC
PSHvxs9SSbvKpctu2Y/pEGQP2Fwp2SGphEld+6JOqt/UOQuozYXcJibj3VnVEviP
bmQ7Cnvu4Bts5Qgz2arGx2gKqtKSmVTGVuYIECdjh6l/Xb8vjO1hQuCdSfoyGEO1
2KhwQiUUSXObQI8wG4a9gJqxiPTuNn5H+nHz7ahevQbQdtSPCgguEq+geYfBRH/i
7fFvKjqnSFCXeeGkfYqm/Gu9eMnxI1x1TThw0VhldkmhzUrV3K4qkseLwThdFA7u
fHCtd4nbi1Elm0mxoRT1+kWjBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFGGlGN+
/c83KhpTLPA+/dTLpVzqMB8GA1UdIwQYMBaAFM5Obymq6nbGlDl6dhJtw4DT22++
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEI4Mi8yM0Q0QUNCNjFE
OEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRzYVVPWHAyRW0zRGdOUGJi
NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3prNXZLYXJxZHNhVU9YcDJFbTNEZ05QYmI3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEI4Mi8yM0Q0QUNCNjFEOEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRz
YVVPWHAyRW0zRGdOUGJiNzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaFLaYTVT5cr/CK8CKApn0303n5TVYSr5ovoqOY3Bh1XgUxYRoefA6JcAfU4p
XqYX8RNx9KTZo4vKx0newVucCCq47/CamNXuJPhPVNUI50z6n1btl0wY7rJdGa2t
wKRvNs/BaA8DD9mh5KEAKx63AQfnc3uFVwQomlsI/j9R54pJZprMFWq4Jj6Wrq4Z
r4DHMCpRDe/VuFBR46uaxC0GmkRSaDuIJHiAricnVGuwxDJaHG6Y2UUBhp6lmFSR
jjAdf9gM9DHWmqlizdNYyFk3Ub/O01chRO3Hofi18fyZ19n4CtWshFctOV7+nHCt
8zWihJLRA0SjPj1aWDHTZruzSQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:02 2026 by rpki-client