Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
File:                     ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json)
Hash identifier:          QaTikW4L/P8phw0jo41rZ7M7lSSXzVkoslsw7l+QI1M=
Subject key identifier:   5D:47:70:87:6C:CE:58:05:6C:85:C3:5F:A1:13:F0:46:F9:91:12:78
Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
Certificate issuer:       /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Certificate serial:       2439
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
Manifest number:          2426
Signing time:             Tue 28 Jul 2026 15:53:13 +0000
Manifest this update:     Tue 28 Jul 2026 15:53:12 +0000
Manifest next update:     Tue 04 Aug 2026 15:53:12 +0000
Files and hashes:         1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: apFQB0olKdMln8H7D5Ukl3JlujGhtTA8/NzkiqF4hb4=)
                          2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: FMM9PWbU/oYp9w4GxmMR0Bnc2OElJZUE63nkK8Lt4YE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
                          rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9273 (0x2439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
        Validity
            Not Before: Jul 28 15:53:12 2026 GMT
            Not After : Aug  4 15:53:12 2026 GMT
        Subject: CN=6a68d068-16e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:dc:a9:f3:6b:6a:51:0d:be:d8:b8:c7:1d:
                    4b:d2:22:81:ca:8d:eb:df:4b:8f:e5:05:86:94:a1:
                    ce:4d:75:a8:55:f2:6c:14:81:a8:03:9a:d8:5b:6c:
                    d1:6e:48:f9:3b:08:12:6f:33:fd:d9:04:18:d5:fd:
                    df:56:54:54:88:eb:48:fb:02:01:11:6e:79:5e:d8:
                    cd:90:bc:95:1d:fa:82:79:8e:84:4e:85:9b:ad:12:
                    e1:c8:38:44:54:79:d5:8f:8d:3e:97:5e:25:d9:1a:
                    6d:91:88:f1:a3:64:71:76:4f:5d:81:84:b3:22:98:
                    15:ca:aa:9e:21:8b:6d:dc:84:49:42:e4:ae:4a:10:
                    40:ff:54:be:fc:57:21:a2:1e:3b:59:73:1d:7e:2d:
                    81:20:da:3b:e4:34:88:d7:42:a4:e6:b0:1d:82:96:
                    e9:06:8b:34:ab:1a:57:28:3d:a8:22:06:7d:4d:fa:
                    23:c4:53:eb:97:6a:f9:f1:d0:39:85:23:bd:0b:b4:
                    81:66:18:4c:a8:05:6c:ad:32:fd:a5:2b:08:ca:1a:
                    ce:86:73:ac:02:42:b1:c3:ed:60:57:56:82:da:d6:
                    53:74:53:f3:f5:27:2c:12:7b:72:6b:a9:5e:83:e9:
                    35:1c:c2:af:3c:ad:ee:9a:fc:90:d4:94:cf:b0:8f:
                    b8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:47:70:87:6C:CE:58:05:6C:85:C3:5F:A1:13:F0:46:F9:91:12:78
            X509v3 Authority Key Identifier:
                keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:52:60:65:f5:cd:59:8f:29:0a:64:c5:90:13:7f:75:22:22:
         d0:9f:8d:21:65:ad:66:98:18:0e:71:b0:21:87:05:b1:bc:31:
         41:ca:b8:05:72:31:0a:ab:13:e3:66:da:2f:aa:53:b9:d5:04:
         d5:db:c5:fe:fe:1b:04:e1:1e:f9:cc:f4:df:10:bb:89:4a:25:
         7d:fd:07:3c:b7:49:c8:dc:0f:41:c7:be:f5:fa:81:cb:8c:80:
         df:0e:3c:02:34:99:8f:56:6e:80:3c:05:44:2f:7e:71:33:44:
         43:43:bf:37:de:e2:07:82:3a:80:8d:5c:1c:0a:fd:e2:07:fc:
         0e:3a:30:f2:22:c1:0e:3d:b2:4c:d5:6a:91:43:08:87:6e:c5:
         db:6a:4e:dc:6f:84:1d:61:c2:5f:95:9e:38:c0:a4:41:b2:fe:
         95:fb:13:c1:60:38:e2:fa:4b:0d:d7:0a:ef:a4:89:f2:7a:00:
         ae:56:82:c2:4f:9f:80:35:de:43:89:89:53:2e:0e:11:48:c4:
         95:71:03:0a:0c:24:2c:bf:b7:d3:d7:c7:55:13:62:fe:84:a9:
         79:3e:74:54:e8:13:16:d6:3a:98:7e:65:36:e4:05:f3:93:ec:
         24:02:45:e8:eb:75:ea:80:6f:73:a5:90:66:ce:8e:18:57:36:
         78:39:9a:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB
MzFGRDlCOEEwHhcNMjYwNzI4MTU1MzEyWhcNMjYwODA0MTU1MzEyWjAYMRYwFAYD
VQQDEw02YTY4ZDA2OC0xNmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAufjcqfNralENvti4xx1L0iKByo3r30uP5QWGlKHOTXWoVfJsFIGoA5rYW2zR
bkj5OwgSbzP92QQY1f3fVlRUiOtI+wIBEW55XtjNkLyVHfqCeY6EToWbrRLhyDhE
VHnVj40+l14l2RptkYjxo2Rxdk9dgYSzIpgVyqqeIYtt3IRJQuSuShBA/1S+/Fch
oh47WXMdfi2BINo75DSI10Kk5rAdgpbpBos0qxpXKD2oIgZ9TfojxFPrl2r58dA5
hSO9C7SBZhhMqAVsrTL9pSsIyhrOhnOsAkKxw+1gV1aC2tZTdFPz9ScsEntya6le
g+k1HMKvPK3umvyQ1JTPsI+4TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF1HcIds
zlgFbIXDX6ET8Eb5kRJ4MB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz
OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW
aHVMTUViSjVWeldqSDltNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhlJgZfXNWY8pCmTFkBN/dSIi0J+NIWWtZpgYDnGwIYcFsbwxQcq4BXIxCqsT
42baL6pTudUE1dvF/v4bBOEe+cz03xC7iUolff0HPLdJyNwPQce+9fqBy4yA3w48
AjSZj1ZugDwFRC9+cTNEQ0O/N97iB4I6gI1cHAr94gf8Djow8iLBDj2yTNVqkUMI
h27F22pO3G+EHWHCX5WeOMCkQbL+lfsTwWA44vpLDdcK76SJ8noArlaCwk+fgDXe
Q4mJUy4OEUjElXEDCgwkLL+309fHVRNi/oSpeT50VOgTFtY6mH5lNuQF85PsJAJF
6Ot16oBvc6WQZs6OGFc2eDmayA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:10:22 2026 by rpki-client