Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
File:                     zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json)
Hash identifier:          noOJlBp0LuSgJ7OeULqxOzAYMzLS8y6eZrqhDLCxTh8=
Subject key identifier:   3A:7A:99:51:1D:F2:2E:33:F2:93:E7:E0:8F:32:F9:D1:82:73:49:7C
Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4
Certificate issuer:       /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
Certificate serial:       067A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
Manifest number:          0679
Signing time:             Sun 26 Jul 2026 23:23:16 +0000
Manifest this update:     Sun 26 Jul 2026 23:23:16 +0000
Manifest next update:     Sun 02 Aug 2026 23:23:16 +0000
Files and hashes:         1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: 9VwXGRXUienKbRVjtdCLKwIrrBFQlWh4evVZMOOdFug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl
                          rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1658 (0x67a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
        Validity
            Not Before: Jul 26 23:23:16 2026 GMT
            Not After : Aug  2 23:23:16 2026 GMT
        Subject: CN=6a6696e4-9102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:21:e9:70:8e:66:58:67:5e:8a:bb:5a:32:7a:
                    96:74:6c:59:52:52:22:ab:ce:53:f5:3d:ee:09:5d:
                    97:50:a6:04:3a:9b:8c:02:30:f9:14:57:d9:c8:2a:
                    62:48:0a:e7:71:86:05:87:2c:4c:92:8d:e5:f6:29:
                    5e:ff:99:67:42:91:f7:25:46:dc:21:7a:f0:64:b8:
                    af:2a:21:bd:2a:3c:cd:58:97:52:45:da:2a:ca:87:
                    3f:0b:f0:e3:8c:8f:cb:e5:52:09:7e:f8:30:09:2b:
                    81:72:55:57:79:22:c3:90:ad:ef:88:86:cf:88:fe:
                    08:64:3e:37:47:90:36:29:ff:d1:b1:6c:d7:1e:de:
                    37:27:74:e6:69:d0:2c:19:0a:af:ba:3b:ed:8a:5c:
                    4e:79:bc:23:65:ad:a6:60:76:fd:42:fb:b8:2c:2d:
                    1c:ce:84:59:40:99:15:3e:e5:84:c4:36:46:13:65:
                    f9:86:0a:cf:a8:c6:88:11:6c:b5:04:44:49:71:3b:
                    6c:8d:62:6b:a9:d2:f2:4f:3a:82:e2:39:1d:d8:12:
                    cf:7b:bc:31:bf:a9:d5:95:64:43:3c:8d:05:f1:4f:
                    2b:3d:29:cb:bc:f5:fd:49:7a:e5:9d:8f:ab:bc:ee:
                    16:f2:87:d9:c3:45:d0:1e:d5:0d:69:a6:20:50:51:
                    9b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7A:99:51:1D:F2:2E:33:F2:93:E7:E0:8F:32:F9:D1:82:73:49:7C
            X509v3 Authority Key Identifier:
                keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6b:a9:dd:ab:8d:c2:e3:d9:bf:e7:cd:a8:7f:43:a5:44:62:
         16:53:2e:cc:d2:16:00:ba:8b:70:4d:21:82:c4:2e:b3:52:31:
         fa:f5:ae:73:ac:08:72:4e:7f:24:e9:7e:a5:72:4f:f5:93:f1:
         e8:b6:9b:44:d7:7c:10:db:e0:85:2a:74:2c:53:08:6d:19:61:
         a9:a1:45:f3:39:50:24:18:75:e7:28:f2:f2:b7:47:cf:ff:9b:
         2f:05:e1:f1:f4:23:4e:f4:4d:61:e8:79:36:6f:b0:15:ac:be:
         5e:cf:3a:32:2d:29:56:da:6c:73:5d:b5:30:9b:d9:3e:e6:da:
         74:81:5b:5a:1a:91:44:e0:99:8a:47:7e:10:c2:59:58:9e:c6:
         1a:eb:40:96:c8:49:d7:45:6c:da:51:fc:19:03:07:a5:52:89:
         25:98:66:75:83:a0:b5:a1:36:b9:01:f5:de:9b:be:3e:8c:b4:
         88:58:70:4b:5a:81:24:d2:86:f0:41:7d:a0:f5:e3:51:79:01:
         7c:13:98:85:b4:63:22:99:b2:fb:0b:a9:7f:ac:ac:c8:5e:02:
         a0:22:13:a4:18:1a:13:18:86:88:5d:96:d7:0a:a0:4d:5a:ce:
         b5:90:6e:08:3b:91:0a:54:57:7b:eb:a3:29:0c:06:57:7b:b4:
         bf:8e:e1:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJFNEUxMTAvBgNVBAUTKENFNTJEODc3NzBBMzI1MkJEMUY0QzkxMjZDQjVENUQx
QjdEOUZCRjQwHhcNMjYwNzI2MjMyMzE2WhcNMjYwODAyMjMyMzE2WjAYMRYwFAYD
VQQDEw02YTY2OTZlNC05MTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiiHpcI5mWGdeirtaMnqWdGxZUlIiq85T9T3uCV2XUKYEOpuMAjD5FFfZyCpi
SArncYYFhyxMko3l9ile/5lnQpH3JUbcIXrwZLivKiG9KjzNWJdSRdoqyoc/C/Dj
jI/L5VIJfvgwCSuBclVXeSLDkK3viIbPiP4IZD43R5A2Kf/RsWzXHt43J3TmadAs
GQqvujvtilxOebwjZa2mYHb9Qvu4LC0czoRZQJkVPuWExDZGE2X5hgrPqMaIEWy1
BERJcTtsjWJrqdLyTzqC4jkd2BLPe7wxv6nVlWRDPI0F8U8rPSnLvPX9SXrlnY+r
vO4W8ofZw0XQHtUNaaYgUFGbqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDp6mVEd
8i4z8pPn4I8y+dGCc0l8MB8GA1UdIwQYMBaAFM5S2HdwoyUr0fTJEmy11dG32fv0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0RS80ODJEREQ2NENF
QUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpTdlI5TWtTYkxYVjBiZlot
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3psTFlkM0NqSlN2UjlNa1NiTFhWMGJmWi1fUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkU0RS80ODJEREQ2NENFQUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpT
dlI5TWtTYkxYVjBiZlotX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARWup3auNwuPZv+fNqH9DpURiFlMuzNIWALqLcE0hgsQus1Ix+vWuc6wIck5/
JOl+pXJP9ZPx6LabRNd8ENvghSp0LFMIbRlhqaFF8zlQJBh15yjy8rdHz/+bLwXh
8fQjTvRNYeh5Nm+wFay+Xs86Mi0pVtpsc121MJvZPubadIFbWhqRROCZikd+EMJZ
WJ7GGutAlshJ10Vs2lH8GQMHpVKJJZhmdYOgtaE2uQH13pu+Poy0iFhwS1qBJNKG
8EF9oPXjUXkBfBOYhbRjIpmy+wupf6ysyF4CoCITpBgaExiGiF2W1wqgTVrOtZBu
CDuRClRXe+ujKQwGV3u0v47hDg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:00 2026 by rpki-client