Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
File:                     ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft (raw, json)
Hash identifier:          cnemrJt0su23GOIAWAEN3rPDBMEj3uckrAzv+uc1Azg=
Subject key identifier:   2D:A7:76:7E:EB:0D:2F:2B:DE:CA:7C:80:B9:A1:44:72:38:C2:EB:22
Authority key identifier: 66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
Certificate issuer:       /CN=A9131194/serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
Manifest number:          91
Signing time:             Mon 27 Jul 2026 09:40:21 +0000
Manifest this update:     Mon 27 Jul 2026 09:40:21 +0000
Manifest next update:     Mon 03 Aug 2026 09:40:21 +0000
Files and hashes:         1: ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl (hash: LN56PoTkBNxJj1w2guczixRwAouY3OMaz3axTt62Jtg=)
                          2: BCD0C756B3D111F09D2C6B5BC4F9AE02.roa (hash: eDWjFpNbWk+XbLw3lWSx0s46c4JyzqQLsP9ZRkskaaA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl
                          rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131194, serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
        Validity
            Not Before: Jul 27 09:40:21 2026 GMT
            Not After : Aug  3 09:40:21 2026 GMT
        Subject: CN=6a672785-e8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fc:ac:7f:4d:20:f6:1d:b5:05:6f:5b:cc:97:
                    6d:eb:f4:59:44:6f:14:c9:dd:01:b4:2f:7b:ce:65:
                    50:c0:f2:78:58:49:d3:7c:02:e2:b2:ab:04:a4:67:
                    7e:eb:af:62:8e:5d:52:c4:1c:d1:13:f6:1c:d8:11:
                    56:7c:49:c2:81:fb:91:2a:cf:3b:ce:03:21:7e:40:
                    ab:83:4d:e8:cc:c8:e5:17:a4:21:34:e6:e5:bd:53:
                    49:d5:8a:9f:78:3d:d5:5d:97:3a:ce:43:40:9a:74:
                    68:dc:ec:2f:f4:17:2e:f3:89:a4:43:dd:4b:a4:2c:
                    43:92:97:ac:ec:f6:ae:35:26:97:ba:1f:54:44:e5:
                    ba:cd:95:0b:b8:cc:34:1e:fa:66:7b:dd:78:e6:ad:
                    94:be:ac:16:73:24:41:8e:35:fc:5c:d1:f0:37:19:
                    b8:25:d7:bc:b9:31:7e:d4:72:ea:86:4c:a7:7c:d1:
                    97:ec:e9:3f:d2:10:c5:89:82:67:a2:5b:d8:fe:f6:
                    cd:3b:9c:3f:2e:9d:3e:43:f0:ce:e2:9b:1c:06:fc:
                    87:42:c0:cb:d5:ec:18:66:c3:2f:c3:19:d3:9e:9c:
                    0e:63:bb:be:36:b8:f9:6c:0c:99:56:0c:22:fb:65:
                    81:59:d4:ec:3a:66:ff:4d:de:99:2a:0c:d0:85:0f:
                    02:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A7:76:7E:EB:0D:2F:2B:DE:CA:7C:80:B9:A1:44:72:38:C2:EB:22
            X509v3 Authority Key Identifier:
                keyid:66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:82:47:db:2b:c7:d6:70:83:d2:cc:1c:df:c3:89:f7:1b:f8:
         f5:ce:a2:69:5b:1c:a6:67:94:31:34:51:df:3a:45:0a:80:80:
         bc:23:14:aa:b3:bb:e8:30:aa:c1:51:4b:dd:b3:79:16:4c:ab:
         62:63:d0:53:ba:7f:d6:72:c2:ce:41:73:1d:09:35:83:4f:4f:
         58:f3:35:bb:f3:98:fe:9b:65:4b:2a:ca:9e:29:94:08:13:02:
         ec:29:00:d6:a7:4c:6c:b6:48:7d:71:18:85:56:ce:dd:76:25:
         a8:aa:10:6c:20:88:43:e4:68:2f:5c:72:58:14:14:a6:b9:d3:
         85:60:85:30:d0:36:68:bc:01:87:e2:71:d9:8b:53:e3:43:0e:
         6d:2b:f9:0c:c3:c6:dd:8a:02:b8:c7:bb:2b:53:70:79:72:49:
         be:98:93:cb:60:2e:36:43:b7:52:8d:c4:af:ac:d4:53:cf:71:
         ea:5b:f7:9c:62:50:9a:96:6d:95:71:5c:04:e5:0b:d8:22:f2:
         22:84:1e:d7:29:fa:f6:9a:14:b4:6f:00:32:8a:bb:f7:00:c2:
         49:a2:3b:22:b8:83:c7:20:53:ce:56:00:27:9b:4c:8b:d6:ba:
         83:f3:51:9a:cb:49:62:70:04:1e:35:50:09:22:23:39:de:cb:
         3e:ef:8f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:31:40 2026 by rpki-client