Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
File:                     ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json)
Hash identifier:          4upvTlpf64z1ZoKNVVUsH0ICvJDCUPoW5via3B3bEsQ=
Subject key identifier:   3A:F1:C5:95:AD:FC:B3:EF:DB:EB:0C:45:D9:91:CD:97:A6:C5:19:14
Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94
Certificate issuer:       /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
Manifest number:          0156
Signing time:             Mon 27 Jul 2026 06:59:41 +0000
Manifest this update:     Mon 27 Jul 2026 06:59:40 +0000
Manifest next update:     Mon 03 Aug 2026 06:59:40 +0000
Files and hashes:         1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: KD5jDuRIxt/HUEIjm0jZj1ZjOddaxAoSbN/5U6UhbBg=)
                          2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: 0/KER6jtg26LthiMhAoQFVwFGIJvGgJoOvUmyRDRsmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl
                          rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294
        Validity
            Not Before: Jul 27 06:59:40 2026 GMT
            Not After : Aug  3 06:59:40 2026 GMT
        Subject: CN=6a6701dd-c7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:69:38:b8:b5:ff:cc:74:10:aa:f7:46:37:
                    e9:22:4c:fd:c8:dd:46:f0:6d:56:48:d9:da:6b:40:
                    9a:d9:8f:4c:79:a9:f1:d0:88:b3:b1:e5:b1:21:d6:
                    55:08:15:86:2d:ab:bd:84:01:db:17:21:93:13:81:
                    bc:23:fd:c1:03:dc:ac:6e:1b:ab:b7:f2:05:1f:08:
                    d2:20:80:05:cb:a2:28:e7:30:fb:34:ae:50:1f:ad:
                    5f:91:9e:11:60:18:72:e6:88:3f:71:dc:c2:44:a1:
                    8f:bb:60:0c:72:f1:ad:10:30:8d:a8:2c:6d:0e:29:
                    cc:b6:87:3e:99:1e:7f:0d:32:a4:96:61:61:e2:a9:
                    6f:87:c5:24:64:1e:be:7c:fb:06:70:82:82:72:81:
                    82:74:45:04:a6:f8:c2:96:b5:c2:e7:90:a7:94:03:
                    52:69:bc:ec:92:a6:52:5f:65:a3:d5:f2:85:38:5b:
                    bf:33:80:62:a0:de:51:76:91:97:bc:a2:83:58:e6:
                    f0:20:5c:07:98:c6:cd:5f:12:c8:d1:65:25:a6:38:
                    ab:a4:bf:7e:c9:ac:fe:d8:79:61:1b:6f:08:2e:8d:
                    ae:55:ef:ae:32:0f:ec:69:b9:77:23:c1:b4:35:35:
                    2c:e5:16:d6:0d:7b:23:56:80:12:4f:2d:24:89:9c:
                    b4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F1:C5:95:AD:FC:B3:EF:DB:EB:0C:45:D9:91:CD:97:A6:C5:19:14
            X509v3 Authority Key Identifier:
                keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f1:2d:32:6f:46:31:91:02:8e:29:ee:0c:0e:1d:61:b9:21:
         60:73:3a:56:5c:5a:61:4c:3c:9e:d6:fd:5b:fd:c6:4e:f2:76:
         75:97:fa:59:a9:fe:74:31:fe:e0:83:94:06:66:e7:b0:ad:56:
         2f:3f:db:3c:b3:a1:a1:13:7b:80:29:af:89:da:6a:43:4e:b4:
         5c:8e:94:eb:d1:be:c3:f6:87:29:5e:db:f2:9c:a7:73:79:35:
         45:9f:fb:b5:a9:f6:45:a5:c4:11:44:38:a4:3b:ee:2b:38:91:
         44:bd:9f:02:37:c4:be:03:6f:01:71:1f:35:82:a9:ea:c4:a7:
         71:b7:e6:86:60:29:3a:76:51:15:0d:26:36:57:f6:7b:c0:ff:
         7e:04:d1:43:39:50:8a:44:49:c7:cf:4c:a0:04:a3:79:4a:2f:
         89:88:77:cc:7f:08:b9:aa:ab:e6:8d:43:10:b3:b0:63:12:17:
         30:46:39:13:3e:ad:45:1d:c9:95:29:52:2b:33:9f:4f:81:ce:
         3d:a6:5f:cb:22:37:60:19:f5:31:76:23:ce:c3:32:f3:ea:a0:
         79:e8:11:23:ee:f6:24:a2:f9:23:96:c5:30:8a:30:45:56:96:
         58:2b:99:b1:2c:29:3b:c5:d7:57:eb:16:1b:77:4d:fc:08:1b:
         ba:26:c8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:15 2026 by rpki-client