Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
File:                     zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json)
Hash identifier:          HeR3sk2M6Fv5CEAbajdWtzDd0/GTw3zF1WZEVsO7tzY=
Subject key identifier:   D1:B6:0B:25:B3:4E:D6:65:79:A5:06:BB:FD:52:74:E5:1F:8A:A4:F2
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Certificate issuer:       /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
Manifest number:          01CE
Signing time:             Mon 27 Jul 2026 05:33:01 +0000
Manifest this update:     Mon 27 Jul 2026 05:33:01 +0000
Manifest next update:     Mon 03 Aug 2026 05:33:01 +0000
Files and hashes:         1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: zYxEVp+oIYPZ7pLooULToBYyE/UVJ9+JwTGM4/Ua+kM=)
                          2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: eRA3ggdDb9SZ/usM83jI/rG8aFaHS14k+X9wZnX4XR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
                          rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
        Validity
            Not Before: Jul 27 05:33:01 2026 GMT
            Not After : Aug  3 05:33:01 2026 GMT
        Subject: CN=6a66ed8d-0183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:45:44:c6:d7:a2:b5:bd:ce:cf:97:0c:58:
                    23:09:e3:35:6d:b0:da:c8:07:2b:62:fb:34:fd:94:
                    0b:33:49:66:ab:ff:7d:b2:78:af:7e:d7:22:69:6a:
                    0e:d4:a6:5c:c9:5b:4e:22:f1:7f:b1:7f:bf:b6:ee:
                    72:43:96:8b:5b:c6:7f:e7:c9:13:82:7c:5c:5b:52:
                    53:56:5d:0b:c2:3b:be:4b:17:d1:c9:19:36:be:9e:
                    20:ee:39:05:b9:af:90:94:62:5a:69:ea:be:36:26:
                    42:ee:49:68:c3:4e:96:79:e4:8e:5f:6a:09:58:b1:
                    85:88:89:bf:c6:e5:14:cc:3a:84:36:aa:3a:49:e5:
                    df:df:03:05:13:c6:39:6a:d2:4b:08:ca:ba:a7:34:
                    ee:61:e2:f1:f1:1d:cd:94:1a:cc:d3:40:bb:49:4a:
                    8d:31:54:ef:d4:6f:1b:9f:eb:a5:f8:37:fe:60:0b:
                    e3:62:ae:18:b3:e8:88:7a:38:14:0c:96:25:1f:ed:
                    8c:24:26:1c:13:c3:2e:a5:a8:21:39:6c:95:5c:1c:
                    17:8c:cf:63:07:ce:32:b4:7d:f5:c1:b5:f6:5a:42:
                    cf:08:ed:a5:66:d1:c4:cf:1f:7e:91:12:83:0e:42:
                    f4:5d:eb:de:54:68:27:fb:40:54:6b:79:f5:c5:27:
                    20:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B6:0B:25:B3:4E:D6:65:79:A5:06:BB:FD:52:74:E5:1F:8A:A4:F2
            X509v3 Authority Key Identifier:
                keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a1:bf:51:cb:c6:1e:d3:40:34:a6:e3:6e:f4:b7:05:52:00:
         7f:1a:21:6c:c6:80:35:d3:cb:05:04:41:32:0b:30:9b:dc:da:
         96:27:8d:a4:5a:58:0f:86:70:58:5e:50:44:76:c5:84:3d:8a:
         35:66:91:53:ee:b7:c9:08:d4:6a:f1:87:bb:9a:60:56:26:19:
         ef:3d:8a:55:07:dc:48:9c:25:61:33:9d:28:b2:8f:13:de:f7:
         8c:24:68:a1:06:2f:e7:85:98:66:99:04:08:f3:8b:e6:5a:08:
         63:59:14:66:cb:7f:b3:22:eb:33:f7:9a:04:48:2c:23:80:c6:
         63:03:ad:bc:8b:2a:8a:26:48:0b:35:b8:11:33:cb:20:43:e3:
         b4:70:a2:6e:0b:8b:23:a7:59:29:80:64:00:28:5f:b4:0c:e2:
         88:3a:03:b5:c6:a6:a4:5d:02:51:5a:51:c1:2e:bb:ee:28:0c:
         36:9c:73:87:bc:40:fb:84:70:4e:e9:3d:8d:f1:88:59:d3:d8:
         1f:0e:6a:fc:65:28:9c:0a:28:d7:e4:ab:64:5a:a6:0a:08:a4:
         9d:8e:f5:e4:6b:3a:fe:61:40:69:37:ed:ca:97:68:98:6c:0f:
         de:63:a3:19:86:f2:98:cd:00:a8:2b:97:1b:0f:59:d8:62:62:
         1b:8e:38:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY0RjUxMTAvBgNVBAUTKENDQjhFMDhGOTk5MEE3NTUzMUU5MzZBREIwNkRCQUNB
QTczMUI1NTIwHhcNMjYwNzI3MDUzMzAxWhcNMjYwODAzMDUzMzAxWjAYMRYwFAYD
VQQDEw02YTY2ZWQ4ZC0wMTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsBJFRMbXorW9zs+XDFgjCeM1bbDayAcrYvs0/ZQLM0lmq/99snivftciaWoO
1KZcyVtOIvF/sX+/tu5yQ5aLW8Z/58kTgnxcW1JTVl0Lwju+SxfRyRk2vp4g7jkF
ua+QlGJaaeq+NiZC7klow06WeeSOX2oJWLGFiIm/xuUUzDqENqo6SeXf3wMFE8Y5
atJLCMq6pzTuYeLx8R3NlBrM00C7SUqNMVTv1G8bn+ul+Df+YAvjYq4Ys+iIejgU
DJYlH+2MJCYcE8MupaghOWyVXBwXjM9jB84ytH31wbX2WkLPCO2lZtHEzx9+kRKD
DkL0XeveVGgn+0BUa3n1xScgTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNG2CyWz
TtZleaUGu/1SdOUfiqTyMB8GA1UdIwQYMBaAFMy44I+ZkKdVMek2rbBtusqnMbVS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS8zQTNBMjEwRUQ5
RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAxVXg2VGF0c0cyNnlxY3h0
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pMamdqNW1RcDFVeDZUYXRzRzI2eXFjeHRWSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjRGNS8zQTNBMjEwRUQ5RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAx
VXg2VGF0c0cyNnlxY3h0VkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoqG/UcvGHtNANKbjbvS3BVIAfxohbMaANdPLBQRBMgswm9zalieNpFpYD4Zw
WF5QRHbFhD2KNWaRU+63yQjUavGHu5pgViYZ7z2KVQfcSJwlYTOdKLKPE973jCRo
oQYv54WYZpkECPOL5loIY1kUZst/syLrM/eaBEgsI4DGYwOtvIsqiiZICzW4ETPL
IEPjtHCibguLI6dZKYBkAChftAziiDoDtcampF0CUVpRwS677igMNpxzh7xA+4Rw
Tuk9jfGIWdPYHw5q/GUonAoo1+SrZFqmCgiknY715Gs6/mFAaTftypdomGwP3mOj
GYbymM0AqCuXGw9Z2GJiG444AA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:49 2026 by rpki-client