Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
File:                     sZKtRE3h8t51vroe79Ei7s99d8w.mft (raw, json)
Hash identifier:          lHzlE+43FkF+jwnEvtib7qzoeZc4VcIQc9DK1oHFvBw=
Subject key identifier:   59:09:29:81:2A:00:EA:07:CB:4E:4B:64:EE:0B:2E:0C:B7:DA:EB:66
Authority key identifier: B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC
Certificate issuer:       /CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
Certificate serial:       0240
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
Manifest number:          0238
Signing time:             Mon 27 Jul 2026 04:05:18 +0000
Manifest this update:     Mon 27 Jul 2026 04:05:18 +0000
Manifest next update:     Mon 03 Aug 2026 04:05:18 +0000
Files and hashes:         1: sZKtRE3h8t51vroe79Ei7s99d8w.crl (hash: 1iPgPJYQ+qFKNvWy/FIUngwo0N16CND2jv50I8RG1IM=)
                          2: DC5F1826D1BD11EF8CC80268C4F9AE02.roa (hash: 5ciRZnMNFhIo0Wo7M5ePcfg4YNpNsIJV7sTdX3rIjqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl
                          rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DEDF, serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
        Validity
            Not Before: Jul 27 04:05:18 2026 GMT
            Not After : Aug  3 04:05:18 2026 GMT
        Subject: CN=6a66d8fe-cdab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:8b:3a:e1:9f:c8:82:9b:a3:76:a4:37:a1:
                    27:69:ba:52:d7:2d:f7:27:7e:2f:21:65:ae:98:c1:
                    25:6e:16:df:2a:e0:fe:0b:11:db:61:6a:1d:e3:4a:
                    0e:4c:ff:2c:fc:22:62:5e:8d:cf:0e:1e:91:12:05:
                    f1:0a:bb:94:95:05:78:ad:b0:29:04:bf:d7:c4:f5:
                    e9:67:9f:60:e9:7b:72:c8:fa:43:a8:04:97:58:b8:
                    45:cc:eb:1e:e4:97:15:99:64:06:a1:23:e7:ac:b2:
                    aa:24:5a:5e:47:4e:e2:ef:d0:44:e1:c5:e5:f6:1b:
                    89:3c:a9:78:9e:a9:eb:0a:e4:f6:8f:a3:fc:f4:97:
                    1f:9d:6b:9c:7f:49:6e:67:d6:a0:23:52:9d:7e:0b:
                    b5:56:fb:4b:ac:7f:21:f1:57:08:7a:fc:9b:96:34:
                    83:82:16:65:ce:d4:79:19:91:1b:0d:97:36:72:96:
                    cd:88:c8:42:c3:90:5d:b4:c3:24:9b:9b:29:74:9a:
                    cb:51:cb:16:4c:00:79:c6:60:c9:99:62:3b:ba:92:
                    e0:86:c4:e1:d3:b3:6e:8c:24:73:a4:2d:ab:a9:e6:
                    e7:c1:6b:ed:68:e5:a5:f4:03:87:b6:73:5f:34:30:
                    0d:f5:8d:e6:72:a7:8e:04:88:0b:24:3c:b8:c1:d8:
                    19:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:09:29:81:2A:00:EA:07:CB:4E:4B:64:EE:0B:2E:0C:B7:DA:EB:66
            X509v3 Authority Key Identifier:
                keyid:B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f6:73:54:12:b0:75:b0:87:23:44:82:52:01:b4:80:6a:f5:
         71:62:9a:b5:f5:de:28:25:3e:07:ab:af:8c:ab:25:2a:18:66:
         e6:d5:a3:f0:48:b0:79:c8:63:bf:24:eb:5f:50:d8:5d:88:cb:
         c4:91:ec:1f:29:26:dd:c2:a5:d0:25:6f:38:f5:4d:c6:22:de:
         3c:86:6e:e0:cb:1f:b3:ac:62:b4:8d:af:8d:03:49:c5:9e:fd:
         3b:c2:00:71:3a:2f:a0:a2:34:d5:eb:e5:b0:06:05:2a:a0:e7:
         2e:6c:0b:13:b6:85:ac:fd:0b:90:ba:44:f0:a8:4a:eb:4a:c6:
         6c:12:29:e7:fb:bc:ca:9e:4a:26:e6:b6:f6:d1:f5:a6:46:3b:
         05:ed:74:53:97:cd:55:35:16:7b:fa:37:8c:8c:7a:69:30:88:
         97:d0:e2:64:96:a1:13:4a:54:b2:33:ab:a8:82:cb:1f:37:91:
         04:90:25:a6:a7:af:a2:d6:bd:79:7a:65:da:35:1e:5c:17:a7:
         55:5a:95:3f:a2:87:06:3b:e8:37:7b:87:0a:c4:aa:fd:67:e9:
         d2:e7:09:17:7d:ce:3b:a6:78:e3:d7:0c:e1:bc:3f:6b:f7:00:
         c7:b7:70:b0:4a:c8:86:bf:87:98:8e:62:ce:26:64:36:5b:db:
         2e:b1:5f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:51:09 2026 by rpki-client