Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
File:                     ZVgfndzt1kYkkalmT_KWJlal-FQ.mft (raw, json)
Hash identifier:          5BV9tUGSSqfLycs7zx2DVPQXhfW9EVJ9IFm88GjDwIo=
Subject key identifier:   8F:C2:61:11:4A:F4:C1:D3:A0:9C:AF:87:C6:9C:FE:0B:37:B9:D7:37
Authority key identifier: 65:58:1F:9D:DC:ED:D6:46:24:91:A9:66:4F:F2:96:26:56:A5:F8:54
Certificate issuer:       /CN=A913EECE/serialNumber=65581F9DDCEDD6462491A9664FF2962656A5F854
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
Manifest number:          2B
Signing time:             Mon 27 Jul 2026 11:07:55 +0000
Manifest this update:     Mon 27 Jul 2026 11:07:54 +0000
Manifest next update:     Mon 03 Aug 2026 11:07:54 +0000
Files and hashes:         1: ZVgfndzt1kYkkalmT_KWJlal-FQ.crl (hash: /2aqYqHvudVL+aX0OCEC1Xqxn+lbBfCabEC7SVmGlWs=)
                          2: 4D03668449E711F1BCBB7A79B5833773.roa (hash: LGCooesPA4j4gXzOKKJURalYXy31FTNPJfPPUMRN1nE=)
                          3: y_gp4LNOTzJ7X2SOJLw8ypIAsDo.asa (hash: S9Bc8mXLb9sh0aNUGQrKudMwGjEjDbETo3LwaIAst0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.crl
                          rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EECE, serialNumber=65581F9DDCEDD6462491A9664FF2962656A5F854
        Validity
            Not Before: Jul 27 11:07:54 2026 GMT
            Not After : Aug  3 11:07:54 2026 GMT
        Subject: CN=6a673c0a-437e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:a1:36:8c:9c:33:49:dc:b0:04:7e:e0:1c:
                    ff:9f:c4:9a:61:7a:d5:f2:c5:8c:92:01:f4:ff:eb:
                    b0:d3:20:92:b8:5b:86:02:55:2d:52:cb:58:b9:e2:
                    17:f3:26:57:17:68:a1:2d:6a:be:0b:bb:73:a3:b0:
                    9e:35:3f:2a:7e:52:83:2b:e4:cf:d0:90:6e:10:dd:
                    b0:c0:b4:8b:fe:3b:5f:c9:f2:f8:42:ca:9c:60:6c:
                    c9:d2:df:1b:fc:2d:73:e6:70:a8:d0:9d:25:1c:80:
                    6a:bd:9b:a3:6e:02:87:39:11:24:2f:14:88:a0:b5:
                    be:dc:d8:37:59:2d:42:30:ef:de:62:36:c5:5e:c7:
                    c5:8d:7f:03:75:c2:18:ac:46:62:a1:4b:a0:6c:11:
                    8f:71:6e:1a:dd:30:df:e1:4d:a7:7b:50:8e:b4:1f:
                    d9:74:43:da:e6:44:46:31:ad:4a:d2:c3:85:af:be:
                    92:eb:e1:78:38:77:fd:82:f8:06:7f:04:f2:10:3b:
                    48:98:44:45:bb:a2:a2:8d:8a:b9:eb:79:3b:dc:58:
                    75:69:f2:7d:1a:1e:e2:79:4f:73:e1:56:f1:59:e1:
                    5d:82:83:f2:c7:73:66:b1:fd:b0:3d:0d:e4:2e:6d:
                    26:b3:7e:fb:a0:66:85:5f:73:47:75:54:7d:bf:45:
                    08:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C2:61:11:4A:F4:C1:D3:A0:9C:AF:87:C6:9C:FE:0B:37:B9:D7:37
            X509v3 Authority Key Identifier:
                keyid:65:58:1F:9D:DC:ED:D6:46:24:91:A9:66:4F:F2:96:26:56:A5:F8:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:41:71:fa:7b:6a:83:c6:2a:24:22:26:70:ab:ef:f3:da:b0:
         88:94:35:33:d2:16:01:c1:21:2e:d9:88:51:12:9b:9d:89:1f:
         53:d0:05:98:fd:76:a8:e7:ee:b1:c6:2f:49:1f:34:cb:03:28:
         6d:45:8f:aa:ef:0b:df:10:b3:fe:84:06:ca:e3:d8:43:00:c7:
         04:79:55:a1:7d:7a:af:ee:3e:97:15:be:bc:9a:e4:6b:5f:27:
         bf:60:ed:cf:e0:27:5b:a9:99:a4:a2:5c:4f:2d:d1:c9:b9:8e:
         21:44:5c:61:00:8f:01:e2:71:0d:ae:e5:67:16:97:31:cf:b3:
         3b:9d:8f:90:f5:62:8a:06:23:78:82:06:75:a4:ea:f3:47:ee:
         44:47:e6:ca:ea:f7:b5:93:c9:7f:d3:c7:5f:25:43:f4:4b:eb:
         56:57:96:5c:d7:a6:19:0e:07:7e:6f:7c:ba:3d:de:3d:a3:64:
         02:13:c4:68:53:05:f8:1f:c3:25:aa:60:8f:7d:49:24:30:16:
         e4:07:02:88:4a:e6:82:60:d6:ef:78:81:aa:11:69:01:40:98:
         ae:79:c7:77:6e:1a:27:08:08:12:40:37:ea:65:a3:cc:85:bc:
         39:bb:97:02:30:d4:31:de:c7:69:d0:ac:7d:bf:1d:55:e7:18:
         f6:4d:51:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:27 2026 by rpki-client