Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft
File:                     zDdqaPyj4J8M61wsuRs02xTD68k.mft (raw, json)
Hash identifier:          kU0YuAXh+vzRU/9REH8R+M0T/UAOAO5NonbNl9eouZw=
Subject key identifier:   E9:2B:36:DD:67:C4:63:81:6A:A2:9F:EE:B7:2A:77:57:6D:99:26:66
Authority key identifier: CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9
Certificate issuer:       /CN=A914DCD4/serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft
Manifest number:          74
Signing time:             Mon 27 Jul 2026 10:09:09 +0000
Manifest this update:     Mon 27 Jul 2026 10:09:09 +0000
Manifest next update:     Mon 03 Aug 2026 10:09:09 +0000
Files and hashes:         1: zDdqaPyj4J8M61wsuRs02xTD68k.crl (hash: gERnca0ppWXJ9ckBBqMa08cBOQ5qqzY24nT8Gc+3I1E=)
                          2: 8056379A118511F1AFA21CD3333D8C67.roa (hash: a+0zEEh0IkQBVa10yTGuRhVRnpnLL42o4daj18Tc6Gk=)
                          3: 2A8244EEE1AB11F0A6B6CFD64A6F56BC.roa (hash: EqLKG4uPYdf+DEH4UJyfrFpvPeTolC1wKzTsRMJAbCw=)
                          4: E611D250118111F1BD19AAF2323D8C67.roa (hash: ZlY819q3BVvBAVN3kikGmOs572rGxvo+Slai0R6y0MM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl
                          rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:09:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DCD4, serialNumber=CC376A68FCA3E09F0CEB5C2CB91B34DB14C3EBC9
        Validity
            Not Before: Jul 27 10:09:09 2026 GMT
            Not After : Aug  3 10:09:09 2026 GMT
        Subject: CN=6a672e45-3241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:12:c9:9f:77:3b:98:11:47:13:32:60:50:89:
                    48:21:ca:99:7e:0b:29:8b:68:49:cd:3c:52:58:b2:
                    9a:a2:23:ee:94:8e:85:49:64:c1:6d:da:1f:8f:3b:
                    bb:c3:79:30:98:ff:1a:ee:45:82:3e:12:92:3f:ac:
                    ed:2b:fa:c2:d2:54:9b:06:af:fd:f9:d9:dc:16:e9:
                    93:9d:77:db:92:84:7a:35:6d:60:a3:70:09:8d:4c:
                    15:32:a8:79:8a:a0:bd:41:ed:d3:f1:1a:21:8e:af:
                    fd:12:0b:33:49:47:b2:a1:92:fc:e6:05:f2:d6:3b:
                    d1:b0:56:47:13:0e:bf:f9:09:88:25:a9:44:86:88:
                    fa:a8:2c:6d:77:ee:2f:1b:79:5a:7b:06:6a:38:17:
                    8a:e2:3d:1a:82:da:d3:87:99:39:f9:30:30:0f:17:
                    e9:df:32:2e:22:87:c7:7f:47:4c:72:30:37:89:02:
                    b7:dd:d8:e6:e9:89:50:9a:fd:2d:e5:41:47:38:2d:
                    fe:4f:bd:74:1b:93:bd:eb:fb:12:ad:e5:df:60:44:
                    31:80:4b:05:80:99:b9:ef:83:61:bf:0d:4e:01:15:
                    a8:28:2a:1d:d1:18:08:bb:dc:e2:d1:05:db:dd:17:
                    e1:52:85:ca:5e:bf:f9:7d:08:a4:1f:60:7a:bc:4e:
                    80:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2B:36:DD:67:C4:63:81:6A:A2:9F:EE:B7:2A:77:57:6D:99:26:66
            X509v3 Authority Key Identifier:
                keyid:CC:37:6A:68:FC:A3:E0:9F:0C:EB:5C:2C:B9:1B:34:DB:14:C3:EB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zDdqaPyj4J8M61wsuRs02xTD68k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B171DB50E1AA11F0AFCE84B84A6F56BC/zDdqaPyj4J8M61wsuRs02xTD68k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f6:67:fa:4e:9b:76:e3:63:ec:be:2c:60:de:f1:f3:84:93:
         73:87:76:07:19:0e:aa:af:fe:32:ea:ba:d2:3b:b6:ad:da:88:
         80:a5:27:83:81:7d:23:59:41:07:54:23:7d:d4:c2:50:1d:b3:
         32:4e:3f:a5:d4:db:fe:77:77:3b:b4:d7:00:c8:ab:a4:e9:19:
         37:eb:6a:23:a6:b0:39:89:51:31:c1:c4:84:ea:90:63:a8:97:
         34:59:cf:24:a2:fb:09:b3:55:80:de:c0:92:c3:a3:19:ac:29:
         80:8a:b8:60:c7:44:68:52:e0:04:e0:c5:03:0a:e8:10:89:93:
         43:34:5a:49:08:7c:bd:64:ae:ea:27:a9:17:bb:8e:58:b6:91:
         e7:b0:cc:58:b2:20:12:ff:31:fe:ff:0a:44:24:f3:45:26:8d:
         bc:fc:5e:79:6e:40:ed:75:73:d9:6c:12:4e:3b:7d:14:92:29:
         61:f2:c8:17:84:33:54:15:16:63:04:74:7d:8c:31:45:d3:58:
         71:8b:eb:26:72:e0:8e:fe:15:ba:0e:1e:16:d4:3f:c9:82:6f:
         a7:c5:f8:b1:d7:fd:61:6d:7c:45:84:d7:23:a4:22:2b:d1:31:
         de:c1:1e:4a:bb:d3:be:3f:57:42:00:76:5f:66:e2:54:44:ae:
         42:25:c4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:59 2026 by rpki-client