Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
File:                     ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json)
Hash identifier:          ZDxZ8wT/3vzxslyv3RkSNE37rpmE7jl00/Qla21HwNY=
Subject key identifier:   FB:ED:B0:1F:D5:DD:53:7A:B1:F0:98:9E:A9:BC:59:E6:5B:CD:70:F4
Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
Certificate issuer:       /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Certificate serial:       09DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
Manifest number:          09DB
Signing time:             Sun 26 Jul 2026 20:21:33 +0000
Manifest this update:     Sun 26 Jul 2026 20:21:32 +0000
Manifest next update:     Sun 02 Aug 2026 20:21:32 +0000
Files and hashes:         1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: 3w0x1MmS154JsjvNHsm7fXJcOtHMn02XoSc/IQVWCaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2524 (0x9dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
        Validity
            Not Before: Jul 26 20:21:32 2026 GMT
            Not After : Aug  2 20:21:32 2026 GMT
        Subject: CN=6a666c4d-0ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:d6:39:69:f9:7a:d1:8d:78:33:be:83:bc:
                    ca:3e:67:3b:d4:bb:5f:5d:b6:9c:ee:eb:02:aa:7c:
                    4d:a6:a5:99:2f:14:60:4e:a0:33:9d:ff:b8:7e:ea:
                    20:f6:f0:f7:3f:ac:01:0a:43:2a:eb:ea:39:29:e8:
                    d7:9a:ea:be:08:77:a4:4f:e1:2b:79:18:6b:6e:3e:
                    92:c8:93:e1:ee:71:b8:5d:fc:67:21:f3:98:47:58:
                    4e:5c:f2:b8:a2:23:e5:8e:37:b5:bc:78:14:20:1c:
                    ad:84:8c:ba:cd:31:23:ff:cd:6a:54:8d:30:0a:ee:
                    9a:84:11:47:3d:f9:cc:bc:09:a0:7f:25:83:d4:aa:
                    b1:cd:60:77:7f:51:3a:ed:93:51:78:b2:a8:02:6e:
                    b5:8f:0b:81:99:f5:2e:82:88:55:2d:f1:c3:41:fd:
                    67:ae:ae:b6:7a:65:d7:c3:37:fc:8c:c7:63:fd:3f:
                    c0:15:6c:7e:b4:cd:10:aa:c9:3b:7e:f6:43:9e:42:
                    9d:2c:df:b3:60:df:fe:06:bb:5b:e4:69:05:bd:91:
                    80:7d:83:95:b9:5f:10:19:f0:e5:52:90:22:0f:e6:
                    70:84:20:36:1c:7b:d2:41:a6:00:8b:63:49:4b:fb:
                    ec:a3:e9:2b:bb:05:11:5a:54:5d:ff:50:7d:3a:d5:
                    72:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:ED:B0:1F:D5:DD:53:7A:B1:F0:98:9E:A9:BC:59:E6:5B:CD:70:F4
            X509v3 Authority Key Identifier:
                keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:c0:74:df:d2:9e:df:d7:48:22:db:8e:d6:d5:3b:d9:1e:e6:
         63:76:81:a8:7d:96:4b:b2:7a:f3:3a:57:bc:b7:2f:17:47:91:
         31:4a:f1:78:23:00:84:8b:3a:e4:75:87:78:61:12:4d:f1:09:
         4a:30:05:ad:b3:b9:72:c4:fb:96:7e:1e:6a:b4:02:2a:ca:56:
         bd:db:94:83:c7:55:b6:c3:b4:51:9b:c6:1f:48:f2:c7:06:70:
         eb:fa:d6:f3:9e:fa:46:8a:2f:40:bc:35:fd:e3:01:8c:85:f4:
         81:cb:2f:33:9a:2b:d8:a2:6d:ff:d5:92:bc:05:3c:87:61:1b:
         af:a3:d7:87:c8:b4:0e:f8:68:b3:08:98:49:46:d8:df:86:86:
         47:f5:d9:8c:3b:45:a9:6b:0c:bc:a7:e7:70:e2:5c:33:7b:4a:
         b9:82:fd:35:cd:6b:a3:f2:ef:0d:a2:1a:4a:aa:40:06:36:9d:
         db:f0:11:0a:e7:7e:6d:30:b1:af:ff:3e:f6:0f:7a:8c:bc:c2:
         92:a6:0a:12:a9:32:d9:ee:b3:c9:64:5d:06:ae:b9:6a:41:69:
         1a:fc:a0:16:a9:95:3b:8d:e6:dd:90:95:4d:5d:c3:99:2a:aa:
         4b:74:25:42:ff:4c:5e:53:88:ef:5d:6c:8d:f7:87:2f:81:8b:
         ec:2a:96:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:34:53 2026 by rpki-client