Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
File:                     zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json)
Hash identifier:          zO+5+TA3nscQWYOX/b02EeRmmT0Ata45xMyAfEnorzE=
Subject key identifier:   3E:EC:A2:D1:F6:B9:6E:5C:10:9F:71:7F:5B:FB:1B:EF:99:F7:91:AD
Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
Certificate issuer:       /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
Manifest number:          01A9
Signing time:             Wed 29 Jul 2026 05:41:06 +0000
Manifest this update:     Wed 29 Jul 2026 05:41:06 +0000
Manifest next update:     Wed 05 Aug 2026 05:41:06 +0000
Files and hashes:         1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: wlHZJsE4Uh+SsvVprCTZkLTITPQwphOcjEZBPrKCSi4=)
                          2: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: UeaRLdDzY1ShESbWYDfFd7UbKiVJI/tCLkGrM3fnfPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 05:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
        Validity
            Not Before: Jul 29 05:41:06 2026 GMT
            Not After : Aug  5 05:41:06 2026 GMT
        Subject: CN=6a699272-af8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3f:e0:bd:52:30:3d:fc:1c:3f:d6:d0:c4:51:
                    8a:14:b7:fd:be:c0:98:d4:47:7c:11:a5:33:7b:0b:
                    21:57:72:52:0e:22:92:3a:81:1c:d8:25:1d:d7:af:
                    77:9b:b4:94:07:c4:bc:15:34:f8:77:7d:52:c4:8a:
                    dd:0c:5a:5e:fd:60:c6:28:59:80:47:d6:ef:49:49:
                    a4:da:0e:87:7e:3d:33:4b:8b:5c:4b:b8:02:7a:ea:
                    2f:b6:f7:64:07:c6:77:45:f2:92:50:6d:7c:0d:38:
                    4f:4a:c4:59:9a:76:ed:ac:6b:8d:5f:38:19:8e:b4:
                    2e:20:bd:cc:e7:9e:f2:4f:ea:9f:3d:99:40:a2:c5:
                    c8:22:ab:8d:a6:28:ab:6a:62:d4:75:98:ec:d8:89:
                    da:ed:14:d3:2d:6c:69:cc:9b:24:8a:6c:69:fd:e3:
                    51:c1:78:1b:d3:be:59:db:55:ef:01:f9:d4:f9:ad:
                    ee:15:c0:3e:df:63:ab:38:2f:6e:c4:3b:5a:b1:d1:
                    fd:c4:32:d3:c3:55:74:20:c9:51:15:51:9d:1f:88:
                    27:e3:24:73:bf:37:51:46:c8:98:43:2f:b7:c7:ec:
                    0e:cd:f7:2a:f2:4d:42:82:b5:26:31:e9:0f:7f:df:
                    04:ab:6e:34:8b:e6:54:5a:09:a9:2b:a2:2a:c9:12:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EC:A2:D1:F6:B9:6E:5C:10:9F:71:7F:5B:FB:1B:EF:99:F7:91:AD
            X509v3 Authority Key Identifier:
                keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:6c:80:08:41:22:61:c5:a8:16:e7:c4:c1:fc:5e:cf:d4:dc:
         00:00:73:49:28:6b:a1:27:4c:8e:1e:7f:9a:55:89:c4:d3:3d:
         be:1e:98:8c:5f:f5:fc:90:70:6b:4b:b4:00:19:a7:78:0f:1c:
         17:2a:79:55:34:d3:e9:0a:58:01:62:15:d3:44:d4:0d:24:cf:
         b7:17:28:c4:89:c5:79:7e:52:50:38:9a:2a:4f:78:c7:ad:ab:
         37:1e:01:33:fe:d8:b2:e0:4f:61:53:2b:20:be:ad:17:05:bc:
         48:60:9f:b4:4d:08:4c:82:4c:71:fb:b5:c0:7e:69:65:aa:a0:
         e5:99:e7:1c:09:e3:40:60:78:95:b8:9e:43:7b:5d:4b:fe:10:
         5e:80:ad:79:57:fe:78:13:ec:e2:a8:b7:d0:df:3c:61:31:2a:
         76:5d:14:2e:dc:5f:61:60:92:9c:a2:a4:43:bf:1f:64:41:e7:
         69:0e:6b:9f:56:ad:99:f2:99:67:a7:2e:16:2d:b2:2b:6d:95:
         04:65:6c:29:3f:15:fe:2a:49:57:24:1e:60:fd:26:6d:0e:da:
         93:75:0b:a6:a3:f7:6b:59:57:1b:85:93:7c:47:8e:c9:e5:94:
         f1:87:4b:af:32:e8:59:be:29:48:0a:f2:1d:34:97:f4:36:20:
         4e:d0:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:06:17 2026 by rpki-client