Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
File:                     zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json)
Hash identifier:          g7xk7RTSO/asiz/Wc31M7CxgKMi1NAnyuPzA/q4RlFI=
Subject key identifier:   16:2A:35:EB:66:FA:B7:3B:AC:28:82:FA:6A:3D:C0:2E:21:A8:B2:95
Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
Certificate issuer:       /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
Certificate serial:       0A9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
Manifest number:          0A95
Signing time:             Tue 28 Jul 2026 19:51:25 +0000
Manifest this update:     Tue 28 Jul 2026 19:51:24 +0000
Manifest next update:     Tue 04 Aug 2026 19:51:24 +0000
Files and hashes:         1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: ejeKE7Fh1KGsgNt0nogYbuFBExn2qBhjFCUsz5lxgEo=)
                          2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: cZrqWOQatMkIn2VzGfcaWDnVlXfxEpjr06H/3z6i31k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl
                          rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2719 (0xa9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
        Validity
            Not Before: Jul 28 19:51:24 2026 GMT
            Not After : Aug  4 19:51:24 2026 GMT
        Subject: CN=6a69083d-6037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:00:7c:17:a9:9c:41:98:cd:15:26:50:ea:
                    e9:d8:39:34:6b:04:07:6e:07:f5:db:63:b2:b4:28:
                    46:53:68:75:8b:cc:94:2e:12:cb:7f:91:7d:93:17:
                    ee:be:21:31:36:91:2f:29:0e:5b:5b:d6:f8:93:eb:
                    19:c1:3d:26:e4:25:0f:c2:ef:86:d0:ed:b6:74:50:
                    c1:f2:56:f6:69:03:bb:67:1f:56:5b:e3:57:a9:ee:
                    91:f0:d5:f1:31:db:4a:f8:d3:51:18:ef:6d:69:4b:
                    fd:11:15:a3:17:bb:76:f9:19:a6:07:88:7c:cd:be:
                    3e:72:70:82:30:7e:25:45:7d:1d:6b:3f:70:07:11:
                    be:92:28:b5:47:76:f7:67:05:7b:04:82:11:17:da:
                    3a:29:4f:39:1c:81:cb:92:21:19:41:f7:3e:7f:5e:
                    58:89:ab:b8:77:17:fa:01:00:6f:2a:6b:bd:b7:f1:
                    b0:c5:50:06:44:21:76:e1:d7:97:c6:00:fe:ee:ac:
                    0b:0b:35:56:e9:2d:d3:c6:71:91:e1:bd:78:99:f5:
                    27:b3:5c:4b:0d:c1:53:a7:50:0e:fc:88:34:54:aa:
                    10:ed:a8:8d:2c:86:d4:b3:b2:cd:19:bd:bc:ed:9a:
                    4d:f3:52:e0:a5:bb:5e:4b:30:d8:39:aa:80:20:e7:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2A:35:EB:66:FA:B7:3B:AC:28:82:FA:6A:3D:C0:2E:21:A8:B2:95
            X509v3 Authority Key Identifier:
                keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a0:f4:f0:29:9c:1e:cf:15:60:28:4e:67:55:87:9a:a4:e0:
         ea:d9:9d:90:e2:8f:70:2c:ce:bd:fd:61:e6:5f:3d:02:39:a1:
         bc:96:d0:dc:52:01:37:db:c6:42:63:4e:a9:21:b1:56:9e:b5:
         7b:35:12:7d:e5:4c:8c:0b:4b:fb:21:7a:71:f5:1f:94:38:0e:
         f1:e7:1f:d5:c0:74:85:a4:84:59:d4:76:5e:49:ea:7b:d5:03:
         6b:00:e7:a1:a8:5f:18:1b:41:2a:56:f2:c8:ed:1c:4b:70:16:
         59:45:22:8e:a7:7f:c7:55:df:2c:c8:75:c9:12:de:3d:cb:82:
         2a:2f:0a:64:7b:77:9b:9f:7e:06:c8:3f:9c:4f:e2:c9:e0:f2:
         77:d2:77:d6:d6:28:72:87:2e:5d:53:0e:60:e3:ab:b9:be:c7:
         55:86:94:62:db:da:b9:ab:af:50:4d:6c:01:df:86:81:58:6c:
         aa:ab:81:75:8c:35:b9:f8:4d:8f:77:c2:53:5a:b0:11:0c:40:
         61:87:fb:f8:07:9c:12:85:96:95:b9:67:db:26:03:96:90:16:
         20:49:b4:59:98:84:3c:7e:41:2d:a4:05:27:30:97:80:40:cf:
         f9:77:b7:4e:81:11:57:ff:a2:90:ea:80:28:93:1d:3f:b4:63:
         18:80:63:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:21:47 2026 by rpki-client