Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
File:                     zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json)
Hash identifier:          18mNMj/TP0rwKuxNcJN1u6T0gKxmLpxohrNkSdQfigE=
Subject key identifier:   FA:9C:85:F5:36:B5:79:11:19:21:EB:7F:24:BB:AD:2B:BD:0D:CB:0D
Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31
Certificate issuer:       /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431
Certificate serial:       020A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
Manifest number:          0201
Signing time:             Tue 28 Jul 2026 16:51:08 +0000
Manifest this update:     Tue 28 Jul 2026 16:51:07 +0000
Manifest next update:     Tue 04 Aug 2026 16:51:07 +0000
Files and hashes:         1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: cb8I8XJe/aSaZzrzWzXBwW3IZOlGAeBOB4y32uR+BTg=)
                          2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: sPimiMMVQ8HhWMH3h4YYvgrI9mvp3guGNNGoHKdWxG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl
                          rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FA49, serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431
        Validity
            Not Before: Jul 28 16:51:07 2026 GMT
            Not After : Aug  4 16:51:07 2026 GMT
        Subject: CN=6a68ddfc-f009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:cd:0a:f5:26:90:36:53:fd:6f:bd:0c:fc:
                    7b:7c:4c:0d:18:a6:be:82:51:de:51:c5:a9:83:b4:
                    67:4e:09:97:71:b3:b8:60:bc:e0:71:f7:1c:dc:cc:
                    db:50:53:83:7e:96:7b:0b:ea:67:71:52:1d:93:42:
                    d0:33:9e:0d:c1:c1:0f:03:bd:1c:e7:52:49:da:b1:
                    77:1b:fa:c2:17:8b:a8:7e:8e:2e:85:16:db:c4:ce:
                    ba:14:65:ed:3c:c0:69:05:09:90:8b:83:68:23:e4:
                    16:b7:79:ad:f5:c5:b4:b4:f8:8a:01:c9:ea:e7:82:
                    0b:1d:12:bf:5e:27:44:4a:87:68:d8:50:ba:37:b1:
                    51:4c:b4:3f:2b:20:52:e5:1a:91:be:11:2d:9c:4d:
                    8e:d0:14:ad:51:98:fc:63:ec:1d:2b:23:59:0b:40:
                    55:58:8a:c4:ae:49:fa:f6:16:94:92:99:02:c1:45:
                    f5:ba:95:8c:25:7d:2b:ba:93:8f:34:4c:eb:2f:1d:
                    81:aa:c7:95:77:0a:45:a3:df:1f:c8:d4:cf:b3:b7:
                    c0:18:3f:c7:74:03:ec:19:24:c9:c2:12:77:f8:c0:
                    54:93:ec:ad:63:8b:59:71:69:2a:74:36:4f:1a:e7:
                    d3:9c:68:68:29:6e:c4:f1:7b:f5:0a:83:25:de:e7:
                    2c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9C:85:F5:36:B5:79:11:19:21:EB:7F:24:BB:AD:2B:BD:0D:CB:0D
            X509v3 Authority Key Identifier:
                keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:69:ea:85:f3:c0:31:8d:6e:de:a7:e5:54:fd:b2:55:6e:9d:
         5e:6e:62:3b:5c:0d:ec:60:59:5a:97:81:04:9f:27:af:cf:42:
         6a:9c:4b:8f:2e:36:4c:da:af:6f:5c:88:bc:7f:79:7d:55:80:
         bb:11:3f:c3:05:3f:6a:af:53:b3:66:01:53:27:cf:fb:08:2e:
         25:5f:3f:5b:b1:2f:25:c9:d9:54:2b:fe:3b:11:00:86:2c:dc:
         4d:64:2e:38:54:f1:c8:0c:ee:24:97:70:77:c0:66:35:de:89:
         0d:74:d9:1c:ea:55:8d:2c:9e:94:ee:41:c9:7a:02:eb:6d:28:
         bd:b9:f8:bd:b0:b0:d2:b6:1f:06:95:a3:37:96:b8:c5:b1:60:
         e0:e5:50:b4:11:2c:39:58:ea:3d:14:0c:b6:eb:40:9b:34:39:
         7f:08:2d:59:14:87:c2:cc:55:95:7b:85:69:47:51:76:bf:c1:
         ac:d0:11:9b:3a:e8:4b:df:a3:e8:66:22:3f:28:8f:2a:ee:9f:
         a3:ad:f4:6b:fb:e5:93:9a:c3:44:c4:fd:d5:f9:25:9b:29:f6:
         19:8e:71:66:d9:f4:6d:0c:05:ff:a0:0b:e6:3e:30:eb:62:1b:
         06:83:80:aa:ec:d8:0f:a2:28:29:7f:0e:a1:82:a1:c1:70:8e:
         08:aa:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:19:18 2026 by rpki-client