Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
File:                     Z-1VajxcS_wnyhWKWXdWTDIHzso.mft (raw, json)
Hash identifier:          1mLyPxLXvK8QFVbNZuLaSOOTmZFd5YGxKLcMKWRGgY8=
Subject key identifier:   F2:C9:A4:50:43:8A:F5:D3:44:45:29:85:39:3B:AC:CE:62:0E:21:C6
Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA
Certificate issuer:       /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
Certificate serial:       3121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
Manifest number:          3110
Signing time:             Tue 28 Jul 2026 15:31:20 +0000
Manifest this update:     Tue 28 Jul 2026 15:31:19 +0000
Manifest next update:     Tue 04 Aug 2026 15:31:19 +0000
Files and hashes:         1: Z-1VajxcS_wnyhWKWXdWTDIHzso.crl (hash: 4Dkn6C0QcqJwfKvH6c7MXy+P+1Np17vDsdat0Aw42+A=)
                          2: 22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (hash: GIOvMbMD5vyLLmNcLyolZjNKiuNk0ohZ2lFl3desGOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl
                          rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12577 (0x3121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
        Validity
            Not Before: Jul 28 15:31:19 2026 GMT
            Not After : Aug  4 15:31:19 2026 GMT
        Subject: CN=6a68cb48-5ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:db:b6:c7:90:73:61:21:15:c0:97:5d:5a:
                    f1:05:96:04:ae:a9:ad:91:f1:1f:74:22:0f:91:0a:
                    da:36:2a:23:09:a9:41:a1:5c:f4:41:f5:3c:20:fb:
                    bd:be:a7:95:0a:91:39:f8:52:56:0b:54:f4:c1:7c:
                    32:70:93:ba:68:cc:3b:40:a5:c9:da:92:60:12:1f:
                    f4:3f:54:03:5c:ad:6d:65:d0:9f:47:65:2d:7c:0c:
                    e3:cf:61:17:dd:da:6c:3e:3f:e6:59:9c:fc:32:29:
                    6a:b7:36:89:ee:a5:78:f6:09:ae:3b:41:a4:6a:25:
                    88:5c:1b:96:0c:d6:52:c6:88:49:7b:2f:9b:1b:43:
                    ca:3d:ab:9e:7b:30:64:65:4b:ef:50:6a:e2:9d:e5:
                    64:8e:87:a7:78:45:91:87:e9:3c:2e:78:bf:f3:32:
                    53:56:34:90:64:d3:c5:c2:e5:ed:ad:da:91:18:98:
                    25:93:16:a1:f3:67:5e:9a:a9:b6:ff:0b:35:40:07:
                    5b:8c:e0:dd:94:6b:50:df:cf:6d:a2:aa:7c:3c:af:
                    e1:2e:69:a0:51:5c:1c:92:14:bd:64:7f:11:94:1c:
                    18:28:63:db:33:73:3a:fd:67:46:d9:38:20:18:86:
                    67:5f:f9:b1:c2:73:17:80:08:68:03:41:19:ba:70:
                    1c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C9:A4:50:43:8A:F5:D3:44:45:29:85:39:3B:AC:CE:62:0E:21:C6
            X509v3 Authority Key Identifier:
                keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:3a:3b:c1:cc:8b:f0:e3:17:49:45:97:6b:7b:99:11:e8:cd:
         92:7f:3e:dd:ad:1b:ee:9b:d4:fa:6b:0c:a2:ef:dd:52:03:7b:
         8b:3e:b5:25:2e:23:1e:30:5f:3e:b8:f6:03:59:ac:62:85:99:
         0c:ce:68:73:13:f0:7a:94:51:8e:74:fc:b3:a5:ba:32:fc:f8:
         66:32:e2:fb:10:72:bf:04:4b:7b:d8:bc:83:c3:03:f6:ba:74:
         f4:6e:70:3e:fe:80:65:6a:6c:3e:12:d6:b8:ee:57:58:98:c9:
         3d:bb:42:ad:ec:68:fe:c1:33:10:78:aa:e6:1d:c0:07:99:06:
         06:24:69:08:93:50:30:5e:26:8f:44:ff:f2:fd:b2:92:6d:92:
         e2:bc:1f:70:b1:87:21:f5:ef:8d:3a:03:0c:7e:f6:13:a5:d9:
         51:73:35:bd:cf:f3:45:f8:65:8c:0c:a6:ff:76:13:c6:ec:8e:
         a8:dd:23:48:4a:78:d0:cc:a4:91:e9:92:a0:9f:ec:f6:1a:c2:
         e0:54:c6:e9:3e:88:a2:67:de:59:4e:84:7b:0c:fc:91:32:e0:
         da:6c:f6:3b:5c:05:44:3c:c2:25:c3:18:e9:ce:eb:74:78:d0:
         72:f0:9d:08:32:50:39:4a:ef:7f:65:6e:94:a4:8f:a6:1c:5a:
         00:cb:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:00 2026 by rpki-client