Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
File:                     ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json)
Hash identifier:          bQ0Kn8L3F4GcDF9gGvsqB3xNjZfUKG63exx6SAOp/kM=
Subject key identifier:   DE:BE:18:AC:CE:CD:BE:80:50:CA:FD:E2:86:5C:39:6E:A2:2A:AF:48
Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
Certificate issuer:       /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Certificate serial:       23D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
Manifest number:          23C7
Signing time:             Tue 28 Jul 2026 15:54:10 +0000
Manifest this update:     Tue 28 Jul 2026 15:54:09 +0000
Manifest next update:     Tue 04 Aug 2026 15:54:09 +0000
Files and hashes:         1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: hBnv6h3STztAA/w/WUJ8oFPN07/kA4B2TYsEgjBjQZM=)
                          2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: Qn2+lYGa2h6xQsCbP0A3ivL3myO3Z5q3ATYz2Fpqscc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
                          rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9176 (0x23d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
        Validity
            Not Before: Jul 28 15:54:09 2026 GMT
            Not After : Aug  4 15:54:09 2026 GMT
        Subject: CN=6a68d0a2-207e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a6:8a:9a:c5:c3:82:20:59:48:78:0e:4e:6a:
                    98:ef:8e:96:f8:09:5b:2f:88:c1:76:7e:49:2d:3b:
                    81:05:31:f9:e1:6a:69:8b:6b:c3:18:8c:fa:3d:df:
                    16:f7:b8:cf:c6:12:a7:7c:b4:c9:03:dd:e9:f9:47:
                    1f:6b:c5:c6:73:fe:48:90:4d:43:44:23:1f:91:9d:
                    96:6b:1e:24:d3:05:4f:c3:00:d1:b4:32:62:69:52:
                    fb:b7:ff:5c:1e:c9:d8:84:7b:d8:15:3e:a4:de:57:
                    ab:e6:c8:33:4a:26:dc:5b:a4:fd:79:9a:f5:bc:44:
                    92:f5:8b:2c:5f:39:dd:86:9e:1f:63:7c:fe:e2:1c:
                    00:46:09:ef:a8:f8:ed:1d:b3:0e:ae:4f:fa:f4:71:
                    aa:a1:b6:e5:e5:f5:0a:e8:b0:ea:75:92:09:6d:73:
                    68:88:a7:d2:fb:d9:b4:5b:ee:af:f5:93:d9:f6:22:
                    3e:84:58:8f:e4:0f:c2:33:fe:9c:37:1e:35:f8:b4:
                    12:45:98:dc:48:5b:46:df:07:60:41:33:d0:e8:ec:
                    28:a0:bb:e6:2f:5a:6a:12:2d:2b:b9:04:11:4b:4b:
                    18:88:52:da:9a:13:09:aa:0f:83:82:81:9b:98:43:
                    e3:26:c8:66:31:a0:d4:69:c7:19:f9:5f:2c:c0:22:
                    99:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BE:18:AC:CE:CD:BE:80:50:CA:FD:E2:86:5C:39:6E:A2:2A:AF:48
            X509v3 Authority Key Identifier:
                keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:e5:29:c5:ab:ca:f8:d3:13:4e:7c:2b:d8:8e:d4:4d:d9:
         03:eb:3f:93:0c:3f:5f:6a:d2:e3:c9:9c:c5:96:85:f2:d0:b3:
         17:da:28:b5:6b:48:dd:f7:8e:cf:f1:4a:a7:3f:32:a6:83:b4:
         ae:5d:15:55:05:aa:ff:ef:c5:d3:91:4f:3b:7b:2c:b0:18:c8:
         cc:56:26:17:3d:f4:d2:6d:24:06:ba:57:87:5a:74:4f:b9:ee:
         df:60:5b:4a:ad:07:67:c5:dd:24:a7:c7:67:60:b4:b0:82:9d:
         b3:2d:14:6f:ea:ba:4e:1d:31:e6:9f:23:bd:79:6c:2a:86:2d:
         16:3b:ef:ff:35:ca:ca:d9:ef:dc:c9:bd:3f:1d:5d:e1:ee:66:
         4c:a0:7c:0f:b5:13:fc:6e:d2:4f:57:49:eb:12:d5:bc:47:0c:
         ca:ad:92:5c:b3:73:15:b0:06:84:37:8f:b0:66:73:e7:1d:dc:
         c2:54:05:cd:28:45:55:35:e0:37:b7:ba:f6:b6:f1:ba:6a:52:
         06:8a:b0:01:e2:57:cf:a4:a2:be:8f:44:69:83:e7:a8:b2:21:
         41:f9:b0:8c:ea:70:38:5a:26:3d:7f:62:2b:2e:c4:be:06:5c:
         b0:0c:af:1c:89:3f:cf:bf:42:6b:b1:92:a0:bf:61:5c:31:b8:
         cf:62:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:47 2026 by rpki-client