Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
File:                     2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft (raw, json)
Hash identifier:          JMsYOlnOGD2SF2RyQdqxL0EhppbMC9cqO8qb1LTWt30=
Subject key identifier:   77:28:26:EF:7E:6C:3E:9C:C1:EE:04:EA:25:EB:B9:74:99:85:B7:F3
Authority key identifier: D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41
Certificate issuer:       /CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41
Certificate serial:       0757
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
Manifest number:          074B
Signing time:             Tue 28 Jul 2026 22:22:38 +0000
Manifest this update:     Tue 28 Jul 2026 22:22:38 +0000
Manifest next update:     Tue 04 Aug 2026 22:22:38 +0000
Files and hashes:         1: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl (hash: qSEiA9+Y/OCarUvIujz6UIVG3okApd1I4Ao8OtSGOSg=)
                          2: 0BEE202087BA11EBBBA56067C4F9AE02.roa (hash: ZpGh+0AaLi7VES4v6+0Nh1egQb53z0dspkSaTavSdXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl
                          rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879 (0x757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91795CA, serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41
        Validity
            Not Before: Jul 28 22:22:38 2026 GMT
            Not After : Aug  4 22:22:38 2026 GMT
        Subject: CN=6a692bae-d2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:68:83:bc:27:1c:a7:e0:ca:e3:bf:a8:ce:
                    3c:96:73:b0:cd:50:1f:ea:6f:31:ff:e8:38:53:35:
                    c2:fd:66:a3:bd:03:1b:29:a1:43:8f:dc:02:30:7a:
                    05:5e:7f:5e:88:62:a7:97:f1:4d:d6:ef:d8:53:ea:
                    fa:45:9b:83:dc:54:a5:5b:69:93:3f:13:11:35:55:
                    f6:6d:e2:34:af:0b:5b:e0:05:81:0d:d5:06:e2:13:
                    17:6b:c1:81:00:b9:2a:d3:f7:1a:2e:25:c5:08:ab:
                    b3:df:44:4a:52:70:43:1f:fa:bf:96:e1:91:6e:48:
                    25:b9:cb:c7:de:63:c4:f9:a5:aa:bf:b6:d9:83:a2:
                    e3:35:b2:a7:29:88:c0:08:95:54:8a:9d:94:3a:a5:
                    3a:3d:64:7b:88:84:22:fe:4c:17:47:59:6b:94:fa:
                    73:86:a9:de:c7:7b:5b:bb:f7:fc:fe:e5:c6:ba:8e:
                    c7:c9:9b:76:57:09:98:6c:76:98:1e:b0:ab:10:4a:
                    02:84:bc:45:44:72:81:76:13:d9:16:77:19:95:00:
                    4f:6b:b3:10:49:ed:fd:da:e3:59:60:22:ab:50:cf:
                    d7:0c:da:e2:1c:92:79:3c:20:d1:3d:91:56:08:c9:
                    c0:49:6d:30:a8:69:36:a0:d4:44:c3:af:c7:8e:2a:
                    3c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:28:26:EF:7E:6C:3E:9C:C1:EE:04:EA:25:EB:B9:74:99:85:B7:F3
            X509v3 Authority Key Identifier:
                keyid:D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c1:e3:f1:44:71:ae:70:b0:c3:bb:45:9c:c5:27:85:9b:03:
         46:22:40:12:78:b1:2b:cf:57:e3:2d:18:47:7d:78:81:c9:17:
         85:af:b9:ba:b3:f4:51:ff:69:23:55:51:6a:18:ea:26:8b:49:
         63:1b:48:42:4a:81:0f:e9:e8:fd:88:93:23:c4:29:80:fd:85:
         fc:93:81:b2:e6:49:04:62:8d:8d:36:7f:d5:2d:f4:98:17:5f:
         0e:1f:8a:26:77:22:a5:89:22:7c:75:6c:37:67:27:ff:6e:47:
         f4:8f:7d:e3:b2:7e:48:0d:4f:ac:3f:20:05:e5:16:87:aa:94:
         c2:4c:24:74:3f:9a:cc:81:14:e3:7f:4a:ce:6b:79:59:b2:79:
         61:e2:0f:62:38:c6:d2:3a:dc:45:fe:d8:03:da:c8:c9:5f:1a:
         7a:b1:d5:ea:42:ea:f9:fe:8e:97:e5:81:60:26:db:84:7f:4c:
         58:2b:ef:1a:4b:8b:43:8f:60:74:e1:3b:d4:a9:26:1b:82:e7:
         9d:a5:c2:2c:f6:69:9c:10:58:b0:11:e4:4e:6b:d8:da:89:56:
         14:7a:47:31:98:f3:f5:9e:d8:40:46:b4:ba:f1:64:85:52:48:
         24:ea:1b:30:e2:88:5c:fa:e7:e7:21:7a:16:a5:5b:b0:85:f7:
         7e:6b:b6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:43:50 2026 by rpki-client