Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
File:                     ZuoPg73TYyv_GUALOhum_t_8VYc.mft (raw, json)
Hash identifier:          gFxnxIGyMLPoJHMZBFEUZ084iE5iGbD244dhsi7cBdE=
Subject key identifier:   BD:BB:B3:53:2A:CA:21:AF:20:EA:9E:D0:DF:D4:7D:52:F6:0F:A6:22
Authority key identifier: 66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87
Certificate issuer:       /CN=A917CB63/serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587
Certificate serial:       3580
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
Manifest number:          3571
Signing time:             Tue 28 Jul 2026 15:16:56 +0000
Manifest this update:     Tue 28 Jul 2026 15:16:56 +0000
Manifest next update:     Tue 04 Aug 2026 15:16:56 +0000
Files and hashes:         1: ZuoPg73TYyv_GUALOhum_t_8VYc.crl (hash: tC2noLxg9UN5GngnKlYv8OQG9H3SdbED2Uwf5VXNcXY=)
                          2: c5DC99Q5nXQ-wa9pZ3b2yCHHwQs.asa (hash: uc1it6L4GXH/et0F43S0KFaVEPSAqsiJCfwfTJNTOnA=)
                          3: 1190361AAF1B11E7B89F3883C4F9AE02.roa (hash: bfiGLOqg6WEf/R0XNy4/HeNqzd36AQk5hmCgwfazvuk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl
                          rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13696 (0x3580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CB63, serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587
        Validity
            Not Before: Jul 28 15:16:56 2026 GMT
            Not After : Aug  4 15:16:56 2026 GMT
        Subject: CN=6a68c7e8-679f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1d:6c:0f:d2:41:94:fe:f8:af:13:2e:db:88:
                    41:8c:dd:df:ed:18:97:7c:59:6f:9f:eb:6c:15:6c:
                    26:51:ce:50:0f:9c:2d:35:45:f4:03:97:7d:37:20:
                    51:3b:68:8d:81:ce:e8:3a:2a:7c:65:0c:71:9c:ff:
                    7a:f4:ca:40:4d:41:ef:7e:5f:9c:4e:23:a1:83:24:
                    44:76:c6:4b:25:a5:b2:e2:ed:ae:1e:8a:f0:4c:36:
                    fc:f7:5a:7b:e9:96:64:23:ca:b9:f7:da:fc:35:ae:
                    56:50:97:8b:59:ab:c5:a3:e3:67:2c:cf:dd:d2:bb:
                    c8:90:15:49:44:7f:e3:88:a4:20:cc:1e:ca:3b:24:
                    32:10:bb:cb:44:3b:10:8b:36:c1:e3:48:15:28:c9:
                    a0:71:83:20:dd:f0:42:3b:f0:7b:28:f1:63:ce:7b:
                    b4:fb:0f:77:d1:29:d6:13:20:04:30:f1:9e:5a:cc:
                    e4:31:f0:55:20:8b:77:ae:c8:64:f1:a4:ec:f5:b1:
                    6d:35:18:68:73:e2:8f:a1:20:38:9f:e0:3f:55:47:
                    90:21:62:1c:e9:3b:f3:4e:8c:8c:e8:76:79:25:b9:
                    14:54:ac:52:99:27:b9:33:27:4c:3e:cb:50:da:4c:
                    9d:5f:60:ab:7e:b1:4f:ce:51:4d:60:47:bc:2e:dd:
                    cd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BB:B3:53:2A:CA:21:AF:20:EA:9E:D0:DF:D4:7D:52:F6:0F:A6:22
            X509v3 Authority Key Identifier:
                keyid:66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:5f:63:61:03:6e:8a:d4:15:6a:05:86:9d:3a:d2:c1:7d:06:
         5b:cf:1a:2f:a2:03:4c:00:2e:a9:ec:73:f1:7d:5e:74:3d:8a:
         34:75:94:e4:86:71:17:b1:4c:21:97:cc:eb:12:d4:a1:2a:8e:
         81:b1:74:cb:59:fa:a8:8e:51:34:90:e0:c0:3c:3b:ea:1a:00:
         cd:fc:89:13:3e:42:9b:fd:61:6b:55:7d:c9:6c:9e:8a:cf:d8:
         13:e9:2d:fe:3b:3c:8a:5f:6a:71:44:0f:9e:83:0f:17:25:90:
         16:67:0f:b3:31:88:89:be:25:7e:7c:fe:ad:0c:33:a2:53:72:
         c4:f8:c0:f1:a9:47:19:e0:72:b6:31:21:54:70:e0:da:ac:e9:
         ff:49:89:a0:4e:d8:07:9f:12:9d:b1:69:45:8d:62:1c:3f:5b:
         85:e2:5b:a4:9e:dc:6f:87:9a:7e:c5:34:ef:9e:a4:b0:0d:8e:
         08:b2:41:4b:9e:93:5c:cb:e0:24:79:c4:b3:c0:4e:00:a6:87:
         a8:6b:5a:20:1a:2e:42:81:48:dd:1a:ff:0e:3d:2e:53:bf:6d:
         72:0c:26:1c:ac:85:25:1c:07:b2:78:ee:b5:8d:49:55:05:ab:
         cf:85:9c:1f:21:af:90:90:84:a7:3a:87:f5:fe:76:6a:d3:97:
         f5:18:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:44 2026 by rpki-client