Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft
File:                     9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json)
Hash identifier:          NuRGw+LLeCNxaNZ6H/enmylxcVLksZRyTn/sur3eVDI=
Subject key identifier:   75:05:2F:A7:71:58:D6:D1:ED:38:D9:E5:CB:58:4B:B1:40:BA:74:42
Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B
Certificate issuer:       /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B
Certificate serial:       08E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft
Manifest number:          08D5
Signing time:             Sun 26 Jul 2026 21:01:38 +0000
Manifest this update:     Sun 26 Jul 2026 21:01:37 +0000
Manifest next update:     Sun 02 Aug 2026 21:01:37 +0000
Files and hashes:         1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: YcPbZs0pXxdZq/eFqy2Df86cpsmD4Hinh5F0/FI58B4=)
                          2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: MUOkb6HBrIcJHM8GhoD7uMpA/Mn234hOvyhOtrfNkiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl
                          rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2278 (0x8e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CFD2, serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B
        Validity
            Not Before: Jul 26 21:01:37 2026 GMT
            Not After : Aug  2 21:01:37 2026 GMT
        Subject: CN=6a6675b1-f029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:27:1e:4a:e6:3e:fa:ef:7d:99:0f:39:bb:50:
                    67:72:68:46:ed:5a:ad:d6:b0:51:c5:b1:c4:43:41:
                    e8:d0:ff:95:32:7c:fa:f6:c0:d2:fc:96:15:7b:d0:
                    9e:ff:0d:83:1b:98:3e:ff:c9:1c:52:1e:ac:53:69:
                    c0:d5:28:ed:b9:3f:27:76:90:e0:6f:d4:45:a1:30:
                    05:d1:f9:ce:6d:ef:5c:66:16:db:bb:70:f2:69:6d:
                    aa:2f:b5:5c:9b:91:e7:79:ad:e1:de:01:72:6b:06:
                    3d:75:13:39:24:26:d3:9a:05:8b:1b:a6:dc:fc:a1:
                    b0:6d:59:c9:5a:52:d1:7f:71:d4:64:9a:70:f3:c1:
                    e5:be:d5:7f:04:73:70:16:eb:ec:55:e2:cb:2d:9b:
                    00:48:72:5b:2e:f3:e7:cf:2d:c1:dd:5e:5e:91:e1:
                    6b:55:6d:e9:43:e7:d8:74:16:f6:b1:7a:ac:db:65:
                    38:a4:03:a6:6e:08:b8:d0:fc:38:20:20:8f:bf:a8:
                    c7:3d:7d:2a:1d:92:32:7f:ef:ba:79:85:75:27:3d:
                    5a:5d:41:a6:a8:06:e4:48:3b:a1:10:20:7c:13:ef:
                    87:98:ad:7c:50:b3:f4:f2:4f:13:92:fb:cb:e7:62:
                    38:7f:f7:f6:16:dd:48:cd:8c:ae:08:20:95:2a:72:
                    ad:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:05:2F:A7:71:58:D6:D1:ED:38:D9:E5:CB:58:4B:B1:40:BA:74:42
            X509v3 Authority Key Identifier:
                keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7a:fd:8b:64:d6:86:0e:db:71:8f:18:df:32:c1:29:bf:12:
         57:d7:6d:ed:d4:7a:27:8d:0e:d7:a1:34:40:60:53:a9:3d:0b:
         4e:7f:52:09:24:06:7c:89:7a:6e:e0:b4:ee:81:93:9d:58:a0:
         ef:0d:a7:09:e6:8d:02:a4:06:a5:90:f5:71:7d:ec:66:89:6a:
         9b:41:77:24:cf:ef:e5:e8:9c:06:63:ff:f7:10:f1:2c:9a:02:
         00:58:5d:16:92:2b:62:db:66:bd:fd:31:95:4a:e5:52:eb:3a:
         12:91:1a:25:59:69:d5:2d:77:2b:60:9c:64:eb:4e:7f:37:1e:
         6c:ed:8a:be:5e:b7:ca:dd:e7:f5:4a:c5:61:68:7a:5d:aa:6c:
         8f:92:29:ac:04:db:6a:ac:1b:ba:6b:9d:03:ec:72:a6:e1:f2:
         78:63:0e:ec:1e:8a:b3:37:c3:7e:5a:bb:6e:1f:91:20:e4:7a:
         7d:e4:03:c2:c2:85:9c:ca:07:ee:e7:48:e5:a8:57:30:bb:56:
         14:2b:46:f0:9f:77:6a:2c:c3:57:07:db:c1:61:bb:92:0c:4f:
         e4:3a:c7:7c:0c:ea:7b:a9:9f:c8:a8:12:95:2f:7c:39:c6:82:
         6e:b9:02:31:9f:52:ff:c8:0b:29:1d:3c:2a:4b:19:a0:57:ef:
         91:ed:e6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:44 2026 by rpki-client