Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
File:                     zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json)
Hash identifier:          VrmL6DT1S0O2jGjgRdFnpxZIKyjnDuyxfLjijH90hXQ=
Subject key identifier:   70:89:AD:9B:7A:78:06:FB:87:3E:04:2F:96:64:3E:97:5F:0F:47:DE
Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52
Certificate issuer:       /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
Certificate serial:       1BCC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
Manifest number:          1B93
Signing time:             Tue 28 Jul 2026 16:21:17 +0000
Manifest this update:     Tue 28 Jul 2026 16:21:17 +0000
Manifest next update:     Tue 04 Aug 2026 16:21:17 +0000
Files and hashes:         1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: 8gQ19jtNh+hdxmWoNY+d8n5nsrZqoiGL4JoX5va3aGU=)
                          2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: PINyvml/lmMP9n4bWW3ReQfqdMUKwVbzw95W7AWHcZQ=)
                          3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: MGtVx11HokReybIJaW43xGqirmSnPfw9cAmc88rn5e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl
                          rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7116 (0x1bcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
        Validity
            Not Before: Jul 28 16:21:17 2026 GMT
            Not After : Aug  4 16:21:17 2026 GMT
        Subject: CN=6a68d6fd-18cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:84:e9:5c:67:dc:53:ad:a5:c9:a5:b4:b4:
                    8b:0a:fe:a3:1b:07:89:b8:43:f7:1f:e5:75:82:da:
                    3b:90:f5:56:95:c6:26:9f:8a:4e:d9:57:13:15:94:
                    12:27:a2:c0:66:4a:2e:5a:58:cc:4a:86:2d:dc:0b:
                    be:a3:d8:a2:01:b0:73:30:a6:ec:31:e4:90:d3:4c:
                    89:d3:40:1c:6e:4b:6a:c0:fc:e1:c8:31:ce:b2:d0:
                    7b:ff:f7:3c:b3:55:8c:72:4e:bf:4c:a8:47:99:53:
                    ca:f5:22:02:1e:ce:cc:bf:82:2a:e1:fe:6b:87:63:
                    97:73:21:20:66:fc:81:4b:a2:74:df:c5:ac:0e:f4:
                    93:13:24:29:f2:b2:f8:0a:8b:65:71:fc:75:fe:e0:
                    de:66:bd:d9:c6:78:7e:ca:e6:a7:31:f2:e4:d9:42:
                    c4:03:d7:e8:99:ab:0f:2c:40:cd:96:fb:04:81:6b:
                    a2:6d:b6:89:af:9d:35:af:f5:aa:44:fa:78:cc:77:
                    28:33:8f:28:26:eb:f8:0d:f8:9f:e5:c4:95:a3:d3:
                    41:25:69:1e:21:3a:6b:63:76:bf:29:f7:ed:70:e5:
                    d4:37:f5:4e:b4:d8:0a:b0:b8:c9:d8:b4:f3:80:bb:
                    cd:10:cb:c2:57:05:c8:9c:9a:5d:b8:cc:6e:b8:4a:
                    a5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:89:AD:9B:7A:78:06:FB:87:3E:04:2F:96:64:3E:97:5F:0F:47:DE
            X509v3 Authority Key Identifier:
                keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d5:2d:0f:ab:0c:85:ce:b7:5a:ca:77:24:93:47:2b:66:32:
         17:48:50:44:f9:5c:b0:4e:69:b7:95:1c:7b:a6:cf:09:26:34:
         0d:b7:68:3a:53:ba:50:fe:e2:5f:84:29:09:07:09:9d:1d:31:
         19:f1:df:1b:c2:e0:0e:22:ae:19:c8:64:76:c3:e2:f1:1e:7f:
         92:11:3c:69:17:91:fa:99:67:99:59:17:44:77:03:ba:0f:2a:
         6d:4f:bb:ee:66:fc:2e:95:9c:ec:f1:51:b8:3f:28:a4:b3:4d:
         66:a4:34:7b:8e:3c:30:80:01:3a:86:02:a1:a5:1a:00:36:c1:
         44:55:64:ee:35:31:e1:fd:64:46:14:ad:6d:4d:cc:ff:b0:e9:
         36:ad:96:4e:8f:37:24:c6:d8:82:a2:c0:41:6f:58:8e:f8:f2:
         8d:80:c5:69:02:93:ca:e5:07:dd:a0:f8:f2:27:25:1f:b4:70:
         32:6b:7f:b0:94:ba:f0:81:5d:d2:15:62:1c:ea:07:e3:08:57:
         1f:19:3d:dd:91:d3:f1:da:c2:8d:9b:f3:4b:57:15:7e:1f:7e:
         24:13:4c:66:b6:cd:34:27:97:94:b1:3c:57:8a:0f:ff:33:1a:
         60:be:2c:f4:e1:31:71:bd:cd:37:28:9f:c3:31:3a:2c:ea:49:
         12:42:9b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:45:44 2026 by rpki-client