Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
File:                     zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json)
Hash identifier:          DpfvVro56u5tULE541iNfYW+VFQyUcxLrPcc9d0Qx6k=
Subject key identifier:   01:D1:DE:C2:75:2E:11:67:D9:A4:EF:40:34:A5:2B:86:89:3D:0B:96
Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
Certificate issuer:       /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
Manifest number:          6C
Signing time:             Mon 27 Jul 2026 10:13:25 +0000
Manifest this update:     Mon 27 Jul 2026 10:13:25 +0000
Manifest next update:     Mon 03 Aug 2026 10:13:25 +0000
Files and hashes:         1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: 8FWjQMfNcphPnDI6jWrp9UKdwy4SqUBxl+1cUfRRoHg=)
                          2: 81B5D9F8440511F1AB7B95FDB3833773.roa (hash: vn//9j6htUmeMHzJ/Tep4NLTfUBbskiXsWzwXG8Uy9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
                          rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
        Validity
            Not Before: Jul 27 10:13:25 2026 GMT
            Not After : Aug  3 10:13:25 2026 GMT
        Subject: CN=6a672f45-a37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:56:6e:d9:46:40:25:16:f8:9d:cd:99:31:
                    c9:52:6c:c2:0c:e8:9d:8a:55:da:a3:8a:44:d8:db:
                    d7:b4:c7:bf:b3:13:0a:34:a4:0a:53:e5:16:57:1a:
                    1b:5b:cc:a8:c9:d9:a1:b9:e0:24:08:16:5b:ed:9d:
                    35:6a:fe:bf:54:40:96:34:b0:42:b4:f3:0c:61:37:
                    17:50:14:5a:53:3a:5b:36:27:1e:0f:df:f8:1d:10:
                    43:c2:e3:0f:48:da:ab:80:b9:38:52:14:2b:3f:bc:
                    aa:29:c7:9d:60:ab:a4:4b:6e:7d:2a:52:5a:5d:44:
                    c7:3f:e0:eb:63:e9:93:dd:50:7c:3e:1c:3f:88:72:
                    3a:8d:cc:1d:d8:cf:b1:78:27:2f:fa:5d:4d:85:9d:
                    37:20:8d:8e:4f:73:55:02:c3:96:df:ea:92:f2:6f:
                    d6:7b:b8:de:0c:b5:64:c7:43:f7:46:02:e5:3c:28:
                    22:7a:45:6c:52:32:74:1e:c7:e4:9b:0d:c1:49:b0:
                    4d:8e:ab:e0:4e:6a:83:38:f6:ba:d9:60:2f:a8:06:
                    4d:3a:a4:7e:e3:da:f1:99:16:61:42:62:6e:c7:15:
                    7c:78:60:b2:9c:93:f1:41:41:16:40:b3:ed:db:9d:
                    ff:e5:fe:7e:a4:54:a6:10:1e:15:34:8f:bb:be:df:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D1:DE:C2:75:2E:11:67:D9:A4:EF:40:34:A5:2B:86:89:3D:0B:96
            X509v3 Authority Key Identifier:
                keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:bf:25:8d:2a:4d:d4:0d:5b:0f:9f:61:be:4b:54:d0:c6:4d:
         8e:6d:70:ce:bf:90:db:54:f3:b1:4e:14:0d:ef:61:a1:f2:8d:
         5f:77:db:da:f5:df:0c:5e:35:5e:70:c9:d1:80:ee:7d:5d:a4:
         d2:66:d7:f5:b0:03:41:00:95:05:2e:76:d3:d1:2a:3f:7e:f8:
         a3:c2:5c:fd:ef:f0:d9:4f:2b:b3:95:61:00:f2:62:78:5f:18:
         a4:34:a9:97:dc:27:70:d0:8e:96:0b:19:3f:4b:e0:56:be:13:
         e9:63:f9:f5:ef:2a:99:47:db:c2:ba:99:24:10:21:4c:72:ff:
         04:5e:27:c9:4c:40:c2:6c:78:f7:a9:2f:67:6e:11:86:ea:fc:
         f1:4c:24:96:18:71:18:37:c9:c9:4b:ca:b0:c0:49:58:15:d3:
         6c:81:93:94:0b:76:14:da:51:01:9d:bb:e8:b7:dd:d1:a0:24:
         b8:ee:5f:64:6f:5a:9b:de:51:8c:32:86:f8:05:d3:51:72:86:
         91:19:93:d6:9b:44:51:34:bf:60:4b:5f:2d:b1:fd:f1:6a:84:
         6b:e9:ac:94:95:c7:c3:94:75:95:44:c0:39:3d:3f:ca:23:cb:
         2d:8c:57:21:2e:7f:c5:4f:62:c9:7f:95:00:36:20:b1:e0:e6:
         49:cc:84:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:42:03 2026 by rpki-client