Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
File:                     Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json)
Hash identifier:          2uAfAjOdrQG77VuWvIaK/GpaPw7t6R1wsgTwih7ShYo=
Subject key identifier:   2E:F8:2E:CE:EE:65:C9:EA:54:AB:6B:95:76:9C:DF:D0:08:F4:ED:FE
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Certificate issuer:       /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial:       1094
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
Manifest number:          107D
Signing time:             Tue 28 Jul 2026 17:28:28 +0000
Manifest this update:     Tue 28 Jul 2026 17:28:28 +0000
Manifest next update:     Tue 04 Aug 2026 17:28:28 +0000
Files and hashes:         1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: ctPc1Y2DHpUPArFhxcCtE8Okij3lKW4b7vdn2xeed14=)
                          2: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: BUHXcbwgDCfppQqI14tt+SHKjsNJaOwlcThHrAcU48k=)
                          3: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: d+s7KZXz1WqJhrg7kNulx9MrS05rezWlx0peNL2GZrc=)
                          4: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: +GqC4kHrlGijBhG+Vf9OqiE+irbiFIUUxvaGXJ8E0NA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4244 (0x1094)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
        Validity
            Not Before: Jul 28 17:28:28 2026 GMT
            Not After : Aug  4 17:28:28 2026 GMT
        Subject: CN=6a68e6bc-2b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:06:a3:df:94:73:0c:de:22:8e:c4:b1:90:
                    b4:58:2c:86:19:01:29:41:f4:d4:b4:be:15:1d:a2:
                    22:0a:e1:4d:1f:f8:46:bb:56:a8:a5:8c:9e:17:b8:
                    c1:fe:60:b6:52:ef:40:da:cd:f9:0a:a6:fe:a4:f4:
                    b6:29:05:e9:b4:40:3f:f1:96:f1:8c:7c:3c:b9:a3:
                    6d:19:4b:4c:de:bc:53:fe:ff:c7:60:92:62:0e:4c:
                    38:3d:68:16:b4:ba:03:8c:64:06:72:2c:c8:f6:94:
                    9c:d9:87:ae:ae:09:b5:56:37:1c:11:95:b4:fd:3f:
                    e7:b2:a8:06:97:8d:f2:ff:04:c8:40:37:8e:ce:84:
                    c3:08:c9:32:0e:b7:f1:db:16:4d:f8:aa:bf:e4:0f:
                    1a:e9:d3:d4:0d:9e:ff:af:2c:4b:c8:48:f5:81:17:
                    95:ef:c9:77:e7:f8:ac:7e:de:9a:30:dd:16:99:89:
                    bb:98:67:68:ef:e6:9e:b8:a0:76:a8:c4:c1:cc:07:
                    ca:06:34:0d:fb:e0:21:01:44:92:c7:6f:6e:b0:23:
                    d9:12:72:e7:f3:43:bd:b8:53:d1:d1:e5:42:a0:e5:
                    a8:8f:c8:95:85:c5:0a:a2:48:06:3a:5e:c2:8e:14:
                    a4:ba:8e:9e:bf:f6:a7:97:20:aa:9b:17:fb:16:48:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F8:2E:CE:EE:65:C9:EA:54:AB:6B:95:76:9C:DF:D0:08:F4:ED:FE
            X509v3 Authority Key Identifier:
                keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:05:9e:94:cd:cc:a7:01:53:fd:91:e2:cd:7f:90:55:42:55:
         37:d5:d6:0e:a9:b5:32:32:88:56:a5:6b:9f:80:d4:b4:ef:7c:
         0b:ff:90:6a:c0:0c:45:34:d3:d6:b7:10:db:da:08:dd:6d:68:
         3b:6d:36:56:eb:a2:69:29:b3:7a:58:68:a4:fa:ef:9f:24:f0:
         c9:70:3a:8c:0d:aa:62:fc:71:55:b2:f6:ee:af:81:dc:42:3a:
         22:9b:f5:ea:5b:c9:61:a4:8c:ad:7b:01:f7:a3:da:10:4e:94:
         eb:ae:e6:f0:64:32:91:1b:fd:b1:99:c1:d4:44:f9:e7:44:26:
         a8:d9:9f:39:54:f1:f4:28:52:93:a7:77:eb:91:ff:2e:2c:da:
         49:08:55:f5:23:be:d0:e2:17:0b:f4:8a:47:b1:0e:54:85:da:
         3f:3e:28:58:e3:7b:59:7c:d4:3e:d4:f4:17:5e:51:80:97:6a:
         ba:14:57:53:f2:43:63:ab:2a:64:27:49:3a:9c:d7:ef:f8:98:
         ce:8a:e5:ed:ff:25:12:5d:bd:1a:8a:3f:d9:dc:cf:da:20:bc:
         ef:8f:ef:95:6e:81:c0:84:67:03:95:ed:50:bf:c4:d0:47:87:
         aa:3a:c8:f3:56:c0:1b:d0:6c:44:c5:7e:0b:4b:19:62:1c:25:
         ad:c8:c6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:58:31 2026 by rpki-client