Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft
File:                     ZH5crcsfv367iZpyGcOg8D0_ew0.mft (raw, json)
Hash identifier:          TjpyBdcKoslqD4/J8souNjhigiLG1W/SbSG2tKuEP3o=
Subject key identifier:   AF:76:41:59:D5:BC:DF:60:B2:88:C1:30:CB:0B:E6:D5:D0:9C:DB:15
Authority key identifier: 64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D
Certificate issuer:       /CN=A91951DE/serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft
Manifest number:          C4
Signing time:             Mon 27 Jul 2026 09:02:45 +0000
Manifest this update:     Mon 27 Jul 2026 09:02:45 +0000
Manifest next update:     Mon 03 Aug 2026 09:02:45 +0000
Files and hashes:         1: ZH5crcsfv367iZpyGcOg8D0_ew0.crl (hash: Hu+fEyanIJa8Q8p149pe02x1JmhEmD5M7ANfanLBAss=)
                          2: 533DC25E60B511F0AB567568C4F9AE02.roa (hash: 3eyoBtxWZnVo9d8QTWGg5n0zVCETmWq673Im+Ia8NGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl
                          rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91951DE, serialNumber=647E5CADCB1FBF7EBB899A7219C3A0F03D3F7B0D
        Validity
            Not Before: Jul 27 09:02:45 2026 GMT
            Not After : Aug  3 09:02:45 2026 GMT
        Subject: CN=6a671eb5-8779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:e2:1a:68:e6:44:2d:85:f3:d4:33:87:6a:
                    d1:de:29:8f:de:39:e0:70:6e:24:bd:6b:9a:7b:3a:
                    61:32:82:41:9b:f6:2f:38:1e:a4:44:9d:f3:f4:e7:
                    f3:a7:12:51:9c:45:10:64:ed:50:cc:c7:3a:2d:9d:
                    6d:df:45:f8:af:b3:32:a9:fe:d9:32:60:3d:60:38:
                    6a:5a:dc:62:85:74:64:38:2a:b8:89:a2:da:f8:61:
                    93:84:4c:cc:40:56:47:ff:20:38:a3:8e:af:61:e4:
                    6c:15:8d:8d:80:fd:c1:de:57:87:cb:5e:ca:08:b1:
                    59:b9:95:a3:58:c9:a4:48:d3:42:7c:36:65:0c:19:
                    f2:40:d5:61:7b:ba:73:4e:97:40:8f:7f:ed:32:f1:
                    c8:ac:cc:9c:85:67:10:cc:f4:ed:45:a9:ea:0f:c8:
                    b6:6f:ec:0f:22:ab:b7:f4:29:f3:0d:73:cb:14:94:
                    2f:ac:b1:1a:cb:48:3d:3a:59:d2:7b:2a:7f:22:92:
                    8e:10:8c:0f:9a:80:ef:59:15:70:27:4c:d8:02:4c:
                    7f:ab:8b:0b:65:af:f8:b8:9d:31:1a:0a:65:56:22:
                    bd:6b:17:f6:23:36:f9:de:a9:8a:d0:1b:88:bc:31:
                    4a:f5:3f:cd:2c:11:ed:86:18:cb:77:2e:76:c2:43:
                    9e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:76:41:59:D5:BC:DF:60:B2:88:C1:30:CB:0B:E6:D5:D0:9C:DB:15
            X509v3 Authority Key Identifier:
                keyid:64:7E:5C:AD:CB:1F:BF:7E:BB:89:9A:72:19:C3:A0:F0:3D:3F:7B:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH5crcsfv367iZpyGcOg8D0_ew0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/904F870A60B411F08ED7AE63C4F9AE02/ZH5crcsfv367iZpyGcOg8D0_ew0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:00:2e:b9:15:9b:81:96:bc:72:4e:15:be:ce:50:38:c3:a3:
         a3:4a:5b:eb:c2:12:c0:8f:62:36:49:69:5a:ba:05:20:4d:89:
         dc:53:1d:17:40:3e:f8:12:c1:fc:b3:3a:c4:ed:37:64:af:50:
         32:f0:f7:b4:33:e7:8b:5d:e3:25:c0:9e:b4:47:a5:76:0c:a5:
         cc:79:7c:ea:29:20:8d:70:e3:47:bc:78:9d:c1:a1:0a:52:b2:
         34:9c:f8:ab:52:94:d1:fa:91:69:da:fd:ba:ed:c1:02:1d:ce:
         49:c4:72:49:58:a1:56:95:a4:c3:7b:0e:20:04:61:ca:9e:4b:
         05:70:1f:b4:f5:6f:24:fb:24:9a:32:60:a9:c8:3b:2b:71:60:
         db:b4:f3:68:07:23:e1:9a:28:e6:8e:e0:22:3d:ec:ab:49:b4:
         d0:79:ad:f5:3d:ed:c6:8d:47:08:4d:d1:9d:d0:fe:d8:73:11:
         98:4f:17:ba:aa:c1:7a:8a:ed:5e:6e:b5:a0:af:f1:47:2f:16:
         fb:c4:96:f1:0a:ab:48:7d:c0:b4:ba:a1:7d:26:1c:0c:5a:69:
         7b:15:56:47:03:ee:ac:67:c1:29:d0:9d:dd:4b:51:a5:a1:e6:
         10:f8:18:e4:d0:58:09:bc:17:14:a8:e3:2b:53:c2:de:45:1d:
         e7:84:87:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:43 2026 by rpki-client