Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
File:                     ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft (raw, json)
Hash identifier:          8rPX6bjOggUfMj439LThgbh6+BsG7rlOF8GhzBinNgg=
Subject key identifier:   4B:F5:0E:19:CC:04:9A:49:D2:EB:2C:C8:C7:B8:55:89:4A:C4:9D:B9
Authority key identifier: 65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47
Certificate issuer:       /CN=A91A8219/serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
Certificate serial:       17EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
Manifest number:          17DD
Signing time:             Tue 28 Jul 2026 16:38:57 +0000
Manifest this update:     Tue 28 Jul 2026 16:38:56 +0000
Manifest next update:     Tue 04 Aug 2026 16:38:56 +0000
Files and hashes:         1: ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl (hash: qAAAd/8qzVetTyVBa0oFFhVeuvqdilYAdsWpGK7APK4=)
                          2: 314E917C651E11E8A8903D42C4F9AE02.roa (hash: 9ej0uJb9isKtTSetZZYMiqBTjxBpRK1yCazawhZTpz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl
                          rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6124 (0x17ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8219, serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
        Validity
            Not Before: Jul 28 16:38:56 2026 GMT
            Not After : Aug  4 16:38:56 2026 GMT
        Subject: CN=6a68db21-410b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:13:02:8e:9a:eb:1d:da:33:ad:dd:b4:54:9a:
                    4f:d9:8a:8d:97:00:a4:70:f2:9c:e5:41:a1:a2:44:
                    b9:c4:42:ec:e4:ea:83:94:c2:d5:7c:e1:cc:9b:02:
                    9c:3d:98:b1:e9:03:1d:9a:3e:ca:6e:ad:4a:e4:2b:
                    8e:03:86:49:cb:cf:45:23:86:9e:b6:dc:a1:a0:a8:
                    3b:cb:e0:0e:7d:c4:d4:ed:19:88:9f:bb:8e:7a:ef:
                    6d:4a:da:58:91:f9:73:74:05:0a:be:6b:03:d9:bd:
                    ec:d1:ca:b0:27:88:98:9d:27:a8:8a:68:0e:d9:28:
                    e2:21:f2:86:30:11:6a:67:cd:1b:c0:74:56:aa:54:
                    f9:d7:28:40:27:fa:34:f1:9d:8b:ca:41:a9:c9:17:
                    53:36:86:1b:a0:67:e2:5c:fe:cc:41:8b:05:da:3e:
                    ba:f7:4e:10:7d:72:e4:0f:7b:e4:de:de:32:ee:b0:
                    53:0e:64:e1:0d:d4:c5:3d:b1:db:9f:c1:a8:b0:98:
                    5e:d8:e7:9d:fa:b6:69:61:e9:04:ce:5e:0b:ea:3b:
                    50:17:37:ae:24:16:1f:34:15:ac:78:33:ba:f3:41:
                    24:a5:2d:60:bb:f3:8f:11:da:29:d8:00:e7:19:d3:
                    ba:a5:01:d0:e4:a0:08:da:1f:7c:6e:3c:d8:89:f8:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F5:0E:19:CC:04:9A:49:D2:EB:2C:C8:C7:B8:55:89:4A:C4:9D:B9
            X509v3 Authority Key Identifier:
                keyid:65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:81:0e:a5:8e:b7:41:1f:4c:27:34:6d:bf:2f:3d:f4:16:25:
         61:70:a7:a1:7e:00:2e:02:42:77:9b:77:15:f6:e6:3a:87:b8:
         8a:9b:e6:a8:1e:d0:2f:fc:83:b2:36:f3:5c:b4:e6:c0:af:92:
         47:a8:d6:22:fc:02:42:37:aa:47:95:7d:2c:98:e6:9a:af:91:
         fa:20:aa:11:b5:be:05:2d:e0:7b:60:0e:1d:bd:6f:53:33:78:
         04:55:24:2a:8e:be:84:d2:91:bf:4e:d5:2c:56:60:69:b8:3c:
         2f:ef:3f:76:33:2f:82:1c:1a:76:18:22:fc:d2:74:43:5b:5a:
         fa:19:26:cb:b8:f2:be:87:e4:f3:fa:da:e7:15:a5:3d:59:88:
         96:f9:98:5e:02:9c:e2:cd:f8:6f:3e:22:ff:bb:b0:d6:95:05:
         47:90:4c:49:7b:31:59:67:15:c3:58:47:3d:88:66:b3:15:da:
         9a:78:31:29:82:c0:48:be:5c:ba:6c:4a:8d:f7:7f:9f:e7:9e:
         55:17:3e:94:1c:b5:8e:2d:e4:cd:e6:d9:c3:93:b6:c8:d4:f0:
         34:95:42:13:3e:fe:9c:7b:b8:d3:1e:e4:fb:c0:04:8e:6c:74:
         9b:20:50:29:84:15:e2:81:bc:2b:71:e2:ca:98:ae:97:da:dd:
         d5:c6:f2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:58 2026 by rpki-client