Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
File:                     ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json)
Hash identifier:          5V01jhIRDLyurKBcSbY6v3jr1FRR6Y9eDzleav/3AjM=
Subject key identifier:   CB:C8:C5:2E:DC:EA:A4:92:E7:BD:75:10:07:5A:D4:26:80:C3:40:5B
Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00
Certificate issuer:       /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200
Certificate serial:       0F1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
Manifest number:          2C4D
Signing time:             Tue 28 Jul 2026 16:57:48 +0000
Manifest this update:     Tue 28 Jul 2026 16:57:47 +0000
Manifest next update:     Tue 04 Aug 2026 16:57:47 +0000
Files and hashes:         1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: lOndfERWcOisgosVnkI5Jpljr7pS/0iuvE4rsEX1waw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl
                          rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3866 (0xf1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200
        Validity
            Not Before: Jul 28 16:57:47 2026 GMT
            Not After : Aug  4 16:57:47 2026 GMT
        Subject: CN=6a68df8b-369f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:39:c7:e1:50:5d:c9:e8:8e:9c:20:22:9d:7d:
                    4a:ae:7d:4d:f0:ba:7a:20:49:61:49:01:55:ce:a1:
                    87:e8:16:a7:db:72:5b:4d:7e:d6:98:5d:0d:ca:f1:
                    6f:f5:1d:cb:c3:9d:e9:b4:61:14:53:66:a9:75:9f:
                    07:fc:1f:3e:eb:8b:f3:9a:cc:e0:39:64:11:39:db:
                    2f:48:ca:4c:4d:c3:2a:be:8d:7b:c7:e5:72:47:10:
                    c7:53:58:26:e4:e0:25:d4:90:ba:e1:93:46:64:cf:
                    23:4d:0e:5c:7f:7c:cd:13:ff:45:48:47:23:a7:62:
                    56:fa:e3:a9:29:4f:77:91:6a:1d:fd:95:58:1b:6c:
                    04:2f:d8:1e:b5:2d:06:77:45:7f:7f:1f:45:24:b9:
                    0a:47:ea:77:bb:78:a4:84:9c:2b:49:57:9a:4e:a8:
                    9f:bb:d8:28:94:26:8b:d6:a7:6d:33:b7:97:48:e4:
                    4c:c2:82:97:63:4f:ed:3e:a9:45:83:a5:fa:06:a3:
                    a3:8b:bb:21:63:a2:0d:15:47:a6:24:3a:ce:32:15:
                    f7:4e:2c:f0:8b:4e:d7:6a:96:24:30:04:8e:7f:c9:
                    0f:c5:b1:1e:9e:d2:52:c0:86:b3:27:6e:d6:c4:5c:
                    a9:56:c7:4a:58:b2:df:7e:ba:dd:da:5b:38:4a:a7:
                    b6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C8:C5:2E:DC:EA:A4:92:E7:BD:75:10:07:5A:D4:26:80:C3:40:5B
            X509v3 Authority Key Identifier:
                keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b2:e3:43:47:90:d5:52:e6:ea:0d:67:22:e2:91:47:ca:21:
         2a:53:40:59:62:be:e6:07:64:3c:b5:89:54:25:0e:6a:b1:f5:
         a0:d0:ab:24:01:b4:a6:4a:9d:50:d3:82:66:ba:20:af:b4:0e:
         47:77:ab:75:d1:0b:8d:7e:e8:c5:e0:1b:64:ff:93:e7:10:79:
         17:ad:ce:e1:9a:d9:57:b7:1f:6b:a2:ce:81:5e:d0:92:f0:b9:
         a9:1b:8a:90:6e:89:0e:b4:81:cb:8e:ed:e1:ec:4d:2e:63:72:
         24:c6:f0:47:8b:1f:f8:6d:4f:28:8d:c9:79:6e:58:ae:b6:2b:
         b4:58:aa:10:ae:dc:71:61:0f:79:9f:b8:3f:72:8f:cb:76:03:
         8a:82:4f:f6:40:df:de:37:64:a3:20:7c:3d:76:f1:e1:be:4a:
         57:0d:c3:aa:a8:f6:02:28:0f:a6:1e:d6:db:64:be:cd:ca:d4:
         6d:5a:53:8c:49:08:dd:34:6e:0f:df:0f:31:97:62:fd:52:7e:
         6e:94:5a:ef:67:7c:6a:3a:1b:0a:fd:bf:41:aa:7e:79:2a:3e:
         79:21:e7:23:58:84:f7:1c:39:2d:b8:62:52:cb:66:c3:87:11:
         5e:48:b5:3a:40:10:ac:65:6d:15:ac:92:b2:b0:d9:09:1a:f3:
         0e:e5:b5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:44 2026 by rpki-client