Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
File:                     _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json)
Hash identifier:          Uin7QGhnOZd+hDvJdSnMFdFdFBWcMg48jfP+pvfMTps=
Subject key identifier:   55:84:75:F6:B1:AC:22:05:04:75:8F:0C:0C:C9:7D:4C:BC:0B:19:8A
Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
Certificate issuer:       /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Certificate serial:       35CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
Manifest number:          3599
Signing time:             Tue 28 Jul 2026 14:28:35 +0000
Manifest this update:     Tue 28 Jul 2026 14:28:34 +0000
Manifest next update:     Tue 04 Aug 2026 14:28:34 +0000
Files and hashes:         1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: Ffboqnnu672HW9Tsd9CyNk3r1pWBhA+1Xa2f3qrnVp4=)
                          2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: XBUaXxbl5beMfJKKd1d1AjiKQNSMzNu7XbP3LC5jZ1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13771 (0x35cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
        Validity
            Not Before: Jul 28 14:28:34 2026 GMT
            Not After : Aug  4 14:28:34 2026 GMT
        Subject: CN=6a68bc93-bb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:2c:06:92:2a:7d:39:01:9f:9c:77:0d:a7:
                    3d:0f:47:6b:70:62:2d:e7:d9:e6:81:d9:63:23:8d:
                    59:7d:1f:43:92:e3:c4:6c:70:aa:0e:6d:75:73:90:
                    b4:7f:54:fe:ee:00:64:a6:a7:ee:e4:6d:f9:a1:af:
                    41:ee:8b:aa:eb:81:88:b5:7c:d6:18:27:5a:94:7f:
                    cd:7a:ee:91:0d:e9:88:27:c2:b0:52:13:b7:65:09:
                    e2:f5:1a:f2:04:9d:5e:ef:3f:b2:42:ad:20:89:a8:
                    d9:e6:06:30:13:63:f5:f6:b5:c9:21:cc:d9:76:85:
                    0d:57:2f:c2:a1:2a:20:8d:8e:ef:8c:fd:a4:80:c7:
                    d9:47:b2:47:ee:1d:2c:f4:d1:ce:4b:98:d6:01:83:
                    d2:d0:e7:aa:08:8a:af:55:2b:77:ec:54:d6:23:48:
                    39:80:a0:2d:4a:e0:6b:c8:3d:5b:fe:3c:f2:0f:3d:
                    4c:7f:c2:dc:be:11:18:73:b8:93:a2:42:1f:bc:22:
                    3c:f3:ec:0b:58:02:69:90:47:d0:e8:1f:1d:f6:77:
                    0e:fd:0a:aa:5a:db:ba:b7:0b:ad:bd:6e:9d:70:b0:
                    32:3a:04:4b:2d:f5:03:0e:b5:8b:ed:ce:d3:b7:5b:
                    84:eb:e4:16:c4:43:d2:f2:4b:6b:e7:6c:3f:6a:cf:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:84:75:F6:B1:AC:22:05:04:75:8F:0C:0C:C9:7D:4C:BC:0B:19:8A
            X509v3 Authority Key Identifier:
                keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:45:cc:63:a9:07:f6:fa:21:68:52:76:de:5b:eb:14:69:33:
         10:c9:ee:37:6c:56:a2:b2:a6:05:57:3b:0b:24:89:ca:ba:b3:
         8b:a7:ed:46:1c:88:9e:40:6f:4c:eb:b7:f9:7a:6e:a1:ea:0d:
         6e:13:ed:36:56:1d:7e:44:5d:b3:1c:8a:36:5b:05:1a:3c:ff:
         c9:31:b3:32:b6:29:0b:78:fa:bf:31:89:cd:86:bd:ef:5f:11:
         18:03:15:7b:da:58:a4:9c:08:7e:8d:5e:f3:88:1b:48:82:d8:
         90:99:ff:c0:65:92:b9:b8:1c:da:6c:c3:c6:26:3b:3a:7f:c7:
         6f:e6:b5:3f:92:97:44:25:ea:9f:e5:36:f3:57:95:85:1b:86:
         a9:c3:fd:68:e9:bb:70:0c:ca:3a:33:ef:bd:da:f1:c6:3c:27:
         1f:ea:0b:4a:dd:ff:5a:b9:ad:1f:73:94:60:0f:28:3c:a8:87:
         dd:3e:67:13:60:dd:fc:48:55:a5:ea:fe:6a:be:cd:2a:5c:c0:
         91:bd:e0:c8:7f:29:08:aa:47:52:de:83:a0:4f:1e:47:65:0d:
         e9:6c:6c:7f:6a:32:4f:ad:57:5b:8f:ef:2a:66:99:95:62:7f:
         55:a7:99:f2:77:2f:dc:5d:1b:20:b3:a2:9b:d1:b3:fb:26:24:
         aa:03:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:29 2026 by rpki-client