Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
File:                     zIO7bQqhd53qFp7bpKQCKN4hvXs.mft (raw, json)
Hash identifier:          WMBXShK109J/tnV7xIoPe6UzR4IwExPvsf9/v70PfAU=
Subject key identifier:   1C:71:1E:93:46:F0:E2:F8:E2:B9:AA:7C:73:97:56:B5:EE:38:18:8C
Authority key identifier: CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B
Certificate issuer:       /CN=A91D493B/serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B
Certificate serial:       0406
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
Manifest number:          03FF
Signing time:             Mon 27 Jul 2026 01:30:08 +0000
Manifest this update:     Mon 27 Jul 2026 01:30:07 +0000
Manifest next update:     Mon 03 Aug 2026 01:30:07 +0000
Files and hashes:         1: zIO7bQqhd53qFp7bpKQCKN4hvXs.crl (hash: wZhqNx2mtkx57NBrm2XnnxhYOw2+YjAXYqvvbQnb3Dw=)
                          2: 684DDD32CAB311ECBBCE9843C4F9AE02.roa (hash: 9Qc71tRXjbo6SI5tLjNMPaseC4lt8mw3nTisxYF0bHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl
                          rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030 (0x406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D493B, serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B
        Validity
            Not Before: Jul 27 01:30:07 2026 GMT
            Not After : Aug  3 01:30:07 2026 GMT
        Subject: CN=6a66b4a0-55b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:31:f9:e4:0e:84:a1:e2:1f:61:61:dc:a2:43:
                    9b:6c:98:fa:ac:f9:28:67:55:57:ea:51:69:0e:b2:
                    dd:39:1d:97:da:b7:2e:50:a9:a0:1d:a8:18:6d:a0:
                    55:1a:5c:7f:eb:10:a3:70:07:cd:88:21:d1:d9:4e:
                    44:39:e5:a3:71:97:da:e7:b8:3a:cf:bd:e9:d9:2f:
                    4d:8a:a3:3a:26:45:ba:b1:39:34:fa:7e:45:7d:07:
                    fa:68:66:36:ac:44:a9:7e:84:93:be:99:97:8a:20:
                    f5:91:7e:6d:09:cc:f1:97:47:38:69:20:0b:66:58:
                    e3:e7:a7:77:af:77:41:93:8c:4c:91:6c:d5:bc:d8:
                    fd:11:00:51:ca:f9:59:67:e0:e9:60:b9:00:da:d6:
                    7f:dc:d7:3f:93:33:ea:9a:cf:c2:1c:bf:9d:02:89:
                    2a:e0:28:68:eb:5e:3a:07:15:7f:ff:88:94:d2:c3:
                    3f:84:e1:8e:c5:2c:89:a0:f0:67:58:24:80:96:82:
                    c2:b2:cc:a6:0c:0f:f2:fd:ca:b2:ce:5e:28:70:11:
                    06:4e:ff:cc:3e:7a:b4:9a:aa:eb:6c:dd:a6:41:4a:
                    87:9b:b2:37:3c:b2:c8:d6:45:83:5c:7d:fa:6d:46:
                    10:2d:ca:e7:3c:1b:e7:3a:ed:08:56:bd:98:c9:7d:
                    51:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:71:1E:93:46:F0:E2:F8:E2:B9:AA:7C:73:97:56:B5:EE:38:18:8C
            X509v3 Authority Key Identifier:
                keyid:CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:7a:ed:80:95:9e:84:44:3c:ce:47:8d:1b:60:fe:9f:47:10:
         b4:ce:b1:68:00:2e:79:9e:be:4b:26:3a:d8:fe:8a:ae:7a:93:
         67:2e:7c:44:bc:45:db:4a:81:d0:b3:20:be:d6:ce:a1:00:67:
         df:f3:06:0c:3c:e6:27:18:cc:83:4b:8f:55:b9:80:13:87:a7:
         1f:09:42:2d:16:d2:93:a2:ff:51:af:68:da:37:5a:4f:82:1e:
         50:02:d4:f7:eb:b6:93:60:3c:aa:65:3b:9f:ed:48:ee:f2:fb:
         2a:59:46:46:e9:62:d9:63:30:16:81:a8:76:55:eb:07:88:93:
         2a:d0:0b:55:a6:50:fc:0b:b5:ed:f1:19:fe:4f:ff:0f:5a:8e:
         ce:ee:0f:20:1c:73:64:02:e9:6a:c1:f9:f5:8b:0c:db:e9:92:
         34:0d:9e:37:44:bb:a2:e3:d3:fd:63:f6:d3:5e:d7:62:17:ad:
         cd:27:fc:03:5a:98:b5:40:06:9e:3f:4a:82:67:e5:b6:3a:cb:
         82:89:66:66:7e:70:de:14:d0:4d:ee:cc:c8:2b:f9:b0:93:c3:
         3c:39:4d:51:80:36:3c:df:29:41:56:1a:7c:97:5f:bf:b1:4c:
         66:a9:dd:c8:fd:9e:25:09:2c:bb:75:94:74:45:ff:a5:4c:f1:
         89:b3:55:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:18 2026 by rpki-client