Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft
File:                     zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json)
Hash identifier:          RAbaKuLJd7VsVrftaEuZZfJhFbwWAtmKqTXrxlH+0sk=
Subject key identifier:   03:52:46:95:CF:98:1F:85:21:09:AC:D1:4F:70:CC:2F:68:17:D7:44
Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81
Certificate issuer:       /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81
Certificate serial:       0D1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft
Manifest number:          0D16
Signing time:             Tue 28 Jul 2026 18:24:29 +0000
Manifest this update:     Tue 28 Jul 2026 18:24:28 +0000
Manifest next update:     Tue 04 Aug 2026 18:24:28 +0000
Files and hashes:         1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: f8AITlxap/Ceo315OS5cJSZLnxUv4jT+q0Mpvoqpxeo=)
                          2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: 0G6OMftV6r7pwXRj79WaOdv+JwEFm4GYWS5bUDm09Lk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl
                          rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3359 (0xd1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81
        Validity
            Not Before: Jul 28 18:24:28 2026 GMT
            Not After : Aug  4 18:24:28 2026 GMT
        Subject: CN=6a68f3dd-4b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:54:cb:e5:75:15:73:fe:d5:7e:e0:52:6e:e9:
                    12:1b:77:c3:aa:89:31:07:a2:4b:d8:01:bf:8e:62:
                    ba:10:b2:79:65:be:b9:14:8c:e6:e4:a5:f6:6f:b0:
                    5b:2f:17:20:1d:88:06:e7:d0:58:f3:b5:c6:c8:63:
                    06:58:f4:22:ce:50:47:75:6e:5e:f6:cc:61:01:cf:
                    4d:1e:e9:23:6d:03:ac:52:ad:c7:50:dc:b8:54:a1:
                    e3:30:ff:01:0a:19:92:d7:9d:e6:76:57:fb:aa:93:
                    e0:9c:75:c1:91:b4:34:7a:81:04:b9:68:ce:16:16:
                    95:b1:c9:58:0c:72:2a:9f:90:97:22:5d:d9:6f:67:
                    b5:18:97:2e:60:50:84:d8:f3:84:43:03:cc:a9:6d:
                    84:6b:06:99:c4:29:be:db:d8:c6:78:b3:3c:60:92:
                    3c:be:f9:b6:ed:a3:f6:13:1c:4b:51:78:f6:20:81:
                    35:a0:c0:a1:c7:50:58:86:a5:5b:7e:c3:b2:ae:2c:
                    a4:3c:33:da:05:d9:39:be:e1:a5:b3:66:89:e6:39:
                    8e:59:67:1c:d0:d6:64:08:ce:39:41:d7:81:66:bd:
                    da:11:75:33:ee:d8:a7:b0:b1:f3:f6:ae:31:e7:b0:
                    5e:c1:4b:ba:25:d3:9b:2f:b7:72:66:89:ef:46:39:
                    ca:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:52:46:95:CF:98:1F:85:21:09:AC:D1:4F:70:CC:2F:68:17:D7:44
            X509v3 Authority Key Identifier:
                keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5b:33:8c:7b:37:9a:6f:75:70:50:1b:c5:45:69:20:cb:77:
         12:02:81:a0:b8:63:61:aa:f2:c2:71:c2:83:20:14:70:a9:ed:
         00:ff:ea:0f:8e:6e:93:17:3a:8c:25:a3:d4:93:5c:99:b5:0f:
         39:b7:8e:e0:6f:e0:5b:92:65:d3:2d:48:7b:a4:aa:ec:ce:1e:
         63:f2:a9:7c:6c:1f:85:3c:9b:7c:2b:11:a7:90:10:fe:51:b0:
         b1:30:ad:cc:12:f6:d0:f0:20:52:cd:9b:1b:b2:b5:df:87:a6:
         57:b0:b7:d2:ea:94:7d:c0:f6:b6:a8:f2:03:a5:46:e6:c8:80:
         30:ed:a2:47:8f:fa:c0:d8:36:57:ca:e8:b9:34:5b:90:bd:6f:
         f8:5d:77:87:e8:ed:df:b9:c4:b1:a7:bc:87:50:4e:32:e6:3e:
         ef:98:3e:0e:e7:76:67:c3:9d:bb:58:a4:4f:7a:65:d3:8a:2a:
         36:ab:fb:d2:ee:cf:e2:59:ff:6a:6b:4a:0a:5a:0a:cb:b8:0b:
         2f:0c:b9:92:4e:d9:de:6f:1e:84:2b:39:5b:29:c8:7b:4e:80:
         4d:8d:b2:cf:86:c8:db:6e:65:58:ff:f0:45:34:bd:c9:2b:9b:
         9a:67:93:ac:ca:2d:8b:a0:68:b7:b5:4e:7c:0f:11:b4:32:0e:
         5d:7d:63:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:52:20 2026 by rpki-client