Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
File:                     zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft (raw, json)
Hash identifier:          UMdB4zJ/9NJkKNhYD1ncm7EYYZyRXqyv2X5Thffo0cA=
Subject key identifier:   30:7E:08:19:27:F3:5D:CE:1E:F9:85:58:C1:49:29:9A:35:63:4F:63
Authority key identifier: CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B
Certificate issuer:       /CN=A91DFA25/serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
Manifest number:          75
Signing time:             Mon 27 Jul 2026 10:08:26 +0000
Manifest this update:     Mon 27 Jul 2026 10:08:26 +0000
Manifest next update:     Mon 03 Aug 2026 10:08:26 +0000
Files and hashes:         1: zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl (hash: x6dBeVqxBstctkbvvi3opvd4+ULWEXTxTKkqGaEFUTw=)
                          2: 9E283D22E07A11F0AD28F7913A6F56BC.roa (hash: zM/gqOyVFktPoDA/WeuwpVQb7+CuTjfIizkBCA5c5Lg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl
                          rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFA25, serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B
        Validity
            Not Before: Jul 27 10:08:26 2026 GMT
            Not After : Aug  3 10:08:26 2026 GMT
        Subject: CN=6a672e1a-aaa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d7:bf:8a:18:d7:92:ac:f8:ef:87:58:5e:4c:
                    5b:5f:8c:95:cd:0c:65:20:78:18:5f:07:fb:ac:37:
                    a4:24:f4:71:c5:72:80:5d:cd:86:4e:71:e2:b2:e3:
                    4f:fe:75:61:cb:cd:07:d2:06:ad:d6:e5:a0:01:bc:
                    3e:45:b9:be:10:cc:3c:80:05:e3:4c:f5:fd:f7:fe:
                    e6:62:8a:19:45:41:6e:bb:77:22:c5:0d:f7:6e:d2:
                    91:45:22:ef:ba:b3:9a:f9:54:48:90:48:c8:fe:e1:
                    29:10:42:d8:b9:6f:7e:bb:ee:45:02:bd:4a:39:7c:
                    2c:18:ee:2d:50:d6:58:12:90:fb:42:69:80:62:1c:
                    c6:0d:5d:81:68:9d:29:0f:a5:ff:dd:55:76:97:5e:
                    7b:f9:9c:34:1d:7a:02:61:11:5a:c0:82:3b:6e:71:
                    df:1c:82:49:08:25:b0:f8:a0:d8:97:03:fa:c8:91:
                    fb:57:7e:f7:9e:df:80:3f:26:62:a2:e6:5a:d6:e5:
                    12:08:a2:45:5e:63:79:bf:ad:73:91:4d:79:93:6c:
                    4c:07:21:73:61:3f:58:67:a7:43:5f:32:7e:3a:1e:
                    b1:9c:f7:fe:ef:22:f7:78:ef:b1:f3:48:de:29:44:
                    c3:ff:91:53:36:5e:fb:ce:8c:92:34:f6:c3:0f:4a:
                    bd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7E:08:19:27:F3:5D:CE:1E:F9:85:58:C1:49:29:9A:35:63:4F:63
            X509v3 Authority Key Identifier:
                keyid:CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:89:7a:8e:15:da:e6:23:e0:09:a1:ac:04:7f:ca:9b:1a:
         d6:d6:28:56:5f:ba:fd:77:7d:ae:47:b7:26:ba:76:38:a3:65:
         02:6c:5d:3c:1a:ce:0a:f4:a8:d1:0f:85:2d:cc:48:f2:42:ca:
         a4:3b:3e:d7:e8:95:db:c6:7e:83:51:38:36:93:9a:1d:88:11:
         0f:40:a2:f8:1c:8f:10:5d:fa:b5:de:cd:7b:61:38:46:1d:78:
         13:fe:ec:f8:5a:4f:fd:f0:c4:6c:77:9c:59:b4:ba:12:b1:c7:
         69:67:d3:d3:18:8f:1e:1a:b0:dc:4d:e5:2d:68:7e:27:64:03:
         de:46:85:3c:34:1b:b6:c7:9a:31:51:92:a1:14:7d:72:71:37:
         64:e7:2e:e4:e5:6d:08:1e:8e:7a:11:c3:12:06:d8:98:b2:ef:
         61:15:b0:e4:bc:56:68:bb:cc:16:8d:8b:3d:4c:62:35:d9:8d:
         10:fd:81:88:02:5c:95:14:b8:4b:d7:9b:0f:46:71:94:a4:d0:
         2a:a1:a6:68:37:b8:bd:c9:d5:97:c4:d1:11:65:3d:a7:6c:bc:
         c6:47:35:23:bb:27:57:c9:7e:d6:42:b4:21:de:c2:67:f7:f6:
         32:da:d8:a3:43:66:82:d0:bd:d7:3c:df:07:5c:23:91:e7:4d:
         78:05:63:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:16:17 2026 by rpki-client