Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
File:                     ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft (raw, json)
Hash identifier:          oiX2fw2ItweVtcmhBtYxZZBirM7y4sKbO5cfMo6V25Q=
Subject key identifier:   61:BA:0F:1A:39:47:6B:2C:AD:B3:64:AE:73:E2:43:72:CA:B1:9D:37
Authority key identifier: 65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86
Certificate issuer:       /CN=A91E13CF/serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
Manifest number:          A6
Signing time:             Mon 27 Jul 2026 09:22:28 +0000
Manifest this update:     Mon 27 Jul 2026 09:22:28 +0000
Manifest next update:     Mon 03 Aug 2026 09:22:28 +0000
Files and hashes:         1: ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl (hash: SLefUWuf7NPQOlJSqhMvGe8F7mh7it2MUftO3r8bF0k=)
                          2: D88B7AD48E3511F0A7463923C4F9AE02.roa (hash: uODZblgFbKItTmQLR70yrBmfsX9HkwmHlSn392rNiq0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl
                          rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E13CF, serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
        Validity
            Not Before: Jul 27 09:22:28 2026 GMT
            Not After : Aug  3 09:22:28 2026 GMT
        Subject: CN=6a672354-5ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:4b:ff:59:f8:c2:cb:e9:4e:ba:69:ce:b1:
                    62:f4:49:62:0c:54:e4:ce:49:36:3c:aa:cd:52:53:
                    86:df:5a:df:1d:e3:ff:2e:af:02:4d:29:3b:df:ad:
                    a7:7b:91:5d:26:e4:1b:98:df:00:f0:46:56:dc:ec:
                    27:ea:ba:41:40:ea:88:1d:39:31:e5:8c:5f:1a:9c:
                    3c:4d:2e:1c:2a:d8:fc:b7:62:c0:4d:ab:7a:b4:85:
                    b0:e4:b3:b3:70:91:9d:41:8a:77:5e:ea:62:59:52:
                    08:7a:78:eb:82:35:5b:63:c6:6a:d6:a4:03:f7:55:
                    17:a6:16:45:8b:f7:92:e0:28:fd:b0:0b:c9:b3:be:
                    92:68:bf:92:75:76:dc:46:b7:3a:44:8f:77:c4:52:
                    9f:d0:56:05:f1:84:8e:25:81:d6:93:ad:01:4f:cb:
                    e2:8d:99:62:6c:a3:45:c6:69:97:84:b5:bf:fe:67:
                    41:dd:2a:9f:80:fa:85:9a:04:78:4d:ed:6a:08:cd:
                    b6:7f:c3:e2:4a:92:b2:40:dc:99:ae:15:2e:6d:c5:
                    77:a0:4b:49:a4:78:ce:32:2e:4b:7c:97:33:9e:44:
                    a8:bf:ae:aa:86:be:e7:4a:e2:25:97:2a:88:b4:e3:
                    cf:5f:70:f2:38:01:81:62:d0:be:32:da:c7:45:1f:
                    af:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BA:0F:1A:39:47:6B:2C:AD:B3:64:AE:73:E2:43:72:CA:B1:9D:37
            X509v3 Authority Key Identifier:
                keyid:65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:90:a7:1b:7b:3a:f1:2d:64:eb:8b:52:69:f8:a0:21:34:23:
         3e:c2:ed:0a:c0:98:40:d6:56:1e:00:2b:7e:8f:3d:dd:53:93:
         96:18:10:e6:e4:cc:37:1a:d1:43:a8:db:2f:77:e2:b0:31:aa:
         7b:3a:1d:5c:fc:14:1e:3e:17:27:8a:51:36:47:3a:bc:54:5e:
         b4:bd:85:5c:d8:2a:fd:ae:30:4d:3e:e9:a8:51:e7:14:17:4f:
         c2:c5:fa:3a:c5:d6:2c:4a:98:5b:86:fa:8d:c8:7e:e1:e7:03:
         86:25:b6:0a:84:c4:e0:be:cc:12:39:a5:a1:ab:cf:18:03:5d:
         f7:db:ba:29:b7:04:50:f3:95:e4:92:87:19:f3:f7:80:10:d3:
         27:bf:05:eb:da:95:ce:73:08:3f:b9:2b:af:23:49:40:ba:70:
         32:b2:ae:33:f9:f8:04:d0:28:42:42:ca:ed:8e:83:af:52:21:
         50:70:4a:4c:06:ea:6a:d2:9d:da:9f:97:57:bb:c7:14:2f:72:
         9a:61:4b:7f:26:9f:13:c1:f2:02:1c:d4:45:5f:9a:7d:6e:b1:
         06:b6:0d:52:dc:84:da:6a:9c:03:18:b7:85:13:54:f6:94:2f:
         66:7d:5c:c6:da:44:56:16:a2:25:3e:b3:46:35:17:8b:a1:cb:
         5c:d7:93:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:47 2026 by rpki-client