Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
File:                     zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft (raw, json)
Hash identifier:          dyTU11rUIQ7e0KbL6r0ezSLt5qhz1Fy0iFe85lcraG8=
Subject key identifier:   5A:4E:9C:6F:C7:FC:91:3F:04:D1:63:92:EA:47:9C:04:3F:D6:0A:D5
Authority key identifier: CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
Certificate issuer:       /CN=A91E8FFF/serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
Manifest number:          67
Signing time:             Mon 27 Jul 2026 10:15:36 +0000
Manifest this update:     Mon 27 Jul 2026 10:15:36 +0000
Manifest next update:     Mon 03 Aug 2026 10:15:36 +0000
Files and hashes:         1: zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl (hash: OcFMx53/kG4FXKJJOEiOZ8IYkSEvcrAHHO7irpR7vz0=)
                          2: DBA60106EED111F0AB3DEEA1736F56BC.roa (hash: Zm5NVQiX1B1lMh6YYC6ofTBSfpDnYcLSn7pw+rOzSFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8FFF, serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
        Validity
            Not Before: Jul 27 10:15:36 2026 GMT
            Not After : Aug  3 10:15:36 2026 GMT
        Subject: CN=6a672fc8-3a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:d6:33:7d:3b:d6:fc:45:33:6c:ed:7b:28:
                    3b:46:d5:57:e4:b3:85:c9:ac:70:29:c7:f9:99:61:
                    d1:66:54:ba:f8:a9:ed:d2:a9:cb:b0:6b:88:3e:a1:
                    e1:a9:68:44:e4:f7:10:18:82:0e:71:89:92:9d:6e:
                    15:c6:d9:ff:d3:b9:dd:d4:87:1f:9a:32:3e:57:76:
                    70:90:0b:8f:8e:ed:02:eb:98:81:34:9d:de:7d:8d:
                    b6:1a:63:c5:c5:c4:06:bb:52:16:85:21:7b:3b:b3:
                    44:16:51:ba:37:c3:d7:b6:81:2d:24:a1:e3:05:a9:
                    cc:39:73:f1:3b:89:d1:69:b0:5b:76:c9:b2:c4:0b:
                    9c:d9:bd:69:2d:57:15:c1:11:ba:08:96:9b:77:c9:
                    23:d9:f7:2e:87:91:21:e7:f9:e8:5a:f8:57:f2:20:
                    9d:99:af:35:87:fa:db:e7:05:51:ba:e7:39:e1:8a:
                    f6:fe:22:83:0b:53:1f:96:a9:5e:b4:2a:a0:48:17:
                    a1:6a:a9:a7:b8:20:95:21:3e:d4:91:11:68:a8:41:
                    5a:82:1b:ba:e9:9d:15:0c:60:42:37:fc:0d:b0:92:
                    a8:24:b3:7b:35:fc:c8:57:a9:94:67:e1:d0:c9:e3:
                    07:3a:e7:4b:c0:a9:88:3d:54:08:49:20:1e:5c:91:
                    22:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4E:9C:6F:C7:FC:91:3F:04:D1:63:92:EA:47:9C:04:3F:D6:0A:D5
            X509v3 Authority Key Identifier:
                keyid:CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:67:a6:b3:e1:51:56:21:aa:1d:62:b9:5a:1d:da:8c:8a:de:
         b2:40:59:44:a6:91:19:ce:c5:95:56:38:57:57:cd:fc:85:70:
         32:15:fe:d3:86:39:26:a5:e3:eb:fb:ac:0b:ed:0c:16:36:9c:
         71:f6:9d:a3:df:0e:cf:f2:f4:e5:a7:75:f1:43:58:b1:88:19:
         38:b3:fa:f5:73:eb:e8:26:b4:b9:b1:9e:f6:f0:ea:41:da:44:
         cc:cd:f7:fc:93:34:da:a1:94:9e:00:00:92:e1:eb:67:b7:72:
         b2:84:97:68:1d:e2:68:1b:a6:8e:54:7c:8a:a5:32:be:67:30:
         c9:0d:d6:a9:6f:6f:c9:70:df:58:63:9d:8f:15:b4:a1:0e:f7:
         20:27:0b:98:fe:7f:c8:e2:6e:a4:33:91:de:cd:32:9d:f9:27:
         fa:59:b9:80:8d:96:ff:11:af:7c:09:8b:ac:39:8f:84:6f:bc:
         92:7d:b9:f3:af:00:57:bb:85:e6:e6:30:5a:1f:ed:66:88:b5:
         85:aa:2c:f8:f7:32:ed:08:3c:38:a7:a6:7c:2c:ef:08:46:b0:
         b5:5b:27:98:72:24:1b:c8:7c:af:3a:5b:43:b0:c9:be:a7:be:
         bf:b1:2e:28:b1:bc:7c:74:a3:f1:fa:5b:25:95:5f:27:c4:db:
         bf:f2:54:4b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
OEZGRjExMC8GA1UEBRMoQ0M5RjJGQkJGQUVEQzQ0Qzc2MzJCMThDMkJEM0JDNThF
Q0VEN0JGNTAeFw0yNjA3MjcxMDE1MzZaFw0yNjA4MDMxMDE1MzZaMBgxFjAUBgNV
BAMTDTZhNjcyZmM4LTNhNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0w9YzfTvW/EUzbO17KDtG1Vfks4XJrHApx/mZYdFmVLr4qe3Sqcuwa4g+oeGp
aETk9xAYgg5xiZKdbhXG2f/Tud3Uhx+aMj5XdnCQC4+O7QLrmIE0nd59jbYaY8XF
xAa7UhaFIXs7s0QWUbo3w9e2gS0koeMFqcw5c/E7idFpsFt2ybLEC5zZvWktVxXB
EboIlpt3ySPZ9y6HkSHn+eha+FfyIJ2ZrzWH+tvnBVG65znhivb+IoMLUx+WqV60
KqBIF6Fqqae4IJUhPtSREWioQVqCG7rpnRUMYEI3/A2wkqgks3s1/MhXqZRn4dDJ
4wc650vAqYg9VAhJIB5ckSL1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWk6cb8f8
kT8E0WOS6kecBD/WCtUwHwYDVR0jBBgwFoAUzJ8vu/rtxEx2MrGMK9O8WOzte/Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4RkZGLzU5MTNFMjYyRUVE
MTExRjBCMEFDRDI3NjczNkY1NkJDL3pKOHZ1X3J0eEV4Mk1yR01LOU84V096dGVf
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveko4dnVfcnR4RXgyTXJHTUs5TzhXT3p0ZV9VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4
RkZGLzU5MTNFMjYyRUVEMTExRjBCMEFDRDI3NjczNkY1NkJDL3pKOHZ1X3J0eEV4
Mk1yR01LOU84V096dGVfVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAqZ6az4VFWIaodYrlaHdqMit6yQFlEppEZzsWVVjhXV838hXAyFf7ThjkmpePr
+6wL7QwWNpxx9p2j3w7P8vTlp3XxQ1ixiBk4s/r1c+voJrS5sZ728OpB2kTMzff8
kzTaoZSeAACS4etnt3KyhJdoHeJoG6aOVHyKpTK+ZzDJDdapb2/JcN9YY52PFbSh
DvcgJwuY/n/I4m6kM5HezTKd+Sf6WbmAjZb/Ea98CYusOY+Eb7ySfbnzrwBXu4Xm
5jBaH+1miLWFqiz49zLtCDw4p6Z8LO8IRrC1WyeYciQbyHyvOltDsMm+p76/sS4o
sbx8dKPx+lsllV8nxNu/8lRL
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:03 2026 by rpki-client