Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft
File:                     ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft (raw, json)
Hash identifier:          XOdxs1HLg5ggMg8yJIhilUK6Rwo2Vtqpt5pTk6lf83U=
Subject key identifier:   5D:94:3B:3E:B9:87:1D:EA:63:E6:A5:79:A9:3F:B8:F3:56:7A:F3:44
Authority key identifier: 66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74
Certificate issuer:       /CN=A91F1ED5/serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft
Manifest number:          C0
Signing time:             Mon 27 Jul 2026 09:07:18 +0000
Manifest this update:     Mon 27 Jul 2026 09:07:17 +0000
Manifest next update:     Mon 03 Aug 2026 09:07:17 +0000
Files and hashes:         1: ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl (hash: a5e3kT9FF3JCA4xgDy/djkcDWdz03SUHLEIX96B2nYg=)
                          2: 39D1200A698311F0B4A7D66DC4F9AE02.roa (hash: tACDd5N+RFn6V8r5W3veEhQhFDtNDyDv0x3xjonY3ng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1ED5, serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74
        Validity
            Not Before: Jul 27 09:07:17 2026 GMT
            Not After : Aug  3 09:07:17 2026 GMT
        Subject: CN=6a671fc6-8f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:17:cc:64:d0:9a:59:72:e5:7b:ed:b3:31:
                    42:0b:74:f7:f1:59:fb:1b:4e:25:13:7a:4e:d2:01:
                    87:ed:0e:f5:17:04:46:3d:3f:59:bb:09:74:df:77:
                    c2:26:6d:ba:4d:76:55:53:8e:78:68:14:f8:9f:42:
                    5b:ea:61:3e:9b:4a:cd:cf:48:3e:06:0d:0e:2a:e7:
                    fe:07:19:83:3a:d4:ed:33:4b:7e:95:85:95:3a:82:
                    80:d5:64:3c:89:90:9d:ca:80:28:f2:b7:dd:c6:8a:
                    e8:2e:9f:1f:b3:b4:8d:02:fe:60:89:42:bc:f6:41:
                    6d:56:4d:5d:57:c3:85:2d:08:40:03:f6:7c:7e:94:
                    7d:c1:f4:c9:4c:69:9e:c6:e5:3b:03:33:49:19:c9:
                    1e:d2:27:8e:ed:9c:4d:cc:ec:16:9c:ac:10:e8:68:
                    99:24:de:07:d7:2a:de:5b:9a:8c:3f:30:ed:4a:63:
                    f5:fa:2e:f3:b6:cd:e3:9d:5e:56:9c:b3:ae:c5:7f:
                    cb:b6:0e:ff:30:1e:53:32:c8:99:a6:79:25:69:13:
                    b5:48:f9:50:c3:dc:af:21:31:8d:5e:37:e4:a2:66:
                    af:d3:32:45:d3:58:b1:45:35:53:e0:b0:ce:7a:20:
                    46:6f:53:cf:95:fc:d9:15:2a:16:32:d8:7d:cc:c9:
                    c7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:94:3B:3E:B9:87:1D:EA:63:E6:A5:79:A9:3F:B8:F3:56:7A:F3:44
            X509v3 Authority Key Identifier:
                keyid:66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f7:55:3a:fa:28:c9:88:8a:b3:71:ab:3a:da:4c:d8:bd:32:
         3d:1c:f4:ec:6d:2b:59:23:bd:f7:b7:8e:e0:59:de:44:b8:90:
         de:8f:20:42:85:67:b5:63:4c:d1:80:55:1e:d9:7f:fb:ed:34:
         50:2d:7d:9d:02:71:d1:ea:b7:d6:e4:97:c4:5c:5d:5b:eb:91:
         5b:b2:b9:a7:f8:8b:23:c4:10:63:ea:a1:34:a8:e8:fb:fb:08:
         ee:fd:46:d5:83:4b:95:1c:72:63:ef:d6:ab:31:fd:a4:e5:94:
         5f:e6:d5:b2:e3:8a:58:b0:c2:85:f5:e6:a3:32:26:86:6a:6f:
         d0:66:0a:bf:70:d6:dd:2f:aa:d8:92:9d:70:96:1f:30:ae:bd:
         ad:e7:80:00:08:4b:c9:4c:a8:97:6f:41:6a:9b:93:b4:8a:05:
         dc:5f:60:35:53:2e:91:65:eb:1a:6e:2a:4e:1a:c2:74:e1:8c:
         6f:37:33:a1:8f:5d:e4:af:33:5a:6e:06:56:aa:2f:6c:5f:26:
         ed:27:c6:d4:1d:a7:12:dd:87:b7:10:21:56:10:09:75:9a:f0:
         b3:45:34:a8:dd:c8:1d:a7:82:a2:46:d3:da:db:2e:a2:ec:eb:
         45:a9:fb:8b:a5:23:a9:02:47:8a:ae:86:dd:8c:40:e8:56:29:
         e1:cd:c7:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFFRDUxMTAvBgNVBAUTKDY2NzgxNzlBNURBOEU1RTkxRTdEOURERkM5RkY1QjM1
NDNFRDRENzQwHhcNMjYwNzI3MDkwNzE3WhcNMjYwODAzMDkwNzE3WjAYMRYwFAYD
VQQDEw02YTY3MWZjNi04ZjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvCYXzGTQmlly5XvtszFCC3T38Vn7G04lE3pO0gGH7Q71FwRGPT9Zuwl033fC
Jm26TXZVU454aBT4n0Jb6mE+m0rNz0g+Bg0OKuf+BxmDOtTtM0t+lYWVOoKA1WQ8
iZCdyoAo8rfdxoroLp8fs7SNAv5giUK89kFtVk1dV8OFLQhAA/Z8fpR9wfTJTGme
xuU7AzNJGcke0ieO7ZxNzOwWnKwQ6GiZJN4H1yreW5qMPzDtSmP1+i7zts3jnV5W
nLOuxX/Ltg7/MB5TMsiZpnklaRO1SPlQw9yvITGNXjfkomav0zJF01ixRTVT4LDO
eiBGb1PPlfzZFSoWMth9zMnH0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF2UOz65
hx3qY+aleak/uPNWevNEMB8GA1UdIwQYMBaAFGZ4F5pdqOXpHn2d38n/WzVD7U10
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUVENS9BRkE0NjQ2NDY3
MkYxMUYwQjQ4REIwNzNDNEY5QUUwMi9abmdYbWwybzVla2VmWjNmeWY5Yk5VUHRU
WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1puZ1htbDJvNWVrZWZaM2Z5ZjliTlVQdFRYUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUVENS9BRkE0NjQ2NDY3MkYxMUYwQjQ4REIwNzNDNEY5QUUwMi9abmdYbWwybzVl
a2VmWjNmeWY5Yk5VUHRUWFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI/dVOvooyYiKs3GrOtpM2L0yPRz07G0rWSO997eO4FneRLiQ3o8gQoVntWNM
0YBVHtl/++00UC19nQJx0eq31uSXxFxdW+uRW7K5p/iLI8QQY+qhNKjo+/sI7v1G
1YNLlRxyY+/WqzH9pOWUX+bVsuOKWLDChfXmozImhmpv0GYKv3DW3S+q2JKdcJYf
MK69reeAAAhLyUyol29BapuTtIoF3F9gNVMukWXrGm4qThrCdOGMbzczoY9d5K8z
Wm4GVqovbF8m7SfG1B2nEt2HtxAhVhAJdZrws0U0qN3IHaeCokbT2tsuouzrRan7
i6UjqQJHiq6G3YxA6FYp4c3H4Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:11 2026 by rpki-client