Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
File:                     z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft (raw, json)
Hash identifier:          9GblxCojxt3m37efkKSsDJYiols4yTyWx3fUDD9vIJk=
Subject key identifier:   58:F7:0D:D9:48:49:32:C4:62:E4:6F:02:8E:B7:E3:BB:CA:C5:41:94
Authority key identifier: CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF
Certificate issuer:       /CN=A91F8F9B/serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
Manifest number:          016C
Signing time:             Mon 27 Jul 2026 06:39:56 +0000
Manifest this update:     Mon 27 Jul 2026 06:39:56 +0000
Manifest next update:     Mon 03 Aug 2026 06:39:56 +0000
Files and hashes:         1: z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl (hash: ScCcI7mGccWV1XalTm8NS3y6slSGhEjrF8rr18BqrNc=)
                          2: 7143C5B85DBF11EFB8714857C4F9AE02.roa (hash: HnPe7oTE/NJwLfNgQpYdaZfEzbuO3TebzvAvQ+UM9po=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl
                          rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8F9B, serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
        Validity
            Not Before: Jul 27 06:39:56 2026 GMT
            Not After : Aug  3 06:39:56 2026 GMT
        Subject: CN=6a66fd3c-9b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:49:9e:bb:1a:17:0e:31:2d:29:8e:cb:35:
                    f2:f7:89:fc:d9:1c:6a:c2:43:d7:b5:7a:8c:07:c0:
                    ed:e7:fb:17:5a:be:2b:d3:f9:a7:1c:fe:0e:2e:c7:
                    e3:7a:30:97:32:73:f3:2f:8d:60:c4:9e:a8:71:71:
                    4d:42:56:a6:58:6c:22:72:2a:30:55:7b:aa:c5:70:
                    4d:fc:39:93:2d:a6:25:f6:56:77:8f:02:4b:d9:11:
                    0b:c6:69:48:64:14:30:5d:23:f4:cc:1c:c5:5c:30:
                    83:d2:6a:c7:34:9f:07:a2:7f:99:85:15:0d:20:64:
                    d1:2f:03:c1:e1:28:91:8e:45:de:4e:44:66:ed:56:
                    68:6a:04:7c:7b:87:79:f2:b8:ff:61:f6:24:21:c0:
                    f1:60:86:bc:34:d9:a2:19:db:37:ea:c9:96:3f:33:
                    61:a1:46:d2:46:76:76:5b:99:c8:22:5f:b5:d6:ea:
                    f8:a5:39:9a:19:02:f8:23:c9:20:33:f4:ec:ad:5d:
                    12:84:8e:e6:75:d0:cd:82:57:39:44:f4:81:88:4b:
                    a7:a0:82:e6:89:16:00:a4:08:05:0b:8f:3b:82:19:
                    64:22:ed:e6:fc:2a:f3:14:4e:50:35:92:8a:e8:ef:
                    4c:1e:b8:f7:eb:86:be:ff:63:85:9a:76:a0:99:e3:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F7:0D:D9:48:49:32:C4:62:E4:6F:02:8E:B7:E3:BB:CA:C5:41:94
            X509v3 Authority Key Identifier:
                keyid:CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a1:74:77:e5:67:0f:1c:3e:3f:f1:fe:f9:f5:e1:d3:40:21:
         a4:9c:fd:dd:d9:a5:c7:01:59:84:43:5a:cd:41:03:98:99:45:
         04:7e:91:57:20:8b:26:b1:a5:99:3e:27:bb:01:42:9c:92:dc:
         52:c2:07:2d:6d:56:8b:b6:d7:cd:8a:40:34:eb:40:11:24:ab:
         da:30:c2:84:52:1b:f3:10:ee:bc:c6:94:a1:9c:dc:26:77:c4:
         bb:c8:e5:7b:9e:56:90:c3:4e:30:d5:dc:45:43:0e:2c:40:14:
         6f:0d:1f:6e:5c:dd:d6:40:a4:68:00:2a:24:87:4f:91:70:3c:
         b0:e4:d4:19:33:0a:50:82:b6:fa:73:28:e2:b4:5f:30:08:8c:
         a7:65:71:ee:90:31:14:5e:5c:a6:53:c6:a8:c2:00:89:b0:6b:
         75:25:8c:f4:3a:4d:84:2f:5f:e1:bd:c4:68:ac:72:c2:46:94:
         b7:6e:f0:4a:8e:a9:97:62:a8:4a:f4:e1:d3:57:32:2d:17:38:
         b4:23:e6:85:c5:30:be:0d:02:69:d2:3b:56:90:54:86:c7:43:
         10:aa:b5:e9:8e:46:ae:01:26:d4:ff:8e:d7:4f:34:a9:bd:0c:
         71:03:27:2a:92:2c:74:06:66:cf:8f:4c:7a:88:11:39:60:64:
         1b:7f:3c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:40:18 2026 by rpki-client