Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft
File:                     ZLiL9faqm7HpEXZsjfla6A-IBnc.mft (raw, json)
Hash identifier:          9I3vx+QIYGqtzVu+SUyyvx3GisNOJZqbvVf4lUUk6Lg=
Subject key identifier:   99:F9:C7:22:77:C4:34:7C:F3:FF:EF:05:33:D2:18:77:C4:BF:C7:1B
Authority key identifier: 64:B8:8B:F5:F6:AA:9B:B1:E9:11:76:6C:8D:F9:5A:E8:0F:88:06:77
Certificate issuer:       /CN=A91FC19D/serialNumber=64B88BF5F6AA9BB1E911766C8DF95AE80F880677
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft
Manifest number:          04
Signing time:             Mon 27 Jul 2026 11:39:31 +0000
Manifest this update:     Mon 27 Jul 2026 11:39:30 +0000
Manifest next update:     Mon 03 Aug 2026 11:39:30 +0000
Files and hashes:         1: ZLiL9faqm7HpEXZsjfla6A-IBnc.crl (hash: bZ71JVDxisDGrY0nig5jUyS2CS53rXPjU3mtc6ZYlx8=)
                          2: 2851C57C88FF11F1BFED971F4A11F970.roa (hash: eSRwvGiAt/3oDdwVqUKijtcqc/uEjbLSCEwTPyQp47s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.crl
                          rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC19D, serialNumber=64B88BF5F6AA9BB1E911766C8DF95AE80F880677
        Validity
            Not Before: Jul 27 11:39:30 2026 GMT
            Not After : Aug  3 11:39:30 2026 GMT
        Subject: CN=6a674373-66fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:c0:3a:26:a5:12:3c:6c:71:87:4e:86:20:
                    a2:de:bd:e8:83:b5:00:36:58:77:cc:25:db:66:d9:
                    0c:82:1b:a2:7c:79:0b:b2:8c:3e:1e:b5:ec:68:ce:
                    73:e8:03:e9:b9:af:19:2d:57:78:87:4f:12:7c:53:
                    49:2f:03:fd:ea:5f:56:9a:e8:4a:41:02:fb:19:f8:
                    1c:b8:55:1c:1a:ca:5e:8a:33:63:aa:34:e6:81:93:
                    9f:94:24:3d:f9:10:bb:15:a8:d5:f8:98:da:ca:58:
                    e5:09:72:ed:51:85:93:2e:fb:df:ea:b6:ee:1c:14:
                    c4:ff:f6:e0:df:d0:91:9b:9b:13:68:ba:09:eb:27:
                    32:c2:b6:07:d3:41:78:9c:6b:cb:d3:92:f7:cb:8d:
                    d8:78:3d:1b:c2:34:81:23:27:28:9a:8e:6f:f9:ba:
                    f7:a7:b0:87:49:b5:66:59:d4:aa:7e:79:ba:e7:db:
                    a6:a9:b9:7f:a4:19:a2:c8:94:59:19:70:ef:87:8a:
                    0d:e2:b1:c2:d4:3b:78:6a:81:d5:4c:fe:94:c1:80:
                    bb:ac:af:8d:e3:20:92:9c:13:05:25:f6:60:a7:80:
                    ee:e0:9b:7d:6c:e3:ad:a6:1b:b3:04:03:94:7b:b0:
                    61:2d:3b:1d:c4:40:e3:ea:d7:0e:a3:d8:07:16:a2:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F9:C7:22:77:C4:34:7C:F3:FF:EF:05:33:D2:18:77:C4:BF:C7:1B
            X509v3 Authority Key Identifier:
                keyid:64:B8:8B:F5:F6:AA:9B:B1:E9:11:76:6C:8D:F9:5A:E8:0F:88:06:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:04:a2:ba:27:08:db:b6:b6:a5:44:d5:78:c8:4d:a9:b0:ab:
         7d:d4:7b:49:90:4e:fb:2b:49:98:0e:d6:cb:9c:ae:35:b7:8e:
         71:49:14:c3:54:af:f8:26:1a:cb:9e:54:3a:78:c8:9f:af:e0:
         5d:88:9b:a2:3f:e7:98:51:cc:01:cc:b9:1a:7f:2f:89:d8:4c:
         62:fb:2a:df:94:78:dc:87:64:12:ae:48:29:59:b4:7b:e7:65:
         bb:d2:c0:d8:50:99:f3:80:d3:9b:85:7b:59:df:af:38:cb:57:
         a2:7e:b7:44:b8:e7:e9:45:1a:ae:03:f8:39:3e:75:91:3d:86:
         9f:de:d6:d1:3f:0f:a1:1a:6b:70:4f:ce:b0:42:b4:45:64:dc:
         37:c9:68:04:f0:bd:e0:5b:21:0b:eb:a9:24:8a:d0:1f:18:aa:
         62:26:c2:b4:4b:eb:d5:38:c2:d7:3b:92:fe:89:5c:f2:ea:57:
         fe:19:92:40:7c:cb:4d:2d:2f:7d:f8:fd:3a:2d:5d:fc:84:98:
         95:bc:e4:c2:b6:df:ee:cd:d2:de:e7:db:90:bd:1d:e4:4f:41:
         de:de:4b:dc:63:0b:49:66:71:f4:e7:51:33:2e:08:c0:2b:a4:
         b4:ef:8c:aa:cd:57:6f:2c:3e:f7:d8:8c:97:b5:2a:bf:6c:73:
         20:c1:9d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:03:28 2026 by rpki-client