Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
File:                     MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft (raw, json)
Hash identifier:          SdNz89DqzfAO3w1lggvt8Vxf47to2IMPrUFqfdjaFPg=
Subject key identifier:   35:F1:D3:FB:7A:B6:44:8F:2B:40:79:6F:7A:DE:1C:99:29:5B:9F:70
Authority key identifier: 30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3
Certificate issuer:       /CN=A9115F08/serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3
Certificate serial:       02BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
Manifest number:          02B2
Signing time:             Thu 23 Jul 2026 02:31:02 +0000
Manifest this update:     Thu 23 Jul 2026 02:31:01 +0000
Manifest next update:     Thu 30 Jul 2026 02:31:01 +0000
Files and hashes:         1: MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl (hash: Dv7u3brB6H/gc6CWKuFhQxpKk8kAoQhcytTcva4noVU=)
                          2: FF88FC6AD39311ED9DE30F22C4F9AE02.roa (hash: Bm87RlMlg4Xidevl8SRmtxIfSm/0d4Z1zMRG2VbMLIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl
                          rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F08, serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3
        Validity
            Not Before: Jul 23 02:31:01 2026 GMT
            Not After : Jul 30 02:31:01 2026 GMT
        Subject: CN=6a617ce6-e986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ec:2e:59:79:de:56:87:08:68:81:af:28:e6:
                    3c:d0:f4:27:80:9d:6d:8f:4d:90:28:bf:b7:d0:a4:
                    df:dd:9a:37:86:c2:a0:cc:bb:7f:3d:b6:34:84:bb:
                    75:67:a1:cb:75:62:aa:69:a5:98:37:c4:9c:5e:c2:
                    28:bd:88:3a:54:64:3c:45:27:ad:6e:52:37:54:81:
                    9b:d1:5d:5d:56:d7:27:34:a9:bc:b1:a4:7b:2a:35:
                    64:5c:fc:20:ca:36:e9:82:af:5d:a1:1f:95:1b:0d:
                    c4:75:f7:99:b4:01:99:fb:b9:68:74:b6:ee:ad:1a:
                    e4:13:2c:4b:4f:b8:0e:df:a3:0f:13:77:bc:29:b5:
                    a1:81:e8:bc:66:72:0a:51:1c:af:8a:b4:fa:a5:3c:
                    75:13:37:16:57:fa:2b:6a:33:4c:0d:83:cc:3c:29:
                    91:a3:52:77:ff:96:c3:0c:d2:90:d6:15:a2:92:95:
                    de:20:ce:de:c6:5b:d6:1a:b1:ae:76:70:01:b0:02:
                    cd:b5:c8:42:79:8e:51:02:58:14:26:cb:14:4c:34:
                    1a:7f:99:e6:4f:e8:34:89:a2:c8:5f:3a:6f:40:21:
                    52:d0:53:2f:0f:e5:b1:20:9c:4f:42:6f:fd:b8:38:
                    66:e1:85:f2:e4:01:57:53:ec:ef:d1:44:88:a0:c5:
                    69:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F1:D3:FB:7A:B6:44:8F:2B:40:79:6F:7A:DE:1C:99:29:5B:9F:70
            X509v3 Authority Key Identifier:
                keyid:30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6a:8a:20:ec:6c:75:85:fe:7d:50:33:c0:3f:51:e9:2e:62:
         ea:7b:e3:ba:d7:ef:f3:1a:3e:94:22:49:12:9f:4c:89:9e:e9:
         64:a6:10:b0:f8:c7:c3:c7:4f:7e:6f:4c:5a:4e:71:9f:d6:87:
         39:f8:04:a4:b0:32:1b:0c:07:3e:bf:6a:53:03:d2:44:98:fe:
         58:c7:6f:34:53:b3:03:b0:b6:f9:fe:3c:5f:08:f8:6f:69:4e:
         6b:23:a8:ca:30:3f:ac:fe:02:1c:83:97:57:d8:d2:bf:1c:aa:
         77:b9:ba:01:ac:46:71:35:59:c8:8b:6f:37:26:55:5b:80:e6:
         9f:01:68:ae:0d:63:df:fc:99:55:ac:3a:39:02:32:78:36:c3:
         3c:b3:a3:46:00:be:19:e5:3b:bd:1b:46:11:38:a5:4d:c9:14:
         84:ac:62:5a:cb:e7:a6:ce:f4:26:d3:cf:05:83:21:92:b0:f5:
         12:49:e0:f5:0b:7a:d5:7d:d7:9d:36:6f:b4:8a:ec:bf:b8:2d:
         b3:7e:04:7e:a4:0a:ea:53:ae:62:64:c9:2e:74:1a:43:cc:7d:
         a7:79:90:14:e8:e3:c1:0f:c3:e8:ee:cd:cc:88:b9:5b:18:09:
         a4:f0:5d:43:63:35:58:e1:5b:72:6c:97:58:3f:43:e4:28:48:
         e3:8b:8f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:12 2026 by rpki-client