Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
File:                     ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft (raw, json)
Hash identifier:          D4zCRnKdoYBOh4qo9Kydj9e+169NkUcBgf4D2cVgY3o=
Subject key identifier:   0C:F1:7D:7A:7E:34:70:98:F6:0A:5C:81:1C:41:3A:8D:50:1F:11:49
Authority key identifier: 64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05
Certificate issuer:       /CN=A911DF56/serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
Manifest number:          C7
Signing time:             Thu 23 Jul 2026 08:41:38 +0000
Manifest this update:     Thu 23 Jul 2026 08:41:37 +0000
Manifest next update:     Thu 30 Jul 2026 08:41:37 +0000
Files and hashes:         1: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl (hash: mvJTw23WhNcs8FD1tItNAp5w3fvTlVRHGvtzVURwXUE=)
                          2: D24B5EDE93C911F09C542E6EC4F9AE02.roa (hash: s8SPE1fuhHGCWfjRI4Arz3DIriyv/pjOPJwncxjTFHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl
                          rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:41:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DF56, serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405
        Validity
            Not Before: Jul 23 08:41:37 2026 GMT
            Not After : Jul 30 08:41:37 2026 GMT
        Subject: CN=6a61d3c1-e15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:5f:a4:e7:a3:5f:2d:0c:c6:49:3f:3a:3e:
                    29:dd:c5:98:55:be:27:b9:7f:cc:77:31:da:cc:5b:
                    8e:b9:a4:29:b9:95:bf:6b:3d:12:45:47:02:eb:cc:
                    b5:f1:f3:db:66:c3:be:fe:6c:3b:6e:91:ac:ee:8e:
                    11:9e:9b:d0:43:e0:f8:6b:1f:73:2e:de:24:d9:ee:
                    f1:79:cd:8b:8e:d5:5c:ca:ea:83:10:c3:1e:4f:ac:
                    2a:cd:4d:24:36:b4:29:8d:1e:02:1d:f4:1b:25:0d:
                    ba:d7:67:36:1b:c8:f1:00:52:df:46:36:2f:5d:cf:
                    dd:41:de:a1:26:d7:86:e4:1b:94:17:8f:ff:22:ac:
                    2a:d2:c7:38:2e:06:6f:da:28:96:73:e9:0e:8f:0e:
                    5b:c7:51:7a:5b:9d:df:c7:fa:fc:9c:9f:da:3c:e7:
                    f2:39:3c:09:09:3b:41:a5:ef:d0:ef:84:54:5c:88:
                    25:73:b6:b9:52:07:b2:71:91:b3:57:e9:70:71:cf:
                    61:1f:bd:e8:b7:e2:3a:98:82:05:ac:5d:3c:b8:72:
                    06:60:13:57:bb:32:c8:2c:85:2f:f7:64:5c:4e:fa:
                    be:16:3a:a6:7d:1c:a6:aa:4b:ce:e4:c2:ec:08:68:
                    0f:92:49:36:e3:7d:d2:2a:bf:f8:e4:64:2a:e7:c8:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F1:7D:7A:7E:34:70:98:F6:0A:5C:81:1C:41:3A:8D:50:1F:11:49
            X509v3 Authority Key Identifier:
                keyid:64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2f:12:51:81:f7:14:6a:86:7e:08:04:fd:dc:a9:3d:f8:af:
         89:1b:af:21:0a:e4:de:2f:9e:e9:f4:c0:bd:a2:f4:46:d2:be:
         83:53:66:22:7f:50:56:22:7c:97:c6:da:08:44:4c:46:49:b9:
         5e:a3:ea:34:11:7f:e7:51:a7:0e:e6:a7:d3:f6:ef:81:26:15:
         68:04:29:d7:12:d9:e0:42:2e:34:0b:15:81:86:56:13:25:ea:
         5e:40:bf:ed:3a:f4:92:2f:9e:ec:39:b6:54:09:c0:87:6a:e4:
         19:e6:c6:17:69:06:db:e0:cd:4c:c5:bc:0c:ac:9e:0a:8c:46:
         27:49:5d:93:7b:a4:ee:a6:14:69:ef:9d:fe:c4:69:ad:67:ac:
         dd:5e:9a:41:43:8d:08:df:b6:6f:1f:97:75:10:fc:5d:1a:a0:
         f5:3b:63:62:39:a7:e9:8e:02:19:7c:c4:6f:32:e9:c9:e1:ab:
         4c:ed:26:c0:52:b7:17:8a:22:ec:d1:b4:11:a9:fd:f2:02:22:
         ec:32:8e:1c:de:fc:0f:39:ff:f0:a4:d4:1c:ef:d9:50:0e:78:
         28:21:9c:51:ac:25:d4:fb:8c:30:c5:8a:85:77:4b:90:10:58:
         ec:39:1c:34:25:37:46:0d:53:ca:d6:0c:24:2a:5e:e2:4a:ff:
         37:88:82:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURGNTYxMTAvBgNVBAUTKDY0OTNCMTlGN0NCRkRGMTkwNEJDNzUyQUE4RTRBMzQz
MDYyNjU0MDUwHhcNMjYwNzIzMDg0MTM3WhcNMjYwNzMwMDg0MTM3WjAYMRYwFAYD
VQQDEw02YTYxZDNjMS1lMTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxKhfpOejXy0Mxkk/Oj4p3cWYVb4nuX/MdzHazFuOuaQpuZW/az0SRUcC68y1
8fPbZsO+/mw7bpGs7o4RnpvQQ+D4ax9zLt4k2e7xec2LjtVcyuqDEMMeT6wqzU0k
NrQpjR4CHfQbJQ2612c2G8jxAFLfRjYvXc/dQd6hJteG5BuUF4//Iqwq0sc4LgZv
2iiWc+kOjw5bx1F6W53fx/r8nJ/aPOfyOTwJCTtBpe/Q74RUXIglc7a5UgeycZGz
V+lwcc9hH73ot+I6mIIFrF08uHIGYBNXuzLILIUv92RcTvq+FjqmfRymqkvO5MLs
CGgPkkk2433SKr/45GQq58hdEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzxfXp+
NHCY9gpcgRxBOo1QHxFJMB8GA1UdIwQYMBaAFGSTsZ98v98ZBLx1Kqjko0MGJlQF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY1Ni83NkY4MjA1MDVC
RDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9aSk94bjN5XzN4a0V2SFVxcU9TalF3WW1W
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pKT3huM3lfM3hrRXZIVXFxT1NqUXdZbVZBVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REY1Ni83NkY4MjA1MDVCRDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9aSk94bjN5XzN4
a0V2SFVxcU9TalF3WW1WQVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJy8SUYH3FGqGfggE/dypPfiviRuvIQrk3i+e6fTAvaL0RtK+g1NmIn9QViJ8
l8baCERMRkm5XqPqNBF/51GnDuan0/bvgSYVaAQp1xLZ4EIuNAsVgYZWEyXqXkC/
7Tr0ki+e7Dm2VAnAh2rkGebGF2kG2+DNTMW8DKyeCoxGJ0ldk3uk7qYUae+d/sRp
rWes3V6aQUONCN+2bx+XdRD8XRqg9TtjYjmn6Y4CGXzEbzLpyeGrTO0mwFK3F4oi
7NG0Ean98gIi7DKOHN78Dzn/8KTUHO/ZUA54KCGcUawl1PuMMMWKhXdLkBBY7Dkc
NCU3Rg1TytYMJCpe4kr/N4iCgw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:57:43 2026 by rpki-client