Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
File:                     -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json)
Hash identifier:          9cIJhqFF40s7Pr+PA5+RaS5Tq9wEgYxM00xroVgSQM8=
Subject key identifier:   86:FA:A2:66:D0:E5:E2:07:B9:56:C8:5F:8F:BF:14:3C:79:3E:52:76
Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84
Certificate issuer:       /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
Certificate serial:       2522
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
Manifest number:          250F
Signing time:             Wed 22 Jul 2026 15:50:05 +0000
Manifest this update:     Wed 22 Jul 2026 15:50:05 +0000
Manifest next update:     Wed 29 Jul 2026 15:50:05 +0000
Files and hashes:         1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: rAKt/s0UPFYDKkrmw2XOSxrXPdyLr7CDadJ0bzoCwXs=)
                          2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: p8PtYpgOItBVMhVqBrQ+db64yM9ZewS6DCTfoLsZaro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl
                          rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9506 (0x2522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
        Validity
            Not Before: Jul 22 15:50:05 2026 GMT
            Not After : Jul 29 15:50:05 2026 GMT
        Subject: CN=6a60e6ad-e6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e5:a0:f8:14:c2:22:f1:be:21:8a:fe:87:33:
                    08:2c:c9:d9:b6:39:a7:e3:02:f4:ff:e8:57:2e:93:
                    84:74:db:7a:f2:cf:48:e1:79:ac:b8:ca:7e:11:90:
                    62:90:ee:87:fc:56:26:c2:6f:3b:b4:a9:39:f6:7f:
                    bf:86:94:d5:f2:0c:c9:92:cb:0f:e0:67:e0:8c:ae:
                    cc:8f:c4:4d:f9:a7:98:d6:92:68:85:a9:89:53:d2:
                    c9:36:40:92:40:f9:a2:1f:78:d6:19:f5:f0:79:aa:
                    d1:3e:2d:34:a1:19:1b:77:0a:40:67:51:8a:f5:cf:
                    5b:14:0b:81:6a:b5:3e:a4:49:b5:32:72:d2:c4:a1:
                    0b:e0:07:3a:47:b6:4c:93:9e:3f:04:79:81:75:b3:
                    9a:8b:9c:23:d3:74:ac:c5:eb:7e:80:65:14:6f:01:
                    46:19:85:9d:9b:d7:ff:92:f0:b7:1e:68:3d:ad:18:
                    91:13:51:1c:c7:b5:9d:70:71:4d:82:d0:85:6b:8a:
                    d0:c4:9e:63:aa:33:11:e3:64:f3:e6:ac:75:96:1c:
                    05:f4:7a:a1:a1:5c:dc:43:18:4e:07:84:c9:eb:49:
                    d4:b8:54:65:d4:a5:61:26:2d:64:70:51:f5:d4:42:
                    c5:f8:b8:26:af:83:7e:f0:05:09:3a:f1:0f:49:c6:
                    e8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FA:A2:66:D0:E5:E2:07:B9:56:C8:5F:8F:BF:14:3C:79:3E:52:76
            X509v3 Authority Key Identifier:
                keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f7:7e:97:85:81:f3:1d:0a:d0:9a:a7:31:7b:02:fe:ea:5c:
         19:8d:61:36:8b:14:c5:82:64:ef:a1:62:12:65:50:57:e3:8b:
         e0:3c:2b:9f:23:aa:9a:35:8c:87:bb:22:b9:53:bd:03:b2:15:
         e4:f0:b1:6b:bc:bb:bf:10:b9:34:74:51:1a:07:d7:aa:1f:57:
         d2:90:d4:7a:9a:8a:0e:6a:f9:3c:da:9d:f1:bd:1e:b8:65:89:
         9a:51:3e:a8:49:80:93:a1:00:34:f3:92:cf:2e:06:0b:62:23:
         3a:bb:77:47:8d:a0:2b:05:b2:13:b6:75:75:2f:95:34:7d:9a:
         46:09:3a:25:90:ff:ea:38:b3:60:00:e4:1f:ea:14:c3:61:16:
         c2:46:75:6f:b9:bb:2d:8f:1d:17:c7:7d:59:6e:94:de:44:27:
         b2:1f:d7:a9:22:9c:57:88:d8:3c:fd:d0:d1:35:99:f8:61:d8:
         a8:cf:66:bf:24:8e:36:73:50:62:99:ae:ca:80:de:6d:57:10:
         58:33:d5:4f:95:5d:cd:d6:d1:5d:8a:b0:11:19:d1:45:da:8f:
         25:cd:4f:57:2a:d2:c2:4e:16:ec:67:57:1c:0c:b1:43:e9:4f:
         1b:f8:2d:24:97:69:05:ab:33:4e:ca:f5:57:d4:6c:91:7d:16:
         65:43:c5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:00:22 2026 by rpki-client