Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
File:                     ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json)
Hash identifier:          zLjCYwK25ITVHqi/N/C8ZPtdSG124pocGnjhoc/lke8=
Subject key identifier:   9C:64:C6:29:13:62:6A:18:26:B2:F5:5B:9B:C6:77:E3:74:8E:00:F8
Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
Certificate issuer:       /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Certificate serial:       2436
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
Manifest number:          2423
Signing time:             Wed 22 Jul 2026 15:52:11 +0000
Manifest this update:     Wed 22 Jul 2026 15:52:10 +0000
Manifest next update:     Wed 29 Jul 2026 15:52:10 +0000
Files and hashes:         1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: cWlmeb+GpST17a5ULdh6IeDuw7TlKkZfqbKXub9ZcRA=)
                          2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: FMM9PWbU/oYp9w4GxmMR0Bnc2OElJZUE63nkK8Lt4YE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
                          rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9270 (0x2436)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
        Validity
            Not Before: Jul 22 15:52:10 2026 GMT
            Not After : Jul 29 15:52:10 2026 GMT
        Subject: CN=6a60e72b-897f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:88:3d:52:80:e6:83:a0:12:93:03:a1:2c:
                    ee:95:21:43:27:5a:ed:01:05:7b:fc:b6:8c:95:55:
                    15:68:03:2c:46:f3:f6:0a:3d:68:46:4c:08:e0:c8:
                    f3:59:e9:c5:a7:a5:52:91:2e:75:e9:86:a0:f7:ba:
                    b4:26:b2:82:09:ce:56:4e:f0:05:ad:31:43:a1:39:
                    9d:d6:fd:84:c9:f3:74:d4:d3:86:38:4b:0a:a8:97:
                    25:14:b0:70:64:06:9a:c3:2f:a9:1e:40:c0:94:65:
                    ce:01:6d:2e:5a:44:70:f8:11:80:96:78:09:13:c4:
                    b5:b2:c6:27:c4:bb:67:f1:a5:3a:28:04:e4:e2:47:
                    6e:c7:43:24:e9:fd:bc:2d:c0:55:65:6e:86:f8:e8:
                    8d:f0:e7:89:3c:5c:5e:9f:55:8f:8f:46:2d:39:6c:
                    e8:3c:fe:fd:ec:3e:57:58:83:76:eb:63:e2:36:0d:
                    cb:76:ee:b3:4f:39:96:46:0e:eb:0f:02:f5:1b:60:
                    a8:8a:c7:34:79:c0:44:d0:f7:38:5b:f7:d3:d4:99:
                    c4:66:2c:c9:d2:bf:c3:ea:f8:02:f0:09:9e:07:40:
                    ef:9a:92:f7:2b:17:d7:63:d9:38:fc:63:30:bb:3d:
                    d3:f0:6d:4a:40:5f:62:90:c0:ca:03:51:d6:30:35:
                    68:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:64:C6:29:13:62:6A:18:26:B2:F5:5B:9B:C6:77:E3:74:8E:00:F8
            X509v3 Authority Key Identifier:
                keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:da:50:a4:34:c7:2c:e1:32:63:36:42:67:3b:bf:3e:58:9c:
         5b:26:db:5c:37:a4:bc:d4:57:ce:49:75:db:53:11:b5:ee:b7:
         fd:0d:ad:0f:3e:28:02:9d:12:eb:e4:d6:b1:bb:95:3b:b2:3a:
         b5:10:53:2f:e8:cf:69:10:5c:f0:2b:f2:b9:8a:9d:91:1f:7e:
         21:5b:8f:23:26:d4:74:bd:cb:c6:8f:cb:9e:16:a1:5e:b6:4d:
         ef:c9:1c:fd:4b:ca:ca:74:d6:a2:11:d0:81:7e:cf:64:99:cd:
         35:08:46:6e:28:ba:0f:c9:88:90:99:33:bf:75:5c:7d:50:7b:
         bb:39:d2:71:b6:84:c7:f6:dd:15:a2:17:9d:1d:d8:0a:82:47:
         51:a4:7a:18:14:6a:d6:24:39:f6:1b:29:d5:67:2c:68:0a:44:
         f4:19:97:a7:8c:ba:20:4a:8d:1f:92:46:a1:bc:67:ce:ee:f0:
         7e:b3:11:1d:09:d1:1b:bd:87:b5:b4:b9:c3:90:6c:ec:6b:61:
         93:09:10:31:41:62:0b:82:ec:db:a6:f9:be:f2:92:36:7a:1b:
         ce:0b:ab:1f:bf:b4:a0:ac:a1:45:f4:af:3e:10:cb:e5:b0:ee:
         81:99:31:93:ed:01:87:0b:2e:87:07:07:95:31:34:bd:ef:df:
         2b:37:65:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:35:51 2026 by rpki-client