Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
File:                     zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json)
Hash identifier:          NGdjs//yt5kBQkEdhf8v0/UUY/g/A+SQ9vyXan5Kd1g=
Subject key identifier:   40:1E:A5:A3:8A:ED:93:A0:BC:F5:06:17:A4:0F:61:68:FA:BC:8B:09
Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4
Certificate issuer:       /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
Certificate serial:       0678
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
Manifest number:          0677
Signing time:             Wed 22 Jul 2026 23:16:29 +0000
Manifest this update:     Wed 22 Jul 2026 23:16:29 +0000
Manifest next update:     Wed 29 Jul 2026 23:16:29 +0000
Files and hashes:         1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: VfZ1rIUmnht8ESDDplmqXjsu431Owg/TOcyb6GQPz6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl
                          rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
        Validity
            Not Before: Jul 22 23:16:29 2026 GMT
            Not After : Jul 29 23:16:29 2026 GMT
        Subject: CN=6a614f4d-2bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:37:a2:1e:cd:55:8c:09:ce:04:52:81:8c:d6:
                    67:8e:fc:34:86:ae:ad:d8:c4:2c:a8:a9:bd:99:b4:
                    ee:28:d0:6d:ed:b1:71:0f:2d:ff:a9:4a:0f:54:34:
                    46:f9:e8:b1:2e:0b:bd:84:6a:13:69:85:a6:da:40:
                    23:2b:d1:35:ef:b4:8b:77:d1:a7:23:d2:55:b7:a9:
                    48:78:b7:d7:54:28:af:15:5c:2a:66:c7:57:a3:5b:
                    8e:9d:6f:88:70:0e:34:f1:4d:83:17:a3:5a:40:9e:
                    63:1f:4d:31:36:58:00:7a:35:77:37:d7:ee:a1:51:
                    5a:ec:1e:e7:8d:4e:e1:04:4e:66:b3:19:32:79:1f:
                    b7:55:86:d1:02:d2:13:f3:72:f0:f3:7b:fd:22:1b:
                    58:97:00:66:60:49:12:ca:7c:8d:e3:f4:7f:71:7e:
                    0a:cf:f7:50:a9:d6:53:21:f7:50:c0:7b:4f:a3:51:
                    d1:8c:55:4e:eb:ed:a4:34:2c:c9:aa:e5:7a:5c:ef:
                    6b:bc:6d:4d:c7:7c:a7:2f:2a:22:93:70:79:da:9a:
                    33:b4:b8:8b:41:94:3e:da:af:39:94:b0:94:f2:df:
                    7f:f4:ed:04:f6:fe:c6:85:20:b2:1e:5b:2a:5d:98:
                    ae:d7:d3:ea:e7:07:b2:cd:27:63:92:bc:76:37:86:
                    5f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1E:A5:A3:8A:ED:93:A0:BC:F5:06:17:A4:0F:61:68:FA:BC:8B:09
            X509v3 Authority Key Identifier:
                keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:59:f6:64:f4:3e:19:4e:54:f6:c4:1d:0f:21:cd:7f:d1:f5:
         94:17:2b:45:4e:ed:00:f1:cf:de:22:f1:97:f1:04:6e:7a:07:
         1c:2f:95:2f:d3:6a:e6:31:1a:b9:3f:c8:39:d1:be:a0:6e:5b:
         f9:ee:e9:a5:2c:fc:a7:bb:94:d9:8b:6a:6f:a1:55:09:97:9b:
         8b:4e:dd:07:6a:79:46:42:f8:2a:9d:ca:01:c2:25:e5:bc:61:
         27:00:e6:9a:6e:16:b4:a0:b2:91:07:45:97:3c:e2:35:e6:ec:
         9f:bf:cf:38:fb:eb:a4:6d:77:bf:08:62:fb:e8:47:4b:a7:d0:
         11:2e:4e:aa:03:3a:9e:1e:4a:7d:8f:2e:2c:5d:35:3c:4d:ba:
         42:1b:1d:81:83:ed:f8:17:27:1a:05:0c:20:59:8e:6f:c9:7e:
         02:d8:56:fc:da:59:d2:59:a6:9d:26:09:cd:9c:de:14:96:af:
         9e:67:9b:ed:76:f6:b8:1b:12:15:03:30:59:9d:96:ee:68:8a:
         ca:02:35:64:85:a4:b2:e9:9a:0d:23:d1:69:91:0c:83:0a:cb:
         60:02:f2:d8:1c:59:62:49:ec:42:14:a6:e9:f0:74:6e:33:d5:
         d9:02:cb:55:c5:f7:55:51:a3:dc:dd:d8:1d:44:fc:2c:ba:d7:
         52:8a:d8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:11 2026 by rpki-client