Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft
File:                     zHlrmVsFkPGFeCONcFkd1SRJXVA.mft (raw, json)
Hash identifier:          NOTQ/FmmZo5TxBNBln6FtM+UXQJheZkHmzts0oxD7FM=
Subject key identifier:   26:8A:21:7E:E3:57:25:5C:BE:52:3B:9F:2D:E8:33:B7:D4:0C:ED:55
Authority key identifier: CC:79:6B:99:5B:05:90:F1:85:78:23:8D:70:59:1D:D5:24:49:5D:50
Certificate issuer:       /CN=A9132336/serialNumber=CC796B995B0590F18578238D70591DD524495D50
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHlrmVsFkPGFeCONcFkd1SRJXVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft
Manifest number:          0A
Signing time:             Thu 23 Jul 2026 11:14:52 +0000
Manifest this update:     Thu 23 Jul 2026 11:14:51 +0000
Manifest next update:     Thu 30 Jul 2026 11:14:51 +0000
Files and hashes:         1: zHlrmVsFkPGFeCONcFkd1SRJXVA.crl (hash: jpPWq8bs0jQpRBNNaEIUiHzihnROhIoxTRZzYMMOlKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.crl
                          rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHlrmVsFkPGFeCONcFkd1SRJXVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132336, serialNumber=CC796B995B0590F18578238D70591DD524495D50
        Validity
            Not Before: Jul 23 11:14:51 2026 GMT
            Not After : Jul 30 11:14:51 2026 GMT
        Subject: CN=6a61f7ac-5385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:35:59:1e:9b:69:9f:e9:6a:c0:63:f8:a2:
                    36:07:7e:cc:d4:62:a4:6f:b5:ee:15:cc:bb:55:02:
                    c2:9a:e5:ce:d4:ca:b4:63:e1:7c:5f:37:90:b5:ff:
                    99:3a:90:a4:d6:db:44:aa:5c:c9:bb:93:dc:5e:62:
                    14:b4:38:eb:25:d5:dd:bb:ae:7b:a8:9b:e7:7a:85:
                    7d:61:f7:39:bf:06:5e:7a:c4:88:b3:44:37:fd:c5:
                    4b:84:31:73:c5:7c:3f:08:f5:8f:c3:7d:48:5d:35:
                    16:60:77:11:0e:b3:e5:1d:34:3c:9d:1e:eb:4b:15:
                    e3:b5:74:09:b7:2a:23:05:04:a1:11:14:c0:14:10:
                    b3:c1:f9:76:bf:d9:64:2c:ec:7e:2f:8f:50:98:fc:
                    4f:d7:51:d9:97:ce:4e:4c:4f:d0:da:24:c7:35:81:
                    d0:fb:d8:1d:55:6e:f3:cb:7f:2d:f9:73:76:ef:29:
                    72:4e:3e:8c:5a:26:76:1d:71:84:43:8a:41:91:29:
                    57:e0:61:9a:b5:f4:c4:c0:cd:b9:10:2a:cc:17:a9:
                    a6:48:e3:74:8d:fc:f0:e8:5b:f9:4b:91:1c:e4:5b:
                    bf:91:d7:ba:30:77:7c:f8:06:88:c9:50:5d:fc:53:
                    fa:f3:de:a6:b4:f6:bc:24:8f:ad:60:d0:eb:ca:98:
                    d2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8A:21:7E:E3:57:25:5C:BE:52:3B:9F:2D:E8:33:B7:D4:0C:ED:55
            X509v3 Authority Key Identifier:
                keyid:CC:79:6B:99:5B:05:90:F1:85:78:23:8D:70:59:1D:D5:24:49:5D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHlrmVsFkPGFeCONcFkd1SRJXVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132336/A4C4024C79A411F18D0EC0EF92A30FBC/zHlrmVsFkPGFeCONcFkd1SRJXVA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:bc:bd:07:2f:8a:e3:8c:fb:b0:f4:54:25:1d:66:8a:a2:
         92:08:f5:5f:6f:e6:55:c2:c3:d3:97:d9:78:1b:ca:64:32:2b:
         0e:9a:20:83:4f:c9:21:d4:17:06:76:ed:32:7a:61:c4:b3:51:
         bc:ee:e0:ac:43:72:00:7b:c1:83:3c:93:81:f2:91:52:00:26:
         67:76:c7:d8:0a:49:82:4a:fb:73:de:96:b5:45:e5:cb:48:2b:
         77:84:e5:e4:f1:6b:f7:5b:ab:71:17:d5:d2:74:81:fa:5f:6a:
         9c:84:4b:b4:5f:af:2c:e0:41:ef:ba:26:1b:a3:82:3a:b2:8e:
         5a:c8:91:49:86:86:8d:55:86:74:ee:ab:c7:cb:0d:d1:91:33:
         79:60:14:ed:a4:f9:ce:9d:e0:a9:05:c9:99:7a:af:cb:67:9d:
         07:66:ed:40:18:2e:e1:ce:6b:df:b3:b9:69:81:cf:67:2d:b6:
         b3:a6:51:56:15:e5:2f:57:d9:3e:8c:a7:6f:93:d4:8d:90:b8:
         a5:2f:83:44:8e:b2:9e:e6:13:f2:d2:6d:b8:57:75:27:ba:d1:
         de:0b:0e:2c:03:d4:21:5b:8b:ae:ae:ba:89:2a:5a:3f:0b:8a:
         55:97:0e:f4:8a:d3:b4:e9:66:ea:4c:12:e4:fa:8a:3d:65:7f:
         56:9b:1d:9f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MjMzNjExMC8GA1UEBRMoQ0M3OTZCOTk1QjA1OTBGMTg1NzgyMzhENzA1OTFERDUy
NDQ5NUQ1MDAeFw0yNjA3MjMxMTE0NTFaFw0yNjA3MzAxMTE0NTFaMBgxFjAUBgNV
BAMTDTZhNjFmN2FjLTUzODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvwjVZHptpn+lqwGP4ojYHfszUYqRvte4VzLtVAsKa5c7UyrRj4XxfN5C1/5k6
kKTW20SqXMm7k9xeYhS0OOsl1d27rnuom+d6hX1h9zm/Bl56xIizRDf9xUuEMXPF
fD8I9Y/DfUhdNRZgdxEOs+UdNDydHutLFeO1dAm3KiMFBKERFMAUELPB+Xa/2WQs
7H4vj1CY/E/XUdmXzk5MT9DaJMc1gdD72B1VbvPLfy35c3bvKXJOPoxaJnYdcYRD
ikGRKVfgYZq19MTAzbkQKswXqaZI43SN/PDoW/lLkRzkW7+R17owd3z4BojJUF38
U/rz3qa09rwkj61g0OvKmNJ7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJoohfuNX
JVy+UjufLegzt9QM7VUwHwYDVR0jBBgwFoAUzHlrmVsFkPGFeCONcFkd1SRJXVAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyMzM2L0E0QzQwMjRDNzlB
NDExRjE4RDBFQzBFRjkyQTMwRkJDL3pIbHJtVnNGa1BHRmVDT05jRmtkMVNSSlhW
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvekhscm1Wc0ZrUEdGZUNPTmNGa2QxU1JKWFZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy
MzM2L0E0QzQwMjRDNzlBNDExRjE4RDBFQzBFRjkyQTMwRkJDL3pIbHJtVnNGa1BH
RmVDT05jRmtkMVNSSlhWQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBJzLy9By+K44z7sPRUJR1miqKSCPVfb+ZVwsPTl9l4G8pkMisOmiCDT8kh1BcG
du0yemHEs1G87uCsQ3IAe8GDPJOB8pFSACZndsfYCkmCSvtz3pa1ReXLSCt3hOXk
8Wv3W6txF9XSdIH6X2qchEu0X68s4EHvuiYbo4I6so5ayJFJhoaNVYZ07qvHyw3R
kTN5YBTtpPnOneCpBcmZeq/LZ50HZu1AGC7hzmvfs7lpgc9nLbazplFWFeUvV9k+
jKdvk9SNkLilL4NEjrKe5hPy0m24V3UnutHeCw4sA9QhW4uurrqJKlo/C4pVlw70
itO06WbqTBLk+oo9ZX9Wmx2f
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:54 2026 by rpki-client