Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft
File:                     znsweOogDvHPw0WMTR6QjV-ctzU.mft (raw, json)
Hash identifier:          mC6guhgfUxp3cX9m0GnOn77l13XHRsVLh9/p9X2qAR0=
Subject key identifier:   70:1A:65:09:FF:AB:BD:1E:59:28:88:6C:C8:00:96:FB:D2:4A:7F:82
Authority key identifier: CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35
Certificate issuer:       /CN=A913E415/serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735
Certificate serial:       0920
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft
Manifest number:          08FA
Signing time:             Wed 22 Jul 2026 20:51:18 +0000
Manifest this update:     Wed 22 Jul 2026 20:51:17 +0000
Manifest next update:     Wed 29 Jul 2026 20:51:17 +0000
Files and hashes:         1: znsweOogDvHPw0WMTR6QjV-ctzU.crl (hash: gQpGZutHSvPRO9jMlNYtGi1SdmXSyVpWDVovyz15Td8=)
                          2: A77E6C78FF0E11EABBCCCF56C4F9AE02.roa (hash: rH16IMBsAEm/RNGpp/HXHioByplHX6bS/RarvkAX6Vw=)
                          3: 790E442A9B1711ECB256A31CC4F9AE02.roa (hash: 3NnYgW/uIN4oGSx0dGS8YOrFZF6tCccitotZWgJVCfU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl
                          rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:51:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2336 (0x920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E415, serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735
        Validity
            Not Before: Jul 22 20:51:17 2026 GMT
            Not After : Jul 29 20:51:17 2026 GMT
        Subject: CN=6a612d45-48cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:15:ec:99:8a:61:dc:0f:73:4b:14:d5:f9:
                    3c:aa:5e:45:4f:2d:1f:4c:68:00:5e:d0:bf:e4:5c:
                    2f:a3:9c:75:51:a4:53:d5:f6:2f:f5:5b:85:05:64:
                    b2:8e:45:45:0e:49:b3:f9:e1:d6:d7:d8:5c:68:3e:
                    30:51:82:11:89:3c:b8:56:62:0a:be:c6:8f:6f:d5:
                    cb:2f:38:7e:37:03:b2:ee:bc:c5:a1:8d:ef:19:94:
                    15:00:84:51:9f:f8:c9:8a:59:5b:31:40:d8:ca:cf:
                    66:55:23:e6:ad:02:01:bb:ed:00:0a:48:af:47:56:
                    d8:9f:5f:fc:d8:fc:58:4e:76:e8:ec:34:e5:4c:81:
                    6b:f8:9e:a5:39:5d:88:a1:12:c0:64:cf:eb:84:7d:
                    a3:10:41:d9:07:ab:a5:5b:32:ea:02:e8:5e:25:e6:
                    bd:65:15:45:24:02:7c:b3:a3:b8:65:17:7d:0a:7e:
                    43:1a:de:9d:66:00:bc:ca:ba:ce:1e:8d:a2:1d:c5:
                    2c:68:c3:db:bf:63:e7:05:fb:62:b2:f0:3e:41:35:
                    fd:60:25:be:8c:67:67:92:7e:92:19:f3:b7:e4:e8:
                    e7:3c:72:49:23:af:41:18:7d:e5:b6:1b:4f:4d:42:
                    f8:7e:99:af:56:5f:b1:c3:9c:5a:07:16:8c:fb:27:
                    7f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1A:65:09:FF:AB:BD:1E:59:28:88:6C:C8:00:96:FB:D2:4A:7F:82
            X509v3 Authority Key Identifier:
                keyid:CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ee:ae:4e:76:fa:1a:79:f8:08:9a:e8:13:c7:51:62:4f:04:
         a1:6b:b4:a2:2c:68:e1:19:e9:f6:e5:4d:6d:41:4e:b1:48:8e:
         ae:a1:78:6a:74:90:ec:03:f5:6a:a4:2d:10:80:c9:e3:36:07:
         e8:ac:f5:f0:d2:f3:ca:94:87:06:29:70:5c:c0:a7:cf:d4:b8:
         2f:22:4f:45:e5:7c:ce:8c:9c:5c:f2:e0:0d:aa:84:9c:c8:d3:
         b1:ea:8a:19:2d:ed:29:55:5b:32:c6:5d:f7:a2:eb:58:fc:fe:
         f7:97:36:6c:55:d8:9a:e3:59:28:31:59:1d:3a:b5:d0:0c:f9:
         71:39:cc:0b:a1:eb:ec:3d:f3:9f:97:00:22:4f:ac:22:cf:b9:
         db:a3:fd:30:bb:61:b5:05:a9:6d:75:1d:6b:45:21:44:24:db:
         0e:da:a9:3d:ff:9c:28:4b:de:b9:e3:e0:ed:c5:86:83:8c:66:
         fa:78:76:ea:37:cc:23:ce:f5:e9:53:ec:92:66:44:b0:da:39:
         07:d5:88:37:11:73:18:30:51:0d:ae:1c:0c:19:4b:94:fb:f0:
         06:9a:b7:a9:a9:ea:82:1c:e4:bf:be:fc:e3:f5:a4:e1:90:37:
         10:19:80:35:04:46:6e:d6:a7:73:65:8d:eb:4b:8a:4b:84:d4:
         14:10:7f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:51:58 2026 by rpki-client