Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
File:                     zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json)
Hash identifier:          C1tB8Sm4/1Q3XhdgUdB7LZ9/6f/nb5hPL9URGGgK61M=
Subject key identifier:   B7:28:F1:F9:8C:09:35:CF:2C:20:DD:74:B6:44:DD:4E:26:52:29:87
Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69
Certificate issuer:       /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
Certificate serial:       03E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
Manifest number:          03D8
Signing time:             Thu 23 Jul 2026 01:30:16 +0000
Manifest this update:     Thu 23 Jul 2026 01:30:15 +0000
Manifest next update:     Thu 30 Jul 2026 01:30:15 +0000
Files and hashes:         1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: cvoTHNGP+s5r4GLliNHp5IQ1YgxglaI9EISGclNK4+c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl
                          rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269
        Validity
            Not Before: Jul 23 01:30:15 2026 GMT
            Not After : Jul 30 01:30:15 2026 GMT
        Subject: CN=6a616ea7-b7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:be:33:44:e9:cb:cf:ae:00:29:9b:3e:01:16:
                    89:be:61:b6:78:fb:8f:13:63:28:8b:be:75:6a:d4:
                    29:59:35:7a:53:5b:a5:45:b6:24:b4:88:f2:05:f7:
                    12:78:e5:be:60:54:02:fa:96:80:e4:f4:cb:00:00:
                    21:34:b7:f0:5d:c7:a4:74:f1:85:be:01:f5:1c:bf:
                    f7:d9:77:f8:f1:b1:63:c6:43:31:ea:9b:a9:91:a8:
                    d5:6f:65:2a:f0:b1:a6:c7:c8:35:bd:f6:1f:ae:aa:
                    bd:d8:53:ae:fa:de:41:92:43:98:e0:31:cc:d4:c2:
                    10:22:8d:d3:46:39:57:7f:db:ac:ff:71:26:56:57:
                    23:8d:ad:b3:6d:b1:67:43:af:36:70:6b:c8:ae:75:
                    b4:1c:7d:b1:bb:98:69:06:c4:b3:9e:96:3b:10:cd:
                    fb:65:a3:10:e8:1f:86:6c:c2:1f:fc:e1:6c:63:8d:
                    a8:0f:6a:07:00:6e:94:1f:84:50:d5:21:e7:13:27:
                    62:75:be:8d:2d:d1:9e:88:89:9a:12:c5:b4:c5:a9:
                    f3:b3:e3:9f:7a:ce:cf:76:02:61:8b:69:fb:08:b1:
                    d8:f6:9f:f6:e6:a4:0e:9d:3c:a7:ce:8e:c5:1d:e7:
                    9b:3c:a2:d6:7f:a4:38:82:55:a1:43:f9:d5:f0:da:
                    13:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:28:F1:F9:8C:09:35:CF:2C:20:DD:74:B6:44:DD:4E:26:52:29:87
            X509v3 Authority Key Identifier:
                keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:95:da:63:03:3f:0b:94:69:98:53:85:09:fd:8b:5d:cc:86:
         05:1a:85:31:cb:c0:2e:ea:e4:15:a7:1d:bd:a8:5f:3a:e3:24:
         7b:15:96:97:a9:6e:ca:91:9a:13:10:4b:42:66:b6:52:30:35:
         3d:94:ce:44:5a:7b:10:b5:3f:1e:9a:07:ea:7f:ee:11:9e:70:
         11:50:b8:7f:d4:b7:72:33:7a:2e:2e:35:4e:7c:da:db:c2:87:
         4a:c3:eb:48:ae:c1:96:e9:0c:12:cc:73:79:76:00:e1:48:49:
         80:19:6f:0c:0c:92:6f:5a:c4:ab:0b:5c:57:7f:62:23:60:5c:
         b7:d6:f0:ba:4c:71:0e:d9:97:5b:54:2f:e4:69:19:6f:ed:c1:
         ad:61:05:fa:1b:ac:37:e2:0c:ee:b7:06:39:33:9f:77:63:1a:
         d6:26:26:62:1d:10:53:b4:b8:a7:e7:93:96:6f:a8:fe:79:a2:
         3c:d2:1f:c4:39:c5:bb:69:b6:cc:05:13:dd:6d:df:83:0d:e5:
         99:bd:93:4c:72:cd:68:2b:7c:f1:6d:1f:57:61:d9:cb:bf:3e:
         9b:1f:95:3b:10:23:b0:ff:11:6d:4a:63:21:4a:b7:c3:33:41:
         df:cf:0a:43:ea:57:7d:2b:43:8c:50:c6:f4:2e:7d:2d:f7:18:
         68:04:58:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:05:12 2026 by rpki-client