Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
File:                     Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json)
Hash identifier:          08PkF1uTaeFoyYylUhKsdBZnaGmHzHqaPiPCDeSKX9U=
Subject key identifier:   90:33:EE:2B:1D:BA:A7:35:74:A5:CD:FB:0C:F7:0C:FC:DC:7D:AB:98
Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
Certificate issuer:       /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Certificate serial:       0D25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
Manifest number:          0D1C
Signing time:             Wed 22 Jul 2026 18:24:45 +0000
Manifest this update:     Wed 22 Jul 2026 18:24:45 +0000
Manifest next update:     Wed 29 Jul 2026 18:24:45 +0000
Files and hashes:         1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: 4BJFN9wja1fiIyTYwaYkH1/FD34QDyEormPD1wT4s2w=)
                          2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: jnKst9yOXAJhgrgRGx5V1XAc+maLa+nGWtizsY+AuxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
                          rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3365 (0xd25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
        Validity
            Not Before: Jul 22 18:24:45 2026 GMT
            Not After : Jul 29 18:24:45 2026 GMT
        Subject: CN=6a610aed-540c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:45:37:ad:3d:a8:c2:52:c9:b1:f7:f5:f7:
                    62:0d:5a:88:27:7f:a5:6d:d4:ed:d1:0f:66:19:f1:
                    a5:69:51:5a:30:35:08:29:b2:a3:14:a8:9e:48:a8:
                    9b:55:96:87:84:56:96:48:1f:04:d6:61:46:5c:cd:
                    28:14:10:a9:f0:3b:85:75:a9:9d:ff:3d:1f:5f:6a:
                    6f:79:d6:52:57:34:ba:fa:e5:00:18:b8:a3:0f:ee:
                    0f:e6:11:30:7a:35:3b:2c:3d:ab:10:cc:c8:ef:58:
                    6c:b0:d3:ce:bc:32:32:28:b8:1c:97:10:60:4a:78:
                    95:4a:52:4e:03:0a:4d:a4:43:fd:e4:cb:3c:44:5b:
                    22:6a:9e:54:c6:70:5a:46:b5:70:87:b7:c1:5e:e5:
                    54:fd:7e:10:2f:f7:63:f6:25:ea:50:d7:b7:f5:6e:
                    cc:82:94:9d:f4:9c:6d:42:2e:80:a8:65:0d:6c:5e:
                    84:19:6c:51:8d:1d:e6:f2:1a:c3:bb:9d:f6:ff:fb:
                    c3:8b:96:a6:fd:db:d6:dc:7d:5c:ea:58:a2:0d:68:
                    21:1d:aa:41:52:95:6d:85:6d:07:9d:93:31:7a:c8:
                    a3:01:3f:12:b4:16:17:92:ec:c5:5e:d2:ab:cf:03:
                    64:45:ae:f8:20:92:5b:3d:37:68:de:01:99:a1:e3:
                    9c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:33:EE:2B:1D:BA:A7:35:74:A5:CD:FB:0C:F7:0C:FC:DC:7D:AB:98
            X509v3 Authority Key Identifier:
                keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:5e:e1:93:ff:c3:b6:e2:21:09:c3:88:46:fa:49:ec:e0:33:
         7d:9a:04:a3:04:c6:09:99:42:60:64:6b:d0:d0:54:0b:bf:5c:
         b4:ab:7b:86:a3:68:d3:20:7a:9c:f4:a3:9b:e1:af:56:3c:a9:
         6a:40:5d:c0:43:cd:cf:87:94:78:6c:63:80:23:f1:cd:bc:1e:
         2a:57:72:53:2d:71:57:ff:66:e7:8b:ec:c9:ef:92:6f:d3:39:
         7d:04:2c:68:d2:36:6e:70:aa:79:03:c6:4d:3d:d9:70:38:8b:
         a2:17:88:b3:96:e7:45:20:4e:ed:58:76:df:98:95:da:28:2a:
         2b:1e:fe:c2:58:0d:6b:e7:b5:ae:28:1c:26:3d:84:25:b6:5b:
         70:ee:8b:69:19:d7:fa:c4:93:f8:b7:db:79:f4:d4:ec:bd:d3:
         31:63:ca:f1:34:42:fb:4b:f6:5f:24:f1:46:32:37:7c:bc:63:
         14:a5:98:5a:b6:6d:60:c6:0b:33:a1:cf:18:4a:74:e8:12:51:
         42:9d:4a:97:b1:b8:d6:0c:4b:44:8e:e3:33:7b:ec:20:4b:f3:
         b7:60:3b:fb:d3:82:47:ef:21:6b:5f:11:55:78:a8:ce:63:6e:
         58:96:3f:09:f0:24:a9:37:cb:76:b7:a7:10:5b:1b:b2:f8:8c:
         1a:2a:49:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw
NENDMDkxMzUwHhcNMjYwNzIyMTgyNDQ1WhcNMjYwNzI5MTgyNDQ1WjAYMRYwFAYD
VQQDEw02YTYxMGFlZC01NDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvTJFN609qMJSybH39fdiDVqIJ3+lbdTt0Q9mGfGlaVFaMDUIKbKjFKieSKib
VZaHhFaWSB8E1mFGXM0oFBCp8DuFdamd/z0fX2pvedZSVzS6+uUAGLijD+4P5hEw
ejU7LD2rEMzI71hssNPOvDIyKLgclxBgSniVSlJOAwpNpEP95Ms8RFsiap5UxnBa
RrVwh7fBXuVU/X4QL/dj9iXqUNe39W7MgpSd9JxtQi6AqGUNbF6EGWxRjR3m8hrD
u532//vDi5am/dvW3H1c6liiDWghHapBUpVthW0HnZMxesijAT8StBYXkuzFXtKr
zwNkRa74IJJbPTdo3gGZoeOcLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJAz7isd
uqc1dKXN+wz3DPzcfauYMB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0
RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4
UHlmVlBaanF4TUVFekFrVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwl7hk//DtuIhCcOIRvpJ7OAzfZoEowTGCZlCYGRr0NBUC79ctKt7hqNo0yB6
nPSjm+GvVjypakBdwEPNz4eUeGxjgCPxzbweKldyUy1xV/9m54vsye+Sb9M5fQQs
aNI2bnCqeQPGTT3ZcDiLoheIs5bnRSBO7Vh235iV2igqKx7+wlgNa+e1rigcJj2E
JbZbcO6LaRnX+sST+LfbefTU7L3TMWPK8TRC+0v2XyTxRjI3fLxjFKWYWrZtYMYL
M6HPGEp06BJRQp1Kl7G41gxLRI7jM3vsIEvzt2A7+9OCR+8ha18RVXiozmNuWJY/
CfAkqTfLdrenEFsbsviMGipJRw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:44:28 2026 by rpki-client