Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
File:                     Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json)
Hash identifier:          c2EDPhvb1hjxT0y5y2oX/EHirOf7FWNVvhVTGYFpRdc=
Subject key identifier:   74:20:F2:3D:6E:BD:F6:E5:66:B4:42:6A:C2:C6:3F:FB:00:99:83:3E
Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
Certificate issuer:       /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Certificate serial:       09F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
Manifest number:          09EC
Signing time:             Wed 22 Jul 2026 20:15:01 +0000
Manifest this update:     Wed 22 Jul 2026 20:15:00 +0000
Manifest next update:     Wed 29 Jul 2026 20:15:00 +0000
Files and hashes:         1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: 2mp9F9CzN3K4zcEA48mB8KEZp4X0U2c8l31Uo8EGRcU=)
                          2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: YWuawBdfKtu6PotchTxSSERmqgfLjDc702+I3DYwK90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
                          rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2549 (0x9f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
        Validity
            Not Before: Jul 22 20:15:00 2026 GMT
            Not After : Jul 29 20:15:00 2026 GMT
        Subject: CN=6a6124c4-b651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:8b:97:ee:d4:0d:d4:98:d3:25:22:4f:b5:
                    61:6a:d0:b6:b7:4a:e6:d4:02:ad:eb:44:6a:f0:52:
                    1d:44:ef:56:74:af:c4:9f:cd:a0:67:f7:ba:e2:d3:
                    09:eb:a3:63:79:ad:0e:4c:37:0d:52:71:ad:8e:a3:
                    9e:23:b0:3e:41:5f:7f:30:a6:5d:f5:61:8a:19:04:
                    f5:bd:0d:00:eb:aa:e9:58:07:28:3f:5c:a3:0f:5e:
                    dc:67:c1:67:0c:36:4b:38:26:54:70:42:fc:36:b1:
                    d6:f1:67:fd:f6:25:c5:57:72:32:ed:85:64:09:1b:
                    16:de:27:bf:c2:65:ff:d6:29:ad:a3:84:69:e9:02:
                    63:ac:1f:ab:be:42:9d:72:6f:3e:33:aa:bd:62:32:
                    46:2f:93:7b:64:0d:32:2b:0c:91:3e:c1:87:3c:c4:
                    05:ed:a4:79:57:f5:14:e7:d7:d8:cb:9d:db:ab:94:
                    eb:15:69:6d:b5:93:98:1b:cf:b6:22:54:dc:4b:77:
                    6c:b5:2e:fe:25:bb:5c:36:de:e5:df:28:bc:cc:2e:
                    da:0f:79:cb:48:88:2f:26:90:9b:8b:2a:99:f0:e5:
                    7a:06:f7:5f:d4:82:ed:95:33:c4:8c:14:ee:50:55:
                    e7:fe:ee:fc:8e:5c:72:81:f7:31:72:e6:63:ce:d4:
                    03:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:20:F2:3D:6E:BD:F6:E5:66:B4:42:6A:C2:C6:3F:FB:00:99:83:3E
            X509v3 Authority Key Identifier:
                keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:56:74:04:02:83:ba:7d:89:ee:e2:59:38:4c:fe:ef:41:ac:
         c5:2e:6b:db:63:2f:89:0c:ec:87:fc:42:29:ed:e5:14:a6:d8:
         0b:1e:bd:fe:1d:f0:94:b5:d7:f4:87:a8:f6:36:16:14:e4:2b:
         60:59:cd:b8:85:2c:d0:b4:5e:fe:ff:c2:3d:32:b8:cf:5a:47:
         51:5e:a4:8d:7e:ed:c7:3f:3f:fb:5c:6b:bb:08:1e:73:48:95:
         c5:db:85:07:82:23:b2:e4:e5:ed:78:c7:c2:a6:60:4e:c0:4c:
         8b:43:f3:dd:a2:9e:30:6b:c7:d6:22:91:f0:ea:bb:76:29:da:
         c4:b3:3f:bf:5e:7b:e6:d4:96:95:68:1b:bb:51:ec:85:3f:45:
         be:ea:5d:d1:61:cc:69:fa:ab:c6:eb:9a:f5:25:45:f5:ea:59:
         32:c0:5d:9f:de:ea:e9:75:5f:36:b0:6b:30:b2:69:ba:cb:f9:
         83:3b:40:bf:f2:97:27:12:05:12:af:67:c6:b5:51:59:de:ae:
         e4:1e:45:00:4f:f0:db:0a:fe:55:12:18:c9:98:16:c7:7d:42:
         be:fe:18:06:d0:51:c0:ff:4a:02:59:6a:79:67:2d:8e:76:13:
         64:92:d6:ea:9b:6b:bc:c9:9a:3b:8f:da:a9:56:82:0c:51:70:
         a1:8f:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:55 2026 by rpki-client