Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
File:                     ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft (raw, json)
Hash identifier:          f8ISs6DmRbOTAgc8yfN/aHZtuhg6n20eSdBc+dI6xEA=
Subject key identifier:   44:63:0A:05:F7:2A:54:87:F9:DE:6F:F2:B3:A9:A4:91:20:3D:26:A5
Authority key identifier: 64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1
Certificate issuer:       /CN=A91694A4/serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
Manifest number:          17
Signing time:             Thu 23 Jul 2026 11:05:21 +0000
Manifest this update:     Thu 23 Jul 2026 11:05:20 +0000
Manifest next update:     Thu 30 Jul 2026 11:05:20 +0000
Files and hashes:         1: ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl (hash: HaYBWXGgD7hOp+7j25mOc8VJbIkCcHKj9YuRyY4XAho=)
                          2: CCB3F0C665C411F19AAB55CC8147A888.roa (hash: 6HsQ3Z7sCMaiW2glN0WOtCM/Fh9gJPdbJXQJdZ4RzC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl
                          rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91694A4, serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1
        Validity
            Not Before: Jul 23 11:05:20 2026 GMT
            Not After : Jul 30 11:05:20 2026 GMT
        Subject: CN=6a61f571-f57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:83:bd:34:51:06:f7:81:19:e3:20:ee:42:
                    a1:6a:48:eb:40:68:1e:54:a1:0c:ec:48:7c:39:d2:
                    16:9d:23:df:f5:ca:4b:ae:aa:20:20:5b:7a:14:4a:
                    5d:da:b2:74:f3:d9:08:2f:41:9a:d5:54:82:e7:b6:
                    26:74:0f:86:6b:02:73:7d:01:b8:92:05:95:d9:3c:
                    a2:3e:45:f4:5a:7a:9c:f8:e1:2d:4e:24:ba:51:74:
                    df:35:48:65:18:bf:35:1f:00:fd:4e:79:52:32:d0:
                    47:d3:78:2a:08:3a:4d:55:e5:d5:99:f3:3b:c4:0d:
                    3d:41:ab:2b:fa:fa:82:27:7b:e8:ca:b8:b3:4c:23:
                    45:f9:ee:e0:d3:89:de:2e:1c:3e:b0:c4:13:61:e7:
                    a8:91:88:86:2b:37:98:fa:4b:38:2e:cd:6a:3a:8f:
                    a3:38:c0:52:a1:fa:8c:0a:c3:4f:2d:ae:d4:9a:10:
                    ed:cd:d2:95:cb:24:da:81:35:0b:f1:b0:1c:6e:25:
                    12:ec:6a:45:a7:31:21:4b:2f:a0:fb:5b:39:a2:0a:
                    3d:11:67:7d:a3:da:52:fc:66:5b:0d:9b:e5:d8:aa:
                    2a:d3:a7:df:30:40:fe:6c:83:dd:1a:93:aa:c5:6d:
                    68:14:7c:0e:8e:cf:a6:72:ad:fc:8e:21:b3:2d:85:
                    37:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:63:0A:05:F7:2A:54:87:F9:DE:6F:F2:B3:A9:A4:91:20:3D:26:A5
            X509v3 Authority Key Identifier:
                keyid:64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d0:bc:49:e0:72:cc:37:1c:27:de:80:81:91:9d:33:3d:84:
         f4:ef:24:6c:65:85:b7:ae:91:b0:d2:45:44:13:58:5b:3d:86:
         2b:85:76:d5:a3:40:8c:fa:c6:c4:5c:d6:56:bd:84:21:fb:0c:
         3d:e5:40:15:74:53:16:54:11:e4:9f:85:d0:32:81:19:96:12:
         c5:50:51:b5:6e:28:70:5c:2e:21:ab:56:0f:77:6e:8a:4b:e7:
         b5:32:7f:30:c8:6b:31:a6:43:d2:54:3f:13:31:b1:a1:af:1b:
         e9:cb:70:fa:b1:8f:96:eb:ba:bb:79:d3:b3:ae:cc:6b:0b:4e:
         87:31:9f:2b:a5:82:09:79:24:bb:32:97:09:2e:8e:fd:b1:b4:
         fd:73:98:f7:94:21:2c:f3:c1:b8:91:15:dc:4b:85:0d:4c:f1:
         d2:ae:1e:fc:45:65:ae:4b:5b:26:c2:1e:3e:94:0b:55:29:98:
         09:48:42:8b:37:3c:42:a9:2a:b2:fb:54:06:ca:d4:9c:f9:59:
         5a:80:a4:06:91:db:f9:86:7a:70:0a:3d:5d:c2:3b:5f:5e:41:
         88:fb:2e:3b:81:16:e9:70:e2:9a:26:54:7c:3d:f8:69:18:9c:
         24:27:be:51:c9:ef:af:40:de:33:74:7c:79:6b:f1:d2:48:f3:
         e3:8b:66:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:56:43 2026 by rpki-client