Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft
File:                     aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft (raw, json)
Hash identifier:          g2TcFrntcbuksPAKSl/YS5Nx/AW004o0LV46y3ig9hA=
Subject key identifier:   47:86:0B:A8:20:24:05:5B:E2:0E:20:DD:9D:62:CD:C4:5B:6D:79:47
Authority key identifier: 69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B
Certificate issuer:       /CN=A916A3EE/serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B
Certificate serial:       0771
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft
Manifest number:          0769
Signing time:             Wed 22 Jul 2026 22:15:54 +0000
Manifest this update:     Wed 22 Jul 2026 22:15:54 +0000
Manifest next update:     Wed 29 Jul 2026 22:15:54 +0000
Files and hashes:         1: aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl (hash: u2Gvmymr5H/2+z4DWxwKErpfBDFGwjp+LB+YeqvXBVY=)
                          2: 76F5B630701311EB9C85DF1FC4F9AE02.roa (hash: naUTdPx2hWErxJkYpY1OleALKvTnovAGDRuMLpDEDq0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl
                          rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1905 (0x771)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A3EE, serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B
        Validity
            Not Before: Jul 22 22:15:54 2026 GMT
            Not After : Jul 29 22:15:54 2026 GMT
        Subject: CN=6a61411a-5cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:be:a7:08:d3:1e:19:88:59:ec:91:30:68:b6:
                    b5:bf:5d:ef:17:98:23:b6:c6:1c:4a:16:02:2e:73:
                    69:ed:c1:82:3f:56:56:c1:9a:fd:bc:e9:fd:ee:be:
                    3f:96:e8:51:22:b0:75:e9:29:6c:5a:77:a8:4a:c8:
                    99:d3:29:91:c6:93:02:1c:1d:5b:94:ce:0f:3a:e8:
                    ce:a1:34:45:95:11:82:94:6e:63:4b:c4:60:be:75:
                    af:4c:7c:2c:83:14:a2:96:29:13:ae:f8:5d:08:00:
                    df:89:90:3f:a3:54:2d:16:0a:e5:12:86:a4:e8:ef:
                    f0:ce:82:e5:14:56:8f:75:ab:14:24:68:6e:1b:d0:
                    10:09:b7:70:46:7c:76:16:3f:ec:5c:ab:9b:50:fe:
                    b5:fe:22:eb:65:b7:f8:4a:27:64:1d:cd:7f:5d:bc:
                    bf:0d:a2:39:14:12:82:2e:4b:72:33:86:e4:ea:ec:
                    53:82:d7:01:f1:2e:38:4c:97:8e:5e:16:9c:34:3b:
                    0a:86:e4:ce:20:bc:84:33:ab:ae:c2:7e:64:47:99:
                    c5:3d:89:bd:26:a3:2b:a6:29:29:e7:43:8c:b3:99:
                    60:55:6b:88:0b:6d:94:43:b5:30:f4:6d:65:53:44:
                    5e:83:9b:b9:4c:10:24:fc:55:fb:72:ef:4e:75:25:
                    f3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:86:0B:A8:20:24:05:5B:E2:0E:20:DD:9D:62:CD:C4:5B:6D:79:47
            X509v3 Authority Key Identifier:
                keyid:69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:46:b1:f7:1b:0a:d6:31:68:de:6d:ac:2d:cb:be:63:29:64:
         cf:2a:62:b4:e1:49:2a:5d:4a:6d:a2:bd:34:f7:a3:ab:e3:d3:
         9d:3b:34:78:c3:cb:8b:f1:e3:8e:e7:1b:21:6c:1b:36:bd:de:
         fe:62:c0:a4:1b:ca:8d:1a:5a:3a:6f:2f:07:06:d8:d1:e5:8a:
         a6:2d:f6:6d:be:ea:bf:91:a6:1f:ca:ee:c7:87:2c:14:23:30:
         dd:65:77:22:7a:88:4a:27:90:5f:4a:d8:bd:3c:71:d0:c1:68:
         74:fd:54:bd:e9:ac:ea:51:2b:ce:df:f0:45:dd:fc:78:42:b1:
         22:ab:41:ee:24:4c:22:15:53:ea:1e:1b:2c:a6:b7:26:27:36:
         51:63:2a:6b:83:94:bd:2b:d6:10:9b:2d:a6:cf:46:09:49:5d:
         f7:c7:c1:33:d6:2a:f7:75:b2:aa:c2:78:63:d3:b7:e2:74:5d:
         8e:4d:fa:03:60:67:3e:fa:9d:10:4c:20:3b:ef:ec:08:e8:91:
         bc:4e:65:dc:12:84:d6:2a:eb:c3:a0:54:41:b6:bf:f0:0c:74:
         9c:e1:f7:3a:c8:0c:37:b8:92:a7:ac:a8:cf:69:ef:cd:84:61:
         8f:55:4d:75:a8:97:fe:c8:f2:48:56:77:33:6d:02:de:b7:e3:
         81:3d:21:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:43 2026 by rpki-client