Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
File:                     zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json)
Hash identifier:          y+KY+QeUCFpMLKaVM/KJchdIt01V6JM8pVB5mi/hVj0=
Subject key identifier:   62:29:11:01:CB:E4:55:58:93:BB:33:2F:2D:F1:F3:DE:EB:D4:2E:73
Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88
Certificate issuer:       /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088
Certificate serial:       071A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
Manifest number:          070B
Signing time:             Wed 22 Jul 2026 22:44:43 +0000
Manifest this update:     Wed 22 Jul 2026 22:44:42 +0000
Manifest next update:     Wed 29 Jul 2026 22:44:42 +0000
Files and hashes:         1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: fwpxY9+aO0XiyDvVsilzwsdielzPE1RGPlnRW2Ox/XY=)
                          2: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: QLNVThMGPv9nYpciTJEsDCXQ9zwBwHbCc7U8jrdlasA=)
                          3: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: NZqz6oA1XjP25H0xN/7h1ikyMSJoG4sEZFNjD+Tx104=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl
                          rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1818 (0x71a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088
        Validity
            Not Before: Jul 22 22:44:42 2026 GMT
            Not After : Jul 29 22:44:42 2026 GMT
        Subject: CN=6a6147db-95d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:6b:f8:16:1e:e9:4c:f3:2b:85:07:d7:a4:
                    60:be:1b:5d:38:ee:01:58:96:8c:d7:b7:5b:ac:f3:
                    b8:b5:0c:01:f7:b2:9f:05:04:b7:d5:2d:17:b3:4c:
                    84:a0:ae:71:82:f1:2d:f0:91:c2:9c:a8:21:23:92:
                    9e:36:a9:da:67:7b:a2:0e:6d:41:e5:b4:fa:f8:84:
                    c0:ec:ae:f4:61:8c:de:3b:00:99:a3:44:a4:43:ee:
                    9a:58:31:ad:4c:9d:a7:41:f3:9c:b0:f8:5c:9b:2f:
                    8d:1f:7f:05:ec:0a:8b:21:08:f2:08:99:3e:41:c8:
                    03:04:cb:9a:11:ee:ed:8c:b1:9a:3f:36:d2:0f:23:
                    29:2b:e8:4c:32:41:09:50:ef:4d:d3:32:69:f6:6c:
                    35:37:17:fd:2d:b3:9c:c5:7f:e6:d3:d9:82:9d:11:
                    5a:dc:a2:a5:c1:07:c5:1b:ec:eb:62:32:2d:e0:4f:
                    17:15:4f:46:8f:b4:80:ba:ef:95:4d:de:e1:48:ee:
                    7b:43:1d:62:e9:fe:9a:1f:e8:98:98:9b:ef:13:5c:
                    8e:d6:05:51:51:5d:29:94:2f:e4:49:c6:f3:76:55:
                    e0:43:67:07:58:cc:97:84:56:28:c3:66:18:d2:9b:
                    71:8a:38:a3:00:82:97:bd:40:67:c8:0f:ca:40:fd:
                    7b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:29:11:01:CB:E4:55:58:93:BB:33:2F:2D:F1:F3:DE:EB:D4:2E:73
            X509v3 Authority Key Identifier:
                keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3c:3a:f7:d5:ec:7a:0b:a7:a2:12:22:a0:3e:4e:31:ec:4c:
         8c:d0:6e:e8:cf:87:19:a1:c8:0e:c5:38:dc:fd:a6:0b:b5:b5:
         b6:74:86:08:e8:0b:f3:89:a5:31:16:e1:99:e0:f1:7c:5a:7d:
         2e:c3:f7:b3:c1:27:7f:87:b1:ae:59:72:71:e7:2e:b0:51:6a:
         35:7a:1c:4e:d5:df:62:40:1b:10:56:37:1a:a5:4f:0f:f5:72:
         30:4e:63:1d:04:7c:03:d2:73:65:a6:8b:13:15:77:aa:f3:9c:
         0f:3a:71:63:4d:8d:27:b3:29:c7:a0:f7:92:9a:bd:cd:22:71:
         06:e9:92:27:6b:9c:5f:c7:b4:4f:2b:26:05:09:40:e8:90:0c:
         d7:f8:f9:47:90:d9:c2:7c:56:b4:a2:e7:89:e0:e0:c1:dd:c0:
         75:be:d2:5b:2b:65:8a:b2:ee:66:21:41:d5:8d:fd:46:75:df:
         ff:bc:54:d7:fc:06:b2:35:10:a8:b9:85:6e:21:91:20:cd:7f:
         25:a1:3a:0d:5b:32:38:c0:7f:42:80:74:48:37:e1:0a:a2:62:
         4b:a6:36:00:f8:fd:fd:00:0a:f2:31:0d:a6:e7:a3:a6:1d:2f:
         0f:b1:b1:29:ad:1f:db:a1:8f:1b:1f:66:ed:1b:7a:9b:cb:93:
         83:bd:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:29 2026 by rpki-client