Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
File:                     zURUsk4_99x1y76Rm92nnEe5Xqc.mft (raw, json)
Hash identifier:          JrXiIiCvZ957iWg7CTRd+B2H51NV+6T8n4P5dzsToPM=
Subject key identifier:   37:03:58:AC:99:E6:97:4C:4F:4C:E2:01:60:EF:E0:51:87:D4:03:5E
Authority key identifier: CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7
Certificate issuer:       /CN=A9172999/serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
Manifest number:          28
Signing time:             Thu 23 Jul 2026 01:46:27 +0000
Manifest this update:     Thu 23 Jul 2026 01:46:27 +0000
Manifest next update:     Thu 30 Jul 2026 01:46:27 +0000
Files and hashes:         1: zURUsk4_99x1y76Rm92nnEe5Xqc.crl (hash: ENPYI4zkkOOGCuNnHFFpgvKtynb6z1ikdE/OsJfB8wg=)
                          2: A53F1E96647311F1BC2A35D47947A888.roa (hash: aWkLi47uIb9GIJOKXHkRTH7Cyo2StRxOnkwZBq2MqlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl
                          rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172999, serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
        Validity
            Not Before: Jul 23 01:46:27 2026 GMT
            Not After : Jul 30 01:46:27 2026 GMT
        Subject: CN=6a617273-04a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:3b:db:09:f3:eb:7a:00:7e:51:15:58:02:
                    64:52:dc:91:ec:b7:d6:31:c6:fb:b2:6a:d6:fb:93:
                    2f:ab:cf:ac:08:6f:c3:ec:3a:d9:1e:7f:ac:c4:86:
                    db:b2:c4:5e:63:b9:58:09:1c:8f:0a:ee:92:5b:7a:
                    5f:d6:bb:77:c3:17:d9:26:9c:c2:0c:8e:47:3c:4b:
                    10:d1:8a:29:dd:c3:0d:4e:76:bb:a2:01:cd:98:09:
                    ad:32:66:b8:a7:07:c5:fa:23:b0:c3:a8:60:f2:7c:
                    db:7e:f0:98:41:17:48:ff:5c:81:7e:f4:10:79:7c:
                    f7:0a:e2:f7:de:1b:ec:2b:ab:36:40:bc:0a:54:f7:
                    72:19:9c:fd:31:15:cb:77:be:1a:61:2f:0d:b1:8b:
                    3f:9e:d0:2d:18:6d:99:cb:e0:92:61:b4:19:eb:42:
                    91:a7:90:c1:6f:7e:0e:17:2a:cb:02:66:71:0f:19:
                    0a:42:91:ba:99:b6:2f:bb:f2:c7:69:6f:ac:c3:ab:
                    61:80:53:f8:e3:b1:08:d0:98:83:cb:e0:a4:bd:76:
                    f1:5c:d2:47:b1:19:40:48:0e:39:5b:1a:a5:66:2c:
                    49:08:ca:a1:31:72:6b:32:d2:96:a0:c3:d4:7c:2e:
                    8c:01:eb:52:88:11:fc:85:97:bb:25:8a:09:ff:2e:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:03:58:AC:99:E6:97:4C:4F:4C:E2:01:60:EF:E0:51:87:D4:03:5E
            X509v3 Authority Key Identifier:
                keyid:CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:85:55:ae:bd:e1:4c:63:19:5d:01:1e:06:44:48:c3:6a:eb:
         75:3e:37:68:bf:99:2a:0f:94:0e:51:86:54:05:4d:ba:b9:07:
         6c:6c:ca:8e:63:85:f4:2e:ab:89:f9:2b:a7:84:54:93:f2:7d:
         c7:9c:57:17:ae:5e:fe:e1:e9:6f:73:6c:78:32:79:1a:d7:d1:
         46:57:4a:81:a6:7f:ae:0b:df:13:cf:68:48:32:ec:8f:9e:46:
         a3:b1:d4:08:3f:03:44:fb:70:f5:cb:d3:b5:c9:b0:98:a6:f9:
         54:43:6e:70:cb:83:ee:d5:b5:3c:de:15:15:ad:fc:53:a5:73:
         12:65:32:8d:db:7e:5c:9c:b0:7e:cb:24:4d:cb:2c:d9:11:8b:
         c5:5f:6e:8f:e9:d5:5a:15:12:bd:d9:f1:ee:f1:26:0c:d3:96:
         50:17:86:bc:95:1c:a9:ae:2e:d3:9f:a2:a2:18:d6:25:e8:1a:
         84:6e:1d:8f:19:f5:98:6d:ae:0b:c1:fb:b5:14:2c:18:15:97:
         e6:2d:a4:4e:a3:3b:56:0e:fd:7b:d5:ba:63:db:93:96:c0:06:
         3b:c7:de:87:f2:11:68:c2:93:c2:8f:b7:2e:cd:55:99:79:b2:
         46:35:4a:82:da:5c:53:08:63:52:c7:cb:44:cb:1e:fc:ff:51:
         6a:1c:bd:93
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
Mjk5OTExMC8GA1UEBRMoQ0Q0NDU0QjI0RTNGRjdEQzc1Q0JCRTkxOUJEREE3OUM0
N0I5NUVBNzAeFw0yNjA3MjMwMTQ2MjdaFw0yNjA3MzAwMTQ2MjdaMBgxFjAUBgNV
BAMTDTZhNjE3MjczLTA0YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZWDvbCfPregB+URVYAmRS3JHst9Yxxvuyatb7ky+rz6wIb8PsOtkef6zEhtuy
xF5juVgJHI8K7pJbel/Wu3fDF9kmnMIMjkc8SxDRiindww1OdruiAc2YCa0yZrin
B8X6I7DDqGDyfNt+8JhBF0j/XIF+9BB5fPcK4vfeG+wrqzZAvApU93IZnP0xFct3
vhphLw2xiz+e0C0YbZnL4JJhtBnrQpGnkMFvfg4XKssCZnEPGQpCkbqZti+78sdp
b6zDq2GAU/jjsQjQmIPL4KS9dvFc0kexGUBIDjlbGqVmLEkIyqExcmsy0pagw9R8
LowB61KIEfyFl7slign/Lm1LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNwNYrJnm
l0xPTOIBYO/gUYfUA14wHwYDVR0jBBgwFoAUzURUsk4/99x1y76Rm92nnEe5Xqcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOTk5L0FFRkM1NUIwNEZG
MjExRjE5QjEyN0RGMTlFRUU1MjhFL3pVUlVzazRfOTl4MXk3NlJtOTJubkVlNVhx
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG
RDFGRjIvelVSVXNrNF85OXgxeTc2Um05Mm5uRWU1WHFjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy
OTk5L0FFRkM1NUIwNEZGMjExRjE5QjEyN0RGMTlFRUU1MjhFL3pVUlVzazRfOTl4
MXk3NlJtOTJubkVlNVhxYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQABhVWuveFMYxldAR4GREjDaut1Pjdov5kqD5QOUYZUBU26uQdsbMqOY4X0LquJ
+SunhFST8n3HnFcXrl7+4elvc2x4Mnka19FGV0qBpn+uC98Tz2hIMuyPnkajsdQI
PwNE+3D1y9O1ybCYpvlUQ25wy4Pu1bU83hUVrfxTpXMSZTKN235cnLB+yyRNyyzZ
EYvFX26P6dVaFRK92fHu8SYM05ZQF4a8lRypri7Tn6KiGNYl6BqEbh2PGfWYba4L
wfu1FCwYFZfmLaROoztWDv171bpj25OWwAY7x96H8hFowpPCj7cuzVWZebJGNUqC
2lxTCGNSx8tEyx78/1FqHL2T
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:45 2026 by rpki-client