Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
File:                     zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json)
Hash identifier:          qSi86Mix9G5BJXN30+AunQ8+IdWFkCDB7tkOUUkPKMw=
Subject key identifier:   8A:65:0F:05:1C:28:D6:4B:72:74:56:9A:EB:59:03:F1:8B:64:85:26
Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34
Certificate issuer:       /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
Certificate serial:       28B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
Manifest number:          289D
Signing time:             Wed 22 Jul 2026 15:40:25 +0000
Manifest this update:     Wed 22 Jul 2026 15:40:25 +0000
Manifest next update:     Wed 29 Jul 2026 15:40:25 +0000
Files and hashes:         1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: kS10viIsWS13oos4IUzu2L1lOoydYTUfNvFjeg5wHf8=)
                          2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: VmiDWWZcXS/8NwiQU0Cj011GwuJY7i5hDmIVSX2ZEao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl
                          rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10416 (0x28b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
        Validity
            Not Before: Jul 22 15:40:25 2026 GMT
            Not After : Jul 29 15:40:25 2026 GMT
        Subject: CN=6a60e469-4a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:9a:52:98:10:2e:11:19:4a:bb:a0:1f:4c:
                    c3:17:92:dc:d5:58:95:1e:83:e3:26:95:f0:23:c4:
                    90:5d:60:1d:ba:2e:85:0f:0d:68:14:6a:d9:43:26:
                    3a:15:7a:8d:d0:74:ab:76:ed:e7:10:6f:27:42:89:
                    78:1f:ce:2b:25:20:43:e9:1f:d9:7c:c1:a6:b4:f4:
                    c2:bc:b8:3b:51:46:27:5d:20:a8:6b:27:8b:fb:d0:
                    5c:4d:02:1d:51:24:7f:12:b0:05:25:49:11:51:35:
                    be:1a:ed:75:00:fc:a6:4a:d5:ca:4a:f5:e4:a6:65:
                    bf:1a:1e:e7:92:8c:63:ab:35:e0:ff:b1:a7:2a:37:
                    b9:23:58:b4:54:9a:fd:8a:d8:38:31:a9:e4:d9:8a:
                    34:57:19:93:1e:88:c4:bf:58:d8:3e:5b:87:f9:00:
                    55:66:6d:ea:a9:db:4c:86:83:a7:f6:36:a5:49:91:
                    7a:ff:88:f6:5e:6b:6e:0b:40:9a:48:17:4a:2e:7d:
                    e2:c2:25:a7:c0:1e:c7:f0:f0:9b:1f:4f:be:cc:b8:
                    b4:2f:ec:b5:c9:0c:af:37:47:a1:32:07:32:09:be:
                    55:ec:f1:25:e9:9f:6c:fd:f4:4d:1e:71:2d:63:f9:
                    53:94:dc:7b:82:19:a7:e6:89:ab:37:fb:10:31:f0:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:65:0F:05:1C:28:D6:4B:72:74:56:9A:EB:59:03:F1:8B:64:85:26
            X509v3 Authority Key Identifier:
                keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:23:a5:bf:7d:06:b3:ab:ee:0c:61:d5:aa:77:d5:4c:e1:dc:
         50:2a:e0:90:ec:6c:49:08:5e:66:bd:98:a9:f8:b3:9a:e9:59:
         f2:7b:35:f4:d7:25:9f:8d:db:e8:54:0b:2e:c1:7d:a4:37:7e:
         63:11:a9:f0:49:99:d1:f0:e5:2d:1a:f2:0a:4b:01:a1:3e:1b:
         73:4f:6e:94:16:de:b7:46:50:31:e7:47:e4:9d:6b:b6:ec:5e:
         6a:13:aa:f0:4b:e6:03:0d:b4:f4:90:b3:32:81:11:56:1a:03:
         48:f4:cb:76:ed:42:f9:26:b7:25:09:f5:33:89:a2:74:3c:7c:
         6f:73:76:d0:49:8a:e8:11:16:92:44:2a:11:a2:03:30:7f:17:
         51:e9:47:50:9f:95:39:70:2b:cc:79:7a:31:be:93:86:a6:45:
         b1:38:27:a0:f7:8c:1e:10:5d:8b:35:4c:e2:f1:9a:f8:46:b3:
         a6:2a:4a:2c:d4:d1:ff:c8:d1:bf:b1:e5:46:c0:e0:4f:80:f1:
         ec:c9:47:3b:66:68:d3:1c:43:38:44:44:b8:2e:b7:cb:13:96:
         6b:a1:ab:28:11:b0:1e:b8:72:7f:0f:fb:7a:bd:b7:2a:53:d7:
         32:ca:26:21:23:d8:d6:31:df:b4:74:7a:a6:79:fb:64:93:76:
         2f:e3:7c:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU1MjkxMTAvBgNVBAUTKENFRTY5MzBGNDhENzc0RDY0M0Q1NUNGRkU5OEIxRTYz
QTRENjM1MzQwHhcNMjYwNzIyMTU0MDI1WhcNMjYwNzI5MTU0MDI1WjAYMRYwFAYD
VQQDEw02YTYwZTQ2OS00YTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqRaaUpgQLhEZSrugH0zDF5Lc1ViVHoPjJpXwI8SQXWAdui6FDw1oFGrZQyY6
FXqN0HSrdu3nEG8nQol4H84rJSBD6R/ZfMGmtPTCvLg7UUYnXSCoayeL+9BcTQId
USR/ErAFJUkRUTW+Gu11APymStXKSvXkpmW/Gh7nkoxjqzXg/7GnKje5I1i0VJr9
itg4Mank2Yo0VxmTHojEv1jYPluH+QBVZm3qqdtMhoOn9jalSZF6/4j2XmtuC0Ca
SBdKLn3iwiWnwB7H8PCbH0++zLi0L+y1yQyvN0ehMgcyCb5V7PEl6Z9s/fRNHnEt
Y/lTlNx7ghmn5omrN/sQMfCVMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIplDwUc
KNZLcnRWmutZA/GLZIUmMB8GA1UdIwQYMBaAFM7mkw9I13TWQ9Vc/+mLHmOk1jU0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyOS8wQjY2MDA0MEEy
MDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGROWkQxVnpfNllzZVk2VFdO
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p1YVREMGpYZE5aRDFWel82WXNlWTZUV05UUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTUyOS8wQjY2MDA0MEEyMDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGRO
WkQxVnpfNllzZVk2VFdOVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGiOlv30Gs6vuDGHVqnfVTOHcUCrgkOxsSQheZr2YqfizmulZ8ns19Ncln43b
6FQLLsF9pDd+YxGp8EmZ0fDlLRryCksBoT4bc09ulBbet0ZQMedH5J1rtuxeahOq
8EvmAw209JCzMoERVhoDSPTLdu1C+Sa3JQn1M4midDx8b3N20EmK6BEWkkQqEaID
MH8XUelHUJ+VOXArzHl6Mb6ThqZFsTgnoPeMHhBdizVM4vGa+EazpipKLNTR/8jR
v7HlRsDgT4Dx7MlHO2Zo0xxDOEREuC63yxOWa6GrKBGwHrhyfw/7er23KlPXMsom
ISPY1jHftHR6pnn7ZJN2L+N8Jw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:35:36 2026 by rpki-client