Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
File:                     ZwbZhOcxaBICGI0pntNfAFsBdYA.mft (raw, json)
Hash identifier:          Gq0lnQFiPGD+7UuADbXoKi1HVEyHRRUC6bnnN2hU6Qw=
Subject key identifier:   46:E7:BE:5D:15:2A:45:8D:60:2A:59:B8:E5:2E:0F:7B:9F:FE:67:9E
Authority key identifier: 67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
Certificate issuer:       /CN=A917DCDA/serialNumber=6706D984E731681202188D299ED35F005B017580
Certificate serial:       355E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
Manifest number:          355E
Signing time:             Wed 22 Jul 2026 14:43:08 +0000
Manifest this update:     Wed 22 Jul 2026 14:43:08 +0000
Manifest next update:     Wed 29 Jul 2026 14:43:08 +0000
Files and hashes:         1: ZwbZhOcxaBICGI0pntNfAFsBdYA.crl (hash: rcVMTv43krBXIN6r+zQq8WCtT/fdauhVFnfrD1PvbLU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl
                          rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13662 (0x355e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DCDA, serialNumber=6706D984E731681202188D299ED35F005B017580
        Validity
            Not Before: Jul 22 14:43:08 2026 GMT
            Not After : Jul 29 14:43:08 2026 GMT
        Subject: CN=6a60d6fc-7df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:7d:f9:65:b3:63:c1:e7:ce:9e:10:c6:ab:
                    f8:7d:1f:1a:d6:65:e7:d2:68:2b:ca:90:2b:21:8c:
                    9e:0f:a6:c8:f7:8e:39:fc:64:9f:b0:57:5c:44:f7:
                    ab:4f:e9:2a:9b:48:2a:0d:7e:01:17:08:d2:1a:99:
                    3d:b6:36:71:d1:05:15:ab:b4:2c:d1:44:2f:c5:d1:
                    06:c3:35:9c:3d:ed:42:6d:c5:1e:27:f0:a3:89:8e:
                    ab:e0:9d:da:4d:99:39:98:d0:a4:6b:a5:f0:1c:ab:
                    7d:75:4d:c0:07:eb:f6:b9:20:34:e9:9b:7e:a2:f1:
                    21:46:da:b5:74:7e:6a:4a:6f:4a:32:58:be:25:82:
                    12:a3:f9:79:04:90:0a:90:a2:a9:1c:80:78:da:44:
                    79:58:75:02:8d:05:f6:38:5f:3e:38:0a:da:2a:ac:
                    76:5d:77:cd:6c:1d:9c:d2:1a:5f:13:64:2b:ef:25:
                    f5:8c:f7:63:54:6f:54:dc:6d:1e:52:47:de:a2:fd:
                    b7:1f:1e:43:46:92:ac:c7:45:90:71:80:e6:6f:bc:
                    5b:28:4b:76:aa:7e:08:3c:0c:ca:0f:2c:8a:e2:20:
                    60:4a:fa:66:53:09:fb:5b:91:88:ec:be:dc:8b:49:
                    3b:2f:41:e5:2b:e0:f1:2f:6b:8f:f8:71:f7:8a:11:
                    13:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E7:BE:5D:15:2A:45:8D:60:2A:59:B8:E5:2E:0F:7B:9F:FE:67:9E
            X509v3 Authority Key Identifier:
                keyid:67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:03:4b:c4:06:fe:13:65:e6:aa:2d:1d:5c:22:c8:1c:50:4f:
         80:2b:84:ba:4e:5f:85:21:52:0a:aa:38:c8:29:ca:01:4a:60:
         1f:15:87:a7:0d:f9:ea:e7:59:04:ee:51:31:d5:19:2f:da:32:
         59:75:5d:a3:ed:75:05:34:bc:29:ac:3c:5c:9f:75:41:76:be:
         c3:97:65:85:4b:bb:e4:f5:1e:64:fa:ce:02:4c:c8:55:6f:6d:
         83:05:61:3b:cb:b4:be:ba:3d:23:55:e7:17:d8:53:fe:62:59:
         db:42:a3:4d:0b:69:d9:05:d9:16:b0:27:77:ad:dd:ce:56:74:
         fe:d5:9c:5f:ba:55:92:24:88:81:a9:6e:76:3b:b7:63:f0:9d:
         1c:be:50:af:b3:32:75:73:54:67:f5:f1:7e:b0:30:b6:0a:06:
         fe:ab:18:9c:08:fa:a6:26:82:22:f2:9d:05:72:7d:fd:8e:46:
         47:78:83:a0:34:22:3f:63:37:6e:a8:e6:01:c8:5b:1d:3c:36:
         3a:5c:4b:e6:7f:53:6e:7d:b3:fd:c0:be:f0:5e:29:9a:3f:2d:
         b7:a9:88:45:59:1d:25:d0:b4:7c:fa:3c:8f:63:21:a8:01:08:
         4b:b8:21:8b:c7:53:7b:bc:99:96:5d:e0:70:bb:16:da:7a:27:
         58:b0:98:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:28 2026 by rpki-client