Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
File:                     zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json)
Hash identifier:          n3VPnIchzvE72KQt0zKp1qF9WQBYe/NqpcH8EDXCFfU=
Subject key identifier:   C9:11:85:9C:76:9A:C2:9E:B2:66:7B:90:B7:EF:1C:A6:AE:F6:6C:07
Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
Certificate issuer:       /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
Manifest number:          6A
Signing time:             Thu 23 Jul 2026 09:55:50 +0000
Manifest this update:     Thu 23 Jul 2026 09:55:49 +0000
Manifest next update:     Thu 30 Jul 2026 09:55:49 +0000
Files and hashes:         1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: Lwht/Yea+WFVDZ/w1+hg+xwcSmtoP8qZou+dqR3nnVA=)
                          2: 81B5D9F8440511F1AB7B95FDB3833773.roa (hash: vn//9j6htUmeMHzJ/Tep4NLTfUBbskiXsWzwXG8Uy9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
                          rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
        Validity
            Not Before: Jul 23 09:55:49 2026 GMT
            Not After : Jul 30 09:55:49 2026 GMT
        Subject: CN=6a61e525-381d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:e7:a7:c7:69:51:f2:8f:60:78:52:48:8a:
                    6a:e3:90:c2:63:74:9a:13:c3:21:25:c0:5c:1f:18:
                    ea:00:72:66:41:ef:be:6c:a5:db:99:5c:77:56:f6:
                    b6:8e:38:f0:1a:f4:a5:0b:76:16:e6:4d:d6:c4:60:
                    0b:00:ee:42:a6:49:1b:99:91:57:e9:0b:e9:3d:d8:
                    ee:4d:7e:78:19:4e:39:e3:01:5b:25:83:db:68:6e:
                    46:e0:29:b1:92:51:23:05:1c:64:6f:a2:ab:13:d2:
                    82:7e:60:eb:d1:17:7e:83:be:04:8a:98:05:b6:20:
                    9a:0c:14:ca:3c:6b:35:4a:7d:b5:9d:76:d5:31:c5:
                    df:cd:b5:53:33:32:6e:1b:a7:e0:8b:49:e2:60:9f:
                    a1:e9:02:5c:ee:ff:1b:73:af:f8:f9:58:dc:e1:f6:
                    ff:60:3b:e9:9c:ec:53:df:21:20:bb:30:6d:0c:13:
                    e5:b7:3a:5f:f0:e2:53:3b:1c:c0:0c:72:bb:69:6e:
                    f9:be:9e:a3:a0:68:71:dd:9b:20:71:6d:66:12:8d:
                    74:8f:4b:3e:0f:a8:b0:34:71:6a:55:b4:4d:23:53:
                    4d:a6:7e:1c:8c:d5:2c:85:ac:f1:46:69:27:1e:a7:
                    98:c7:c4:5c:59:76:64:47:81:d2:e6:1f:7e:1f:33:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:11:85:9C:76:9A:C2:9E:B2:66:7B:90:B7:EF:1C:A6:AE:F6:6C:07
            X509v3 Authority Key Identifier:
                keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c6:2d:cd:d6:77:77:dc:42:ee:79:21:22:61:b4:e3:69:8f:
         2d:53:e6:9c:02:54:17:df:6e:4f:a1:b5:32:9d:97:78:03:8a:
         24:42:af:08:a3:96:40:3f:22:6a:c5:b3:a2:4e:e7:e1:d0:ce:
         d1:cf:82:32:67:f3:3b:c3:83:07:b5:55:6f:41:67:2b:23:03:
         5a:fb:79:2f:11:6c:f3:4c:38:6f:d8:2f:c4:9e:17:5e:05:3a:
         2f:be:27:fe:e1:8e:79:8c:41:3b:c1:2b:6f:1d:c3:2d:09:7f:
         bc:a9:8a:3f:ff:d0:9d:5c:bd:df:07:1f:7d:ea:d4:18:60:c8:
         03:23:be:44:1f:17:37:d1:14:bb:2b:4d:9d:cc:8b:14:c9:82:
         3f:46:7c:af:db:95:7d:9f:47:3a:04:43:2f:f5:64:de:68:e4:
         63:26:87:3e:09:b4:81:97:93:1f:24:79:a2:b6:02:0e:cd:3f:
         2c:c2:db:af:72:f5:18:51:a4:29:aa:b9:29:5a:84:e2:92:bd:
         a0:9e:b5:27:b5:ab:68:f1:16:6b:5c:6c:ee:68:ab:42:5e:fd:
         59:47:a3:4c:64:69:bc:1d:c3:15:78:5e:e7:27:cf:bd:91:64:
         f2:79:e5:4f:2f:ac:7a:25:b8:71:d0:bc:74:f0:7c:bf:64:d5:
         bd:c9:24:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:27:53 2026 by rpki-client