Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
File:                     zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json)
Hash identifier:          G7tnBHyil2p/W3e9KZKmQqIv+EWkxFK9RqGOCljhsHE=
Subject key identifier:   45:78:AD:84:6F:40:8F:8F:80:ED:88:16:2C:FB:63:BE:B8:59:BB:1A
Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41
Certificate issuer:       /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
Manifest number:          0103
Signing time:             Thu 23 Jul 2026 07:55:23 +0000
Manifest this update:     Thu 23 Jul 2026 07:55:23 +0000
Manifest next update:     Thu 30 Jul 2026 07:55:23 +0000
Files and hashes:         1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: Vm1yp8zNxUrq+mbBpjxsPTOwQZ2lEaCeKLhiKdgeuwE=)
                          2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: fR4AypiQYoJGmxQnLx99QlOWnyJ7/nfzm8EkI/Pllqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl
                          rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641
        Validity
            Not Before: Jul 23 07:55:23 2026 GMT
            Not After : Jul 30 07:55:23 2026 GMT
        Subject: CN=6a61c8eb-ab23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:bb:22:7d:b0:40:b8:b6:f4:08:ce:a3:61:
                    02:4d:de:81:ca:75:f8:e4:08:59:d4:32:6b:76:7f:
                    45:82:60:84:49:0b:f2:14:e1:3e:cf:eb:1e:c9:15:
                    22:ef:c7:ec:5f:58:fd:c4:32:0b:49:1f:53:bf:e4:
                    e7:19:75:22:6c:ee:12:60:b8:d7:94:86:5f:8b:c8:
                    5f:2d:11:1c:e6:83:0a:8b:c5:2a:ef:13:a2:67:dc:
                    ad:20:e8:d8:71:c3:4b:83:72:9a:aa:50:86:8e:0e:
                    45:73:1f:e3:f3:c8:76:06:aa:7d:ff:01:18:7f:1e:
                    a6:b4:8b:e1:ee:27:68:69:39:22:ec:9d:7b:c6:e5:
                    af:a5:6a:44:64:9e:49:7e:8f:48:76:3f:69:22:a8:
                    95:05:4f:95:6b:68:80:23:6a:b1:1d:a3:c2:1e:88:
                    c2:cf:a7:10:e1:46:d7:a9:b6:8c:a3:5a:d0:b4:17:
                    21:b6:23:9f:53:dd:b0:c2:56:95:fc:11:ca:a9:23:
                    7b:0d:73:ce:1f:21:a1:60:72:af:ca:f4:c8:da:a4:
                    44:4f:49:8c:1a:82:c1:9b:14:c1:7d:59:1c:42:0e:
                    96:b3:64:26:21:e4:a6:65:cd:59:5a:fb:82:03:dc:
                    e5:46:f3:cb:9e:c6:80:04:60:3a:34:15:1c:e9:e3:
                    dd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:78:AD:84:6F:40:8F:8F:80:ED:88:16:2C:FB:63:BE:B8:59:BB:1A
            X509v3 Authority Key Identifier:
                keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bf:48:a7:47:f4:94:9c:df:e6:a5:63:fa:50:21:76:8f:50:
         8d:0b:3a:86:c4:34:98:14:f6:5f:0d:1a:29:58:2c:6d:8a:f9:
         47:85:d8:24:56:4f:bf:0c:b7:b1:0b:37:de:da:16:f7:a1:ee:
         1a:c2:b2:42:9d:d4:09:9f:35:14:53:23:9e:d2:8f:7d:1d:04:
         cc:c5:37:33:9d:cb:29:75:cf:46:c0:ab:2e:1f:3e:7f:05:f1:
         3f:bf:8b:d8:90:fc:8a:86:07:b9:04:2e:5a:51:be:3b:32:5e:
         99:27:11:31:da:97:42:24:1a:ab:53:e4:99:8e:05:35:44:2e:
         ab:d3:dc:2a:ac:24:93:cb:89:c6:ff:b4:22:0b:64:60:b6:ce:
         ec:8a:7c:a6:fc:9b:20:46:11:68:94:25:55:c4:6e:86:38:4e:
         94:1c:aa:dd:39:7f:b2:f6:5b:f1:48:66:a1:8f:41:b0:dd:cd:
         5e:0f:25:ab:ab:cd:13:8e:f9:43:eb:a9:6b:28:3d:67:9e:60:
         cf:af:bc:a5:97:3b:2f:61:93:32:ee:dc:01:57:29:a5:24:5d:
         b4:9a:7b:71:d2:06:80:ab:4e:b8:24:81:0c:dc:5b:f4:3c:0b:
         ab:63:45:f0:b8:04:ab:a6:e1:c3:5a:26:16:81:75:66:72:0f:
         d6:33:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:46:37 2026 by rpki-client