Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
File:                     ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft (raw, json)
Hash identifier:          6qRH1zwdG58cmzjdkA5deR+/6qpOVd0dki5spkz3s0Y=
Subject key identifier:   FA:85:4F:C1:64:BE:ED:2C:B3:A8:29:E9:0C:C8:6D:60:6A:CC:CF:36
Authority key identifier: 65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47
Certificate issuer:       /CN=A91A8219/serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
Certificate serial:       17E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
Manifest number:          17DA
Signing time:             Wed 22 Jul 2026 16:39:19 +0000
Manifest this update:     Wed 22 Jul 2026 16:39:18 +0000
Manifest next update:     Wed 29 Jul 2026 16:39:18 +0000
Files and hashes:         1: ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl (hash: 7anOw8I4eGV1wjFFysrKweqg6Pb69yfCgvbmETibze4=)
                          2: 314E917C651E11E8A8903D42C4F9AE02.roa (hash: 9ej0uJb9isKtTSetZZYMiqBTjxBpRK1yCazawhZTpz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl
                          rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6121 (0x17e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8219, serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
        Validity
            Not Before: Jul 22 16:39:18 2026 GMT
            Not After : Jul 29 16:39:18 2026 GMT
        Subject: CN=6a60f236-361f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:c6:85:c3:38:44:07:39:66:14:b2:db:79:
                    47:00:38:6c:c8:1c:a1:5a:63:38:5f:c6:a2:1c:80:
                    b0:cf:3d:8c:b0:5f:da:4b:54:a4:2c:dd:d6:a6:b1:
                    ae:ac:f1:64:41:2d:e9:de:2f:71:e1:d5:73:e8:4e:
                    d1:7f:3e:fe:11:d2:98:64:16:50:74:90:3a:13:91:
                    1d:ac:23:79:1c:29:9f:c6:28:8b:37:b5:26:ed:ae:
                    34:02:0d:90:4a:81:c7:19:60:3c:8f:fd:ce:3d:5f:
                    f6:c6:8c:f4:bc:45:d2:b7:38:64:84:2c:61:95:87:
                    87:44:ed:b3:79:a9:75:92:d1:8d:68:4f:a9:04:3c:
                    9c:93:91:ee:62:cd:c9:eb:90:d2:65:60:4a:2e:b3:
                    39:cd:27:a1:7b:b7:8d:46:66:53:af:d4:09:9b:20:
                    6e:cc:d3:f6:f1:56:0b:ad:5d:c9:e3:19:a0:63:6d:
                    5c:20:17:6d:e7:1a:d7:6c:d6:21:4f:ab:4b:10:49:
                    de:87:41:b6:7a:5e:01:89:05:e4:80:a2:06:51:ef:
                    20:43:c7:fb:02:22:51:a0:92:28:ba:65:43:b7:44:
                    ca:b4:4b:bb:a4:2d:41:a7:50:a6:29:44:3a:00:47:
                    2a:2b:d1:d3:dd:f1:d7:82:fa:e4:cd:9c:24:f0:ee:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:85:4F:C1:64:BE:ED:2C:B3:A8:29:E9:0C:C8:6D:60:6A:CC:CF:36
            X509v3 Authority Key Identifier:
                keyid:65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:72:da:dd:ab:97:bf:a1:45:9f:9e:1f:13:ab:8a:f4:45:e6:
         9c:a0:d8:64:44:84:fd:e5:e8:cd:ad:e1:7b:32:08:18:c5:86:
         45:5c:25:3c:22:ce:04:cd:2d:1b:28:22:ab:9c:0e:af:2d:37:
         cf:7b:6b:ff:5c:86:03:61:3e:78:dd:bb:e7:9d:48:c2:1f:68:
         91:f9:ae:43:76:d7:ea:64:a9:3c:a1:c2:c5:90:e1:88:96:4f:
         93:80:2d:3b:13:2d:82:0a:ab:73:33:14:96:5c:74:7e:4d:76:
         a2:be:ab:6b:1c:f9:bb:ef:89:d5:00:f9:4a:55:b0:36:e2:de:
         0e:c8:13:73:74:08:a6:1b:06:70:8a:cc:8c:15:8f:3f:5d:d7:
         26:ab:16:41:66:a2:d1:83:2d:57:b8:9c:69:b3:ea:08:91:93:
         55:56:65:a0:32:8a:95:12:59:91:c8:e2:45:5e:8e:1c:ce:6f:
         fa:87:f9:07:19:51:3b:0e:77:6f:b9:0e:49:3c:c8:65:7a:f6:
         1e:58:35:09:29:8d:90:5e:f7:d0:33:ee:82:b3:b5:7f:5b:98:
         60:14:0c:17:3f:fc:66:be:c0:d7:db:b9:a9:8e:bb:1d:a7:77:
         78:43:c1:e1:e3:ec:ed:12:24:fb:6a:c2:09:bf:21:da:95:87:
         ee:d1:45:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgyMTkxMTAvBgNVBAUTKDY1NTNDM0MyMTgwQjk3RTJFQjM3Q0I3MUY2QTFDRUFB
N0I5NUNBNDcwHhcNMjYwNzIyMTYzOTE4WhcNMjYwNzI5MTYzOTE4WjAYMRYwFAYD
VQQDEw02YTYwZjIzNi0zNjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs9PGhcM4RAc5ZhSy23lHADhsyByhWmM4X8aiHICwzz2MsF/aS1SkLN3WprGu
rPFkQS3p3i9x4dVz6E7Rfz7+EdKYZBZQdJA6E5EdrCN5HCmfxiiLN7Um7a40Ag2Q
SoHHGWA8j/3OPV/2xoz0vEXStzhkhCxhlYeHRO2zeal1ktGNaE+pBDyck5HuYs3J
65DSZWBKLrM5zSehe7eNRmZTr9QJmyBuzNP28VYLrV3J4xmgY21cIBdt5xrXbNYh
T6tLEEneh0G2el4BiQXkgKIGUe8gQ8f7AiJRoJIoumVDt0TKtEu7pC1Bp1CmKUQ6
AEcqK9HT3fHXgvrkzZwk8O5YjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPqFT8Fk
vu0ss6gp6QzIbWBqzM82MB8GA1UdIwQYMBaAFGVTw8IYC5fi6zfLcfahzqp7lcpH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIxOS9FQzBBNzBGOEVB
ODAxMUU3OEI0MkE0MzJDNEY5QUUwMi9aVlBEd2hnTGwtTHJOOHR4OXFIT3FudVZ5
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pWUER3aGdMbC1Mck44dHg5cUhPcW51VnlrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODIxOS9FQzBBNzBGOEVBODAxMUU3OEI0MkE0MzJDNEY5QUUwMi9aVlBEd2hnTGwt
THJOOHR4OXFIT3FudVZ5a2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAInLa3auXv6FFn54fE6uK9EXmnKDYZESE/eXoza3hezIIGMWGRVwlPCLOBM0t
Gygiq5wOry03z3tr/1yGA2E+eN27551Iwh9okfmuQ3bX6mSpPKHCxZDhiJZPk4At
OxMtggqrczMUllx0fk12or6raxz5u++J1QD5SlWwNuLeDsgTc3QIphsGcIrMjBWP
P13XJqsWQWai0YMtV7icabPqCJGTVVZloDKKlRJZkcjiRV6OHM5v+of5BxlROw53
b7kOSTzIZXr2Hlg1CSmNkF730DPugrO1f1uYYBQMFz/8Zr7A19u5qY67Had3eEPB
4ePs7RIk+2rCCb8h2pWH7tFFsA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:05:55 2026 by rpki-client