Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
File:                     zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft (raw, json)
Hash identifier:          NSLldtYyDybAvdI0XSaorXG6SjlPlJyOB/JNqy+YXJY=
Subject key identifier:   3A:E1:85:38:4B:F0:DC:68:A2:65:41:93:A9:1E:C4:C1:49:60:EF:48
Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
Certificate issuer:       /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Certificate serial:       0277
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
Manifest number:          0272
Signing time:             Thu 23 Jul 2026 03:10:53 +0000
Manifest this update:     Thu 23 Jul 2026 03:10:53 +0000
Manifest next update:     Thu 30 Jul 2026 03:10:53 +0000
Files and hashes:         1: zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl (hash: dGQ7uH+YRELUftV84CxHAc7EJOKC9DokT5ETa0u9xik=)
                          2: 5DCF3814CA0E11ED9251861DC4F9AE02.roa (hash: w0oQeZggvbfthkL7cxUDIxqBwGev5s767WcKvkpmAZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:10:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
        Validity
            Not Before: Jul 23 03:10:53 2026 GMT
            Not After : Jul 30 03:10:53 2026 GMT
        Subject: CN=6a61863d-c036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:3b:74:ba:99:24:16:6a:bd:8f:01:2c:97:
                    5b:91:3c:ee:b5:b0:15:a8:c4:fc:a6:c1:58:5e:6f:
                    70:e3:21:25:2a:7a:1b:ea:b6:a4:53:be:9b:e4:05:
                    c2:99:80:e2:a9:02:c4:7b:2d:21:58:8a:a6:0b:4e:
                    be:7c:4f:3d:2b:79:76:e5:a0:9d:06:9c:8c:67:ce:
                    3f:6e:96:6d:60:7e:1a:4d:0b:1a:ea:92:da:7c:e7:
                    63:b6:66:4b:af:ff:40:51:46:65:69:fb:b8:ed:3c:
                    67:c0:21:6f:df:5f:0e:79:3a:88:38:1d:b3:d6:1f:
                    19:d9:f8:27:62:c5:79:56:3c:9d:d8:78:e5:a9:29:
                    63:00:cd:f7:df:bd:54:80:be:99:4a:4d:35:1f:13:
                    7c:d6:61:bc:31:5a:9b:f4:94:80:cc:90:02:16:fa:
                    f4:78:cb:46:12:57:43:85:2d:26:bf:21:c3:74:22:
                    4b:92:f2:c7:d5:be:19:95:29:09:84:8e:57:ce:31:
                    44:ee:8a:55:40:30:da:8f:04:ba:dd:c6:50:13:95:
                    58:57:75:ef:bf:64:cf:3f:35:c3:db:6e:ee:19:a3:
                    15:52:64:64:c5:43:ad:5e:b5:6a:33:4b:57:99:87:
                    a2:38:79:8e:be:56:75:4d:56:dc:d3:35:fa:f4:3e:
                    38:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E1:85:38:4B:F0:DC:68:A2:65:41:93:A9:1E:C4:C1:49:60:EF:48
            X509v3 Authority Key Identifier:
                keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:44:a3:1f:98:71:11:4a:60:67:27:78:3c:5a:ff:18:d0:c0:
         e4:c5:c5:d2:0a:03:18:7a:a3:42:b8:2d:3d:33:f5:7c:af:ed:
         ee:de:cc:a4:2a:50:8e:45:32:ef:1e:79:a8:06:6b:09:30:67:
         f3:1d:1f:fa:1e:8f:09:32:77:76:b2:7c:fa:3d:e2:c3:4a:00:
         2b:c6:f4:90:e8:93:d2:c4:75:d5:70:f1:00:ba:b3:d1:88:8f:
         2b:d5:a9:86:c4:a6:95:7d:39:23:58:ff:68:8c:d0:16:6a:6b:
         f2:5c:57:cd:5c:af:07:23:2b:a1:e6:14:56:ac:fc:f2:1e:bb:
         6e:aa:55:c4:2f:dc:c4:6d:f4:5c:37:6a:72:95:5a:79:be:fd:
         57:55:70:9b:ce:67:88:2b:37:c1:e4:22:84:4a:48:7d:17:18:
         98:57:7d:ac:e8:13:1d:b0:ea:0e:ca:cf:ac:10:af:8c:14:cd:
         08:a8:87:73:29:84:60:88:6e:31:67:b7:44:34:2b:ac:2c:e7:
         40:6c:59:85:e4:20:dd:66:f8:f1:13:6b:84:74:45:bf:12:5d:
         8e:49:26:cb:75:43:66:dd:51:4a:5e:6c:ab:44:2b:d4:b5:87:
         d4:f6:8a:f1:7e:60:e1:ce:08:f7:d2:3c:ff:cc:46:7d:56:39:
         65:ba:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:49:09 2026 by rpki-client