Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
File:                     bzPCWtM2F4RBLEKweYYz0Dslvso.mft (raw, json)
Hash identifier:          FSCCNBRVDdxSmUtU5HNydyniAu0o903XiUH/hpeFBvY=
Subject key identifier:   7F:D2:47:B5:A6:C2:B1:B4:BB:87:D9:89:F9:40:F7:42:2D:94:10:2B
Authority key identifier: 6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
Certificate issuer:       /CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Certificate serial:       1010
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
Manifest number:          1005
Signing time:             Wed 22 Jul 2026 17:37:32 +0000
Manifest this update:     Wed 22 Jul 2026 17:37:32 +0000
Manifest next update:     Wed 29 Jul 2026 17:37:32 +0000
Files and hashes:         1: bzPCWtM2F4RBLEKweYYz0Dslvso.crl (hash: IufYjncHsgFPSc+X52nbY7iRtBaxUK0MZzxBDcnJHNo=)
                          2: 62C1F5587ACD11E9AC0A867BC4F9AE02.roa (hash: +Mts4fsvfNPpR9wN95HnMuPMq0NdCSXUy9GV9X1mECY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
                          rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4112 (0x1010)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB027, serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
        Validity
            Not Before: Jul 22 17:37:32 2026 GMT
            Not After : Jul 29 17:37:32 2026 GMT
        Subject: CN=6a60ffdc-b9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:98:b0:56:65:81:e0:1a:de:92:3f:21:af:e7:
                    1c:8c:69:fa:0e:2f:32:b1:68:84:ea:e9:00:5a:9f:
                    10:6f:b0:c1:c3:8b:5b:e6:43:64:8e:6c:0d:3e:38:
                    43:4f:5b:c7:b3:35:f2:d1:be:c9:51:e4:23:8e:5a:
                    c8:3d:6a:be:cf:66:58:b7:a0:3a:97:41:ac:06:58:
                    46:4f:d7:fb:19:40:28:42:42:c9:b1:97:26:2a:fe:
                    bb:1d:6a:6c:18:32:fe:4d:40:4c:83:c1:a8:d8:ae:
                    00:f2:53:49:dc:fc:05:9c:d8:ec:b1:0a:32:0e:ba:
                    94:4f:92:98:84:c3:f2:81:f7:72:f9:a3:3d:8a:f6:
                    8f:95:44:26:fc:5e:cc:b1:d4:15:34:f0:04:ba:81:
                    29:1a:2a:2f:d6:fc:bb:06:f7:de:5d:97:64:0d:23:
                    fd:5d:73:d1:2b:3b:60:7e:c7:ae:5f:22:c9:e0:13:
                    0c:a7:0f:5b:c7:42:6e:c4:60:6a:3e:8d:b4:eb:26:
                    69:68:fe:52:d6:e1:01:63:8c:a1:f5:da:a0:7b:27:
                    b2:58:fc:29:88:60:63:ca:41:0e:a9:54:4e:da:95:
                    83:36:99:d3:95:5d:cc:b1:85:71:f0:d1:dd:ca:26:
                    33:c6:7a:c5:e3:f3:03:ae:8f:40:f7:27:2d:ad:7e:
                    b6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D2:47:B5:A6:C2:B1:B4:BB:87:D9:89:F9:40:F7:42:2D:94:10:2B
            X509v3 Authority Key Identifier:
                keyid:6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:93:18:18:d1:5f:38:a9:35:ac:cf:2b:18:2f:4b:75:5f:b4:
         a1:3f:2c:d7:21:ae:34:8c:ce:dd:6b:a3:a2:c5:8d:05:01:fd:
         51:62:88:ca:26:e5:f3:bd:c2:b0:f4:b2:54:52:75:4b:f3:e5:
         95:40:4a:3f:c8:58:08:cf:b0:69:09:dc:6d:e4:f0:a3:ba:a5:
         97:2d:0a:f1:a6:cc:0d:28:52:86:6f:29:6d:40:d4:20:d9:b4:
         e0:96:ae:3d:a3:01:64:60:33:3d:5e:b4:0b:e2:9a:dd:cb:20:
         ce:aa:a6:d5:dd:cd:5b:e5:74:44:9f:b4:85:66:19:43:39:4e:
         67:d4:ad:24:f4:23:05:7c:91:47:6c:96:19:ed:e9:b7:b7:eb:
         75:9e:f2:98:e9:5e:0e:5f:1e:8c:05:0b:c2:ec:39:73:d5:55:
         f1:20:84:d8:68:b5:e0:e5:63:a2:5b:1e:45:f1:e7:5a:a3:87:
         a0:2f:8a:ca:ed:d9:be:f7:e4:00:a0:a2:09:87:c1:b1:5b:ed:
         5e:c8:40:2d:be:5a:2c:1c:36:db:22:05:bb:b3:3a:1c:96:24:
         11:f9:76:93:37:b3:1b:5b:fb:24:09:1e:26:e8:6c:bf:e8:86:
         dc:bc:05:55:13:2b:f2:3d:00:ad:a3:bb:8e:4f:84:8a:90:66:
         9c:8a:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:43:17 2026 by rpki-client