Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
File:                     ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json)
Hash identifier:          vUsLSLfdKEvLqd4/ZbWZ7MCtkYify/2sL9/MSUgeRWk=
Subject key identifier:   CC:60:99:F9:EC:32:86:67:5D:04:DD:86:66:F4:0A:1D:76:6B:F2:D7
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Certificate issuer:       /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
Manifest number:          0133
Signing time:             Thu 23 Jul 2026 07:37:16 +0000
Manifest this update:     Thu 23 Jul 2026 07:37:16 +0000
Manifest next update:     Thu 30 Jul 2026 07:37:16 +0000
Files and hashes:         1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: JYo3HEmyVCj8G4AfMeiRDGcrsEF6sItkYJwK1I+TxSU=)
                          2: 9CA293D4580D11F180B976959F833773.roa (hash: ONaoAg3ne8zQW7Hrh4OQo3YPR+3Q7AFS+MZZLnbL8D8=)
                          3: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: PRVzq//uzMGZ8IiaKeDZIuoo5BorBUfI/nvh7f2OTz8=)
                          4: C19CD0D273CE11F18A0A8E6E86A30FBC.roa (hash: TyifwyRH2gwoNGS3cDGiNTSYF0ll70y1X64BGJ83VbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
                          rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:37:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
        Validity
            Not Before: Jul 23 07:37:16 2026 GMT
            Not After : Jul 30 07:37:16 2026 GMT
        Subject: CN=6a61c4ac-2f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ef:09:6b:85:ec:42:fe:7b:72:ba:b4:24:f1:
                    98:27:fe:e1:f1:ef:77:3f:3f:4e:70:54:5b:cc:35:
                    d6:59:5a:26:ec:cb:57:d1:34:43:3f:74:b9:0a:4e:
                    05:2c:08:e5:00:7b:82:1c:ce:41:ba:13:9e:60:c3:
                    0a:7f:10:3e:f3:84:0f:c2:8d:28:aa:e5:8d:4b:a7:
                    c3:a2:e1:03:b3:73:d9:3c:57:bb:62:e9:7d:27:49:
                    db:2b:ca:06:a9:22:97:e0:2d:59:1d:d6:a5:8f:fb:
                    09:e1:a0:31:7b:b1:32:23:25:4f:b0:06:c4:3c:ac:
                    a4:e1:b8:25:ec:70:ce:44:05:d5:2a:65:b8:dc:c5:
                    55:0b:2f:5e:61:13:37:14:a7:47:7f:d3:a3:a9:4b:
                    8f:bc:e8:75:94:c8:5e:13:56:e2:53:54:53:0f:54:
                    6e:84:aa:99:11:96:c1:75:1d:ca:bb:c9:6d:32:bb:
                    4c:ed:10:70:89:65:0d:92:fb:c3:16:59:ef:0c:16:
                    be:3a:1f:19:91:85:be:d7:cd:86:64:fb:30:01:13:
                    cc:ca:e1:44:e7:3f:e5:aa:57:1a:9b:1a:d4:9e:c3:
                    5d:57:92:73:c2:49:57:99:e6:61:53:76:ab:46:f6:
                    3e:50:b5:ae:21:a5:0b:cc:e3:b5:27:2b:f9:90:98:
                    a5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:60:99:F9:EC:32:86:67:5D:04:DD:86:66:F4:0A:1D:76:6B:F2:D7
            X509v3 Authority Key Identifier:
                keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:04:3c:da:56:d8:2f:60:e5:f3:7f:40:b2:59:4c:a6:e5:fa:
         d5:c5:8d:17:c7:80:46:43:21:e1:e5:fe:64:8b:bb:af:47:46:
         9e:66:04:4c:94:fa:84:06:da:61:95:01:a5:6b:7c:e6:e9:bc:
         fb:00:38:d3:9d:e0:6e:b1:14:eb:cd:f3:6b:02:29:5e:a9:6d:
         b7:7b:43:0f:34:35:8f:88:ad:a9:e6:67:f2:f5:9e:31:af:72:
         fd:09:80:8a:e0:a9:19:22:72:91:cc:7f:ea:46:03:95:b7:31:
         ad:c6:ab:30:0d:15:80:fd:55:5e:89:18:26:d0:5b:d2:83:01:
         02:0f:26:e0:cf:95:db:b7:7a:1b:c9:21:e4:7f:3d:82:ac:cd:
         ba:42:df:f9:4c:2b:80:22:77:f2:55:69:ba:ac:3c:62:5e:5e:
         34:7b:b1:7d:0b:29:b1:9d:fb:8a:e8:d3:a1:75:23:ea:53:54:
         e6:1e:5e:5d:d9:62:dd:bf:70:c0:be:83:b9:f9:2f:63:7e:56:
         74:66:ca:00:2c:98:a8:93:d4:07:c4:f3:2c:a4:f2:98:c0:80:
         f6:85:98:be:ee:de:bc:be:05:a2:6a:0d:9a:fd:b6:39:90:98:
         ae:40:2b:0b:e6:88:52:28:22:17:9e:e1:55:e8:2f:d2:f2:6b:
         88:be:9b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:28:23 2026 by rpki-client