Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
File:                     ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json)
Hash identifier:          r6qg7i+uCM+wsnaUyrt6LZNCi78OOeS3nLOD+jEFbaI=
Subject key identifier:   2B:E0:20:FF:A1:A4:5D:CB:39:13:24:01:F3:EC:B5:AE:0E:D9:13:54
Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5
Certificate issuer:       /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
Manifest number:          0156
Signing time:             Thu 23 Jul 2026 06:38:22 +0000
Manifest this update:     Thu 23 Jul 2026 06:38:22 +0000
Manifest next update:     Thu 30 Jul 2026 06:38:22 +0000
Files and hashes:         1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: 0pJXBZcPdcb8HENm6229jkgGcasUChJklZfYs2WQi2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl
                          rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5
        Validity
            Not Before: Jul 23 06:38:22 2026 GMT
            Not After : Jul 30 06:38:22 2026 GMT
        Subject: CN=6a61b6de-886d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:37:85:27:48:3e:40:10:91:21:81:4d:85:
                    ef:86:9c:ca:41:85:30:a2:fe:a9:0e:fe:2b:32:36:
                    d9:65:a2:e5:0c:38:ba:c0:fd:69:ce:27:b0:5f:34:
                    7e:75:7d:fa:8e:49:0c:e9:b5:09:04:19:29:25:d7:
                    8d:73:d3:40:44:5e:6a:60:ef:fb:fa:25:67:30:91:
                    2a:aa:ec:16:84:eb:31:ca:02:8b:59:8a:1e:5c:da:
                    f9:e1:52:ae:a9:f5:0c:9e:2f:d4:85:87:f6:24:e4:
                    39:1c:1b:79:6c:35:d1:4c:6f:8c:b7:d5:96:63:55:
                    84:78:b5:c2:6e:d5:4f:f1:11:ea:d4:6b:b8:5a:99:
                    a7:a8:e8:e5:91:f4:b4:3a:30:0e:b3:6a:b1:e1:ee:
                    58:be:ff:d8:e1:65:b2:40:a8:65:cf:5e:6e:b7:01:
                    3d:77:4b:f9:28:9e:ee:39:cf:80:f2:13:64:22:15:
                    48:87:19:dd:b1:00:79:07:50:c5:54:84:e9:60:b5:
                    e3:5e:2b:61:c2:cd:4d:14:c8:48:cc:c3:3c:e3:18:
                    5f:dd:65:8f:01:8d:c2:53:5f:cd:c7:6f:d3:84:2b:
                    bf:79:ab:15:71:a8:19:15:18:44:47:b2:9d:ed:5d:
                    33:6c:07:20:bc:2e:42:81:fb:84:44:81:d8:eb:30:
                    26:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E0:20:FF:A1:A4:5D:CB:39:13:24:01:F3:EC:B5:AE:0E:D9:13:54
            X509v3 Authority Key Identifier:
                keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c1:38:53:2b:64:28:59:3f:aa:a5:f4:c1:f4:a1:d2:be:a1:
         5f:6e:a0:48:fe:3d:6f:1d:f0:86:44:ba:ba:55:ac:6c:c6:2f:
         35:2b:af:fe:c2:d0:5e:f8:4c:34:f8:dd:48:4a:2c:3a:15:41:
         ef:ba:20:96:39:e1:ac:21:31:33:84:75:95:34:4e:36:4d:d1:
         57:14:61:7f:e0:b4:79:2a:49:c3:0f:6c:61:b4:15:ed:95:c6:
         2b:99:b5:a3:da:d6:e9:75:78:6a:79:ff:19:7d:e0:d9:2f:73:
         73:a2:47:82:36:12:f0:6c:aa:f2:04:b6:e3:70:ff:77:f3:0b:
         39:7e:19:85:08:da:1a:5f:71:54:24:3f:29:19:9f:6c:6f:5d:
         e1:20:86:c0:65:04:24:ac:87:73:ed:8e:ce:2f:13:47:1c:c6:
         24:8a:7d:15:55:4b:98:28:66:17:80:82:73:fc:80:60:a9:3e:
         d7:84:87:24:d1:1f:38:2c:98:78:7b:09:18:ba:d8:fc:54:b1:
         10:7d:e4:ba:0e:cd:6e:ef:58:43:78:48:4e:3e:ea:f0:97:91:
         43:ac:be:b9:b7:0d:d0:50:a6:8c:5b:d1:46:c4:1d:30:a9:4e:
         3e:54:90:01:38:c0:a0:cc:fa:55:29:b9:77:5c:e1:7b:8f:51:
         01:1f:f6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:02 2026 by rpki-client