Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
File:                     Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft (raw, json)
Hash identifier:          fDDGA1Ui6IYtb11I2sTz6VIaom0oJhvOA8pnNl50j/w=
Subject key identifier:   86:3A:AA:4C:49:15:B9:F5:78:17:1E:7F:C1:A6:8F:48:20:8B:45:8E
Authority key identifier: 66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B
Certificate issuer:       /CN=A91B391F/serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
Manifest number:          017A
Signing time:             Thu 23 Jul 2026 06:09:15 +0000
Manifest this update:     Thu 23 Jul 2026 06:09:15 +0000
Manifest next update:     Thu 30 Jul 2026 06:09:15 +0000
Files and hashes:         1: Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl (hash: 4wYEZFcxGX5WN0WbTr8rUF2BC+tYSL8caOEZoL+0Zcs=)
                          2: 5069A4E034B311F0B93A6228C4F9AE02.roa (hash: wogzPFrO6PioOLcaFojHXvQTNXcyldVbnRyjuhu4nbo=)
                          3: tj-txcV-bAmPaRAQDkybGIEMR4Y.asa (hash: fh/4haZ5zFyDqVIfSkskrDHWtTzBTH3wSd7vdCTuFsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl
                          rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B391F, serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B
        Validity
            Not Before: Jul 23 06:09:15 2026 GMT
            Not After : Jul 30 06:09:15 2026 GMT
        Subject: CN=6a61b00b-90ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a9:bd:ae:7b:d9:4f:ce:57:c1:fe:78:76:ae:
                    0a:04:74:fe:7f:e9:1b:2f:a6:59:47:c2:fb:3c:f3:
                    b4:39:b8:89:31:f8:f8:d7:8c:48:e6:ed:02:59:da:
                    99:c6:51:1a:6e:f5:fc:4e:94:f1:cd:35:4e:74:55:
                    3b:2d:33:92:9e:df:43:11:3b:0b:07:bd:dd:5e:20:
                    af:c1:8d:7f:32:e8:ee:76:38:b2:fe:33:20:11:56:
                    98:d4:1a:6b:f3:8e:c2:a0:b5:6d:26:57:18:f6:b2:
                    cc:3a:2b:ab:9c:66:a6:2e:09:9c:c0:7f:a1:29:10:
                    4e:a9:07:d3:f2:e2:7a:20:d1:39:31:4c:1d:ee:8d:
                    e4:63:c4:64:6a:eb:91:67:39:29:f1:a6:2d:85:9f:
                    a6:b4:d8:09:5d:f2:9e:d8:43:52:8e:94:16:a7:2a:
                    1d:33:e0:2f:e9:c7:74:ad:98:ff:9a:3e:cf:a4:63:
                    f0:ca:7f:fa:99:d3:da:f4:b2:e4:9b:6b:96:3f:41:
                    4c:7e:fe:71:bc:fe:e8:84:3a:af:a5:90:04:05:75:
                    be:33:c0:4b:be:2d:5f:18:22:f7:05:0e:0e:2d:ae:
                    b8:cd:f7:86:80:cd:e6:74:39:bb:f6:3c:fb:d3:1a:
                    e8:13:7c:64:d2:dc:26:1e:12:f5:4d:e4:ef:60:21:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3A:AA:4C:49:15:B9:F5:78:17:1E:7F:C1:A6:8F:48:20:8B:45:8E
            X509v3 Authority Key Identifier:
                keyid:66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f8:4e:40:be:2c:34:02:dc:0e:35:e1:e8:d0:78:9a:4d:39:
         ab:44:b2:fb:90:ae:bd:dd:42:eb:d3:5c:a3:bb:0e:86:ef:c1:
         b3:c6:ab:a8:19:79:0a:f1:13:8d:3e:82:2b:5f:30:23:53:2d:
         c0:ab:36:bc:22:62:66:f6:e2:4e:e3:71:71:f6:06:bc:f7:40:
         75:9f:76:8c:1a:07:f6:97:a7:a3:3b:47:e2:39:94:34:13:e0:
         a4:a9:5c:34:6e:dc:4f:b7:35:6b:1d:e3:58:41:ec:84:47:77:
         2a:7b:a0:7f:40:c4:42:13:96:02:36:79:e0:c9:5c:ff:d4:df:
         1a:78:ee:48:6a:f6:9f:0b:29:1b:aa:7b:c7:18:26:6f:23:9d:
         55:e8:a3:e5:42:00:6d:06:c5:b9:aa:07:88:05:f3:a8:4c:e2:
         b8:ab:3f:73:2b:52:2d:db:26:18:8b:ee:e5:94:39:86:f4:ea:
         9e:a5:5c:4f:38:ef:9f:22:fe:ab:2e:c6:5e:34:c8:5a:83:ef:
         30:d5:15:b2:0e:92:fb:4e:33:11:f9:dd:17:7a:90:8e:b5:12:
         ed:9d:40:c5:98:dd:8f:97:e7:a5:37:9d:17:a1:88:ca:0a:41:
         3e:57:48:4a:5e:85:c9:fe:42:d4:06:87:49:13:a7:7c:65:b4:
         55:b0:b6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:22 2026 by rpki-client