Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
File:                     zyFayRHKpSBlx-xKx5V4NTgr4-0.mft (raw, json)
Hash identifier:          g420t4wFHQ38YSAnv8jp/r4NzFLjHyCvqKSG4lZklB4=
Subject key identifier:   A1:D3:A7:D5:63:C6:3B:94:90:D1:8A:A6:A6:DC:73:D7:51:93:F4:22
Authority key identifier: CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED
Certificate issuer:       /CN=A91BF2DB/serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
Manifest number:          83
Signing time:             Thu 23 Jul 2026 09:32:20 +0000
Manifest this update:     Thu 23 Jul 2026 09:32:19 +0000
Manifest next update:     Thu 30 Jul 2026 09:32:19 +0000
Files and hashes:         1: zyFayRHKpSBlx-xKx5V4NTgr4-0.crl (hash: 1sGpF9pQNJEP3EP8vO/A9/02ms6dG+Hn5zANYUYdRPU=)
                          2: FD88540EF5E311F0AB8204204D6F56BC.roa (hash: 15B38ymuojJsU1lBlmAxw+iYaANkqD35wxiK+F+Bx6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl
                          rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF2DB, serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED
        Validity
            Not Before: Jul 23 09:32:19 2026 GMT
            Not After : Jul 30 09:32:19 2026 GMT
        Subject: CN=6a61dfa4-abb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f9:38:5f:c2:af:4d:03:e0:b1:4f:26:15:81:
                    d1:1c:c3:33:4f:0f:94:13:8f:ae:5a:47:66:32:56:
                    45:88:b5:0a:26:c1:c5:0d:16:6d:80:44:7c:59:e3:
                    16:fb:d0:5d:f2:86:72:cb:3c:1c:87:3d:b2:9e:d0:
                    aa:71:c4:12:cd:86:cc:4d:2f:e9:a0:58:33:ee:80:
                    d1:89:56:fa:93:f0:26:6e:1f:3b:02:ce:61:23:af:
                    7e:8d:2d:83:b5:1d:6a:0e:2c:06:3e:a1:66:c6:ec:
                    6d:7b:3b:e9:4c:1d:2a:cc:17:4b:a3:05:ee:02:c7:
                    b1:72:7a:cc:81:9d:58:5a:ff:9e:92:96:1e:f2:e5:
                    7e:cd:18:79:03:9c:45:1a:1c:2d:12:08:c2:ec:d4:
                    17:73:36:61:10:b3:60:5e:02:75:6c:a5:78:41:bc:
                    f9:7f:2d:ed:0f:a4:11:df:51:80:2f:02:0e:80:9b:
                    25:fc:8b:eb:d3:4e:ec:d8:44:74:8d:d4:5f:1d:4c:
                    b7:6a:77:04:87:0f:ea:cf:54:93:4c:6a:94:f5:7d:
                    11:66:82:d3:df:e1:c7:01:6f:84:dd:3c:d6:a2:b5:
                    f9:8a:a5:f4:40:bf:d6:a6:72:f9:5e:4e:80:f5:8b:
                    1a:57:94:3d:07:f3:5f:f6:22:f1:04:cf:f3:9d:99:
                    41:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D3:A7:D5:63:C6:3B:94:90:D1:8A:A6:A6:DC:73:D7:51:93:F4:22
            X509v3 Authority Key Identifier:
                keyid:CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:33:7f:15:cd:0e:08:4a:1b:44:f1:d5:e6:ad:b3:05:f7:aa:
         22:07:9d:c9:f4:d6:99:b6:9c:f5:89:b9:5f:03:92:35:b2:84:
         f5:37:79:9a:13:63:32:72:65:cf:04:98:39:d3:a3:91:cd:31:
         b8:38:75:c6:4f:f0:1e:94:c7:31:70:a0:8e:13:da:22:88:00:
         f8:35:31:48:e5:a5:61:6f:02:c4:35:79:a7:cb:b7:f5:14:8c:
         c7:d2:ba:22:09:9c:bd:f4:51:d1:ff:49:b6:64:14:21:25:8f:
         c6:31:83:cb:8c:0c:96:aa:80:d7:75:da:1a:3d:34:1d:64:56:
         40:cc:b1:ef:9b:6b:b8:7a:f8:4b:96:3a:89:62:e0:31:48:6d:
         85:41:45:c2:90:81:64:24:03:80:29:34:84:54:8b:10:3d:8c:
         db:a6:04:11:4d:3d:f6:e2:e4:e6:61:11:95:d6:cb:58:90:bd:
         07:0d:55:07:e0:c8:bd:96:b1:55:28:38:cb:24:68:9f:99:0f:
         34:51:30:09:bb:42:be:88:38:aa:95:8e:12:c8:5f:e2:57:d8:
         56:4f:fa:18:94:54:36:31:d9:c0:dc:8f:3f:a6:33:fd:36:cc:
         2a:02:fd:25:07:23:4b:2d:ce:01:1f:b0:7b:8a:42:8d:49:0a:
         e9:a4:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:16:45 2026 by rpki-client