Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft
File:                     Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft (raw, json)
Hash identifier:          MQCcKl3ole9sbPnyFY+gR0vbM/n45nRadXBlTWaOd5Q=
Subject key identifier:   E1:E9:D8:BF:49:88:45:4C:E9:8D:24:72:DA:52:78:13:76:B6:B1:72
Authority key identifier: 33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49
Certificate issuer:       /CN=A91CC473/serialNumber=33377A115FE52E91CD6121971985A003BB3BA449
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft
Manifest number:          64
Signing time:             Thu 23 Jul 2026 10:05:55 +0000
Manifest this update:     Thu 23 Jul 2026 10:05:54 +0000
Manifest next update:     Thu 30 Jul 2026 10:05:54 +0000
Files and hashes:         1: Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl (hash: N08mx2NvyuHs/sWbjdR3XP3LzoBTysY+3RbMTjErqUE=)
                          2: 511F1EDCFC0511F081195104746F56BC.roa (hash: nuEm/nImsWX8e2aMNTAfOV22vEEsr1OrR90OJJJ/kIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl
                          rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC473, serialNumber=33377A115FE52E91CD6121971985A003BB3BA449
        Validity
            Not Before: Jul 23 10:05:54 2026 GMT
            Not After : Jul 30 10:05:54 2026 GMT
        Subject: CN=6a61e783-36a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:78:2a:83:d9:c7:cd:8c:e2:d8:90:44:8e:
                    92:e6:fe:f4:3d:4f:6f:27:4f:e0:c0:5a:71:2a:34:
                    9b:f2:ea:c1:34:65:32:e4:2b:8c:fb:02:c3:90:11:
                    e7:1f:38:9f:0d:5f:29:a3:69:5a:26:05:0a:b0:65:
                    31:74:73:c6:78:73:2f:aa:30:16:55:fa:fa:25:3b:
                    81:5d:d0:f7:67:ce:e1:83:87:71:3a:14:1c:15:f2:
                    40:5d:56:e9:43:c5:95:2c:3d:cf:e5:f6:f6:ce:dc:
                    0a:17:5c:44:81:b4:52:cc:a6:25:b6:5b:49:ff:eb:
                    f8:8a:7a:46:af:ec:1e:36:11:9e:52:84:56:45:3d:
                    77:2b:d1:8f:ef:c4:27:c0:54:20:f4:6b:fc:82:0c:
                    e0:16:e3:ec:4d:23:23:26:dc:86:02:60:b5:48:aa:
                    40:06:8f:7c:72:af:b9:40:a1:d5:fc:ab:5e:ac:b0:
                    ac:e8:25:02:61:3f:e9:8e:a9:18:bd:8a:61:d0:de:
                    4a:7b:8e:3b:72:16:f4:9c:5d:7b:9b:15:c6:18:74:
                    6a:e7:7e:d3:20:2d:8f:cb:e7:02:5d:66:5d:06:90:
                    f9:ca:be:6d:30:0a:ca:3b:3c:5c:fd:79:d0:6f:81:
                    62:f9:65:59:da:b8:6a:d9:28:79:86:da:39:10:4d:
                    cb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E9:D8:BF:49:88:45:4C:E9:8D:24:72:DA:52:78:13:76:B6:B1:72
            X509v3 Authority Key Identifier:
                keyid:33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:f0:3b:1c:8e:28:b4:ce:81:86:5e:49:35:3f:35:df:9d:
         e2:75:6d:60:81:df:09:04:b0:82:c3:71:36:6f:9f:3b:0a:18:
         08:26:21:0e:83:67:ea:7e:a8:6e:c4:c5:5f:59:c9:1e:b3:1f:
         8a:64:34:1d:76:e9:05:47:76:a6:a3:03:9f:0a:f9:6e:a5:b6:
         f1:10:3a:14:6a:54:58:18:8e:46:f9:2f:38:82:bc:ac:0d:dd:
         8c:c6:a4:56:ea:5a:f2:7b:75:47:70:91:0f:fe:8d:36:19:e6:
         37:41:32:82:6d:eb:c7:a6:48:f9:73:f4:79:f0:c0:f5:a5:fc:
         67:da:fa:6e:53:38:24:f9:d8:6d:a9:dd:b9:a0:47:fd:ae:f6:
         c7:85:85:4a:ab:90:1e:5a:94:55:5f:8b:38:4e:40:9c:fe:c8:
         95:46:b2:f4:f6:44:cf:c0:4a:4f:1a:ef:77:3a:8b:dd:f8:53:
         d6:d7:8e:cc:53:43:39:f5:ff:ee:46:12:37:77:a5:a4:72:99:
         d3:3d:9c:f8:c1:48:8d:49:7c:be:b5:c1:0b:ca:9d:d8:83:14:
         5a:d8:93:d1:a3:0b:c1:31:e8:aa:1d:b2:50:67:25:f0:0f:ec:
         4a:2f:17:f5:49:47:f2:01:c3:33:f2:08:80:c3:82:f8:6a:4d:
         78:3d:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:23:25 2026 by rpki-client