Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
File:                     ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json)
Hash identifier:          6/zbTbInBTwy+LU5hQgPUsIpBdVv+nqIOVeebyszuT0=
Subject key identifier:   9D:80:3D:97:DF:CF:DC:B4:A6:25:88:85:13:4C:C6:D8:81:FD:18:8D
Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
Certificate issuer:       /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Certificate serial:       015F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
Manifest number:          014F
Signing time:             Thu 23 Jul 2026 06:48:19 +0000
Manifest this update:     Thu 23 Jul 2026 06:48:18 +0000
Manifest next update:     Thu 30 Jul 2026 06:48:18 +0000
Files and hashes:         1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: cMw1DRT3cF+jVdF4RsBA5bIbsxFad5TKdnmdULpMMwk=)
                          2: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: XAAQs6VvWW3MlpS05j2NWzqBVUmAKDnHpobUBOoE4/o=)
                          3: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: A7rSSZVeM5zH7Lu6nq0wtI2MJAwPFWQR7zTSTecfo9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
                          rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
        Validity
            Not Before: Jul 23 06:48:18 2026 GMT
            Not After : Jul 30 06:48:18 2026 GMT
        Subject: CN=6a61b933-a28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:85:1c:98:21:08:09:0e:a2:57:bb:c2:31:
                    dd:cc:6a:fd:6c:6b:69:09:68:e5:d2:0a:fa:5b:01:
                    a3:fa:4a:dd:b6:36:bc:24:e1:1f:5e:18:62:22:57:
                    b2:12:a9:a1:ca:6a:13:0d:f0:72:6e:17:c7:6a:8f:
                    1d:bf:e3:6d:5b:0b:66:c0:de:a5:2d:68:c7:d7:4b:
                    dd:cb:52:95:78:ce:ac:89:9c:71:b0:5d:6f:9e:89:
                    6c:e1:b7:25:a2:95:5e:94:1e:ac:13:9d:f3:d4:fb:
                    2e:a8:dd:40:63:2e:63:e3:ff:f8:bb:91:e2:97:fd:
                    50:ae:c0:e1:8c:0f:fd:aa:dd:46:b0:63:25:d7:6e:
                    f6:c2:57:6c:a4:17:ea:ef:8f:3f:84:83:33:22:f9:
                    cc:56:d3:79:ef:9b:6f:de:9b:94:6a:b6:8c:b2:75:
                    91:83:f8:48:e0:17:1d:ec:be:35:52:53:d4:b9:d2:
                    b8:a0:9e:ca:74:66:19:cd:c8:7f:a2:68:bf:ad:09:
                    20:2e:5e:38:61:6c:60:b5:0d:a7:73:a6:ed:6b:77:
                    a9:9d:66:2b:be:1b:9e:4a:d4:a0:d3:93:4e:3f:35:
                    92:f3:a7:95:4f:39:36:f9:9b:0c:7a:42:df:52:23:
                    5e:67:ed:bc:64:6b:c3:65:a1:82:05:7a:1f:6a:fe:
                    2e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:80:3D:97:DF:CF:DC:B4:A6:25:88:85:13:4C:C6:D8:81:FD:18:8D
            X509v3 Authority Key Identifier:
                keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a9:df:4a:75:d8:fb:42:df:7c:84:a5:4a:26:ec:45:05:b1:
         0b:0c:ef:ac:bd:0a:d1:62:94:54:85:9e:43:a0:50:6f:0c:0c:
         57:90:1d:e4:10:1b:6c:76:09:85:3d:6e:a6:91:e5:ed:7b:08:
         96:3a:11:4a:d8:7a:fb:b1:d2:1c:de:31:a8:84:a3:c5:03:d2:
         65:33:15:69:15:b3:f6:af:d3:8f:f7:82:36:69:d0:eb:b0:54:
         41:63:bb:15:38:6b:2d:f6:82:2c:3f:b3:b1:fb:94:98:63:76:
         49:1c:24:be:b5:70:a2:a5:43:14:e5:47:6b:a2:55:30:6d:4b:
         00:60:d2:47:f6:7e:81:44:ff:bd:00:70:39:f2:43:4b:db:de:
         f1:cb:fd:c7:fc:11:39:8a:1f:11:06:cd:38:37:83:60:f2:05:
         66:84:f1:10:3f:55:6a:b9:15:78:db:5a:5d:80:df:a7:47:9f:
         54:4e:98:20:b3:ee:78:53:5a:4a:43:94:c5:ee:69:f3:75:e4:
         e0:5c:16:9e:72:6d:8a:ee:ef:71:4f:71:1b:02:df:c2:a7:ea:
         c8:fc:fd:2a:18:9b:ab:96:38:99:8e:7a:a4:f3:9f:8d:ce:c2:
         ff:fd:aa:e6:5c:a8:32:fa:35:b5:fb:6e:c3:ea:63:79:87:8c:
         f3:85:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:37 2026 by rpki-client