Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
File:                     ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft (raw, json)
Hash identifier:          wCGiv7NRSIazQyFDt7E7aS4t49G9LuT31hvjP4V790c=
Subject key identifier:   0D:7E:3A:18:CC:BC:54:34:C0:D8:D1:5A:93:CD:80:CB:F0:35:83:1B
Authority key identifier: 64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61
Certificate issuer:       /CN=A91CE0FB/serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361
Certificate serial:       05A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
Manifest number:          05A0
Signing time:             Wed 22 Jul 2026 23:55:51 +0000
Manifest this update:     Wed 22 Jul 2026 23:55:50 +0000
Manifest next update:     Wed 29 Jul 2026 23:55:50 +0000
Files and hashes:         1: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl (hash: 5uRt65Qwat1QBhZ7idzf8DqftQ0z8OZz8NSGuFN3QFE=)
                          2: 47170244259D11ECA74AC10AC4F9AE02.roa (hash: TifDEeF2JOdL8j7fTV6ymoUhmjRmDa6hW57MtSf6qzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl
                          rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:55:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448 (0x5a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE0FB, serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361
        Validity
            Not Before: Jul 22 23:55:50 2026 GMT
            Not After : Jul 29 23:55:50 2026 GMT
        Subject: CN=6a615887-048b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:03:c6:5b:ed:fc:e0:e9:67:0c:86:43:27:
                    0e:43:50:32:b3:cb:04:a4:58:03:57:60:21:32:bc:
                    1c:ee:bc:b4:cd:e0:e1:e9:c8:68:f4:e0:e5:ad:55:
                    c8:23:85:0f:37:91:ab:e3:24:8a:b5:f4:a0:a5:25:
                    f7:51:22:82:fe:d8:0d:ac:62:43:20:94:81:c0:7c:
                    e1:b7:de:66:37:6e:c0:2d:33:31:55:f6:a1:f9:31:
                    0a:dc:45:5b:e2:82:f0:ba:24:16:df:60:19:4b:9a:
                    ea:ad:35:32:16:c5:11:bb:b4:26:ef:f4:d1:95:30:
                    0e:89:b4:eb:b1:d5:1e:80:0f:c8:3b:da:36:c0:2d:
                    77:3d:94:91:da:57:03:8b:db:8f:2f:d4:e2:dc:af:
                    86:4c:65:35:d6:91:39:4a:e6:97:e2:b1:0d:2c:81:
                    0c:7b:12:eb:d5:f3:01:8e:b3:55:14:81:2c:6b:d0:
                    e8:39:82:99:a9:b2:a7:10:5b:3b:3f:97:51:57:fe:
                    05:5a:99:77:35:d1:10:e7:f1:42:87:be:69:18:94:
                    17:90:90:90:ed:8b:f8:63:0c:ee:19:c7:bf:08:33:
                    6b:50:8d:e2:9e:ac:63:03:f9:6f:f9:a0:8f:98:f6:
                    76:7b:c6:7a:8d:35:73:3d:d4:f2:e7:72:4f:d7:c2:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7E:3A:18:CC:BC:54:34:C0:D8:D1:5A:93:CD:80:CB:F0:35:83:1B
            X509v3 Authority Key Identifier:
                keyid:64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b8:ee:a0:6c:f4:88:80:e1:fe:b4:6d:a5:d8:ae:e3:da:15:
         23:8a:c2:32:15:aa:79:27:3d:0a:b5:24:11:82:2f:f8:09:94:
         0f:b8:f8:c6:e9:a8:8e:7b:99:78:77:80:59:43:ae:60:dd:4c:
         54:35:98:2b:dc:df:ee:fa:03:8c:3a:7a:2a:a5:b7:85:54:7f:
         d0:05:b9:fc:bd:24:4d:00:37:40:ca:2d:9c:ce:26:8e:db:f2:
         56:94:cc:81:6f:f5:ad:05:fb:65:97:1e:71:c4:45:7f:24:88:
         c4:24:60:e8:c5:0c:f0:c6:f5:45:45:01:c8:a6:48:e4:76:ed:
         6d:43:a5:dc:36:25:70:3a:68:59:aa:72:7b:a3:b0:23:87:1d:
         4a:db:8d:cc:50:4e:68:67:00:d2:ef:9a:5b:e6:a7:04:ef:6e:
         06:9b:ee:c0:f5:f3:c7:48:1a:5c:31:a6:6a:0c:7f:c5:90:cc:
         fa:34:c4:29:5a:c5:af:2f:67:b0:68:01:2c:37:2d:a1:88:09:
         06:da:85:f7:2f:69:be:f0:76:39:f2:af:91:87:09:40:5c:ef:
         59:c5:6c:4b:88:d7:35:38:d0:37:2d:4c:1b:ae:7e:96:9f:ed:
         15:18:80:64:db:7f:aa:e3:87:7a:b8:4c:1c:8d:82:f5:ea:b7:
         df:a9:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:08 2026 by rpki-client