Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
File:                     RZTy7BffVsPQZUDzZtKvEYsxfx4.mft (raw, json)
Hash identifier:          B8+5PK6O2QIf4DQWHqYfaLeJdZwocU0cd63Bgr7dJMU=
Subject key identifier:   A9:8C:F6:F8:3B:2A:B3:B0:0A:A6:F4:27:15:8C:BD:95:DE:C2:0B:D4
Authority key identifier: 45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E
Certificate issuer:       /CN=A91CE978/serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
Manifest number:          01DE
Signing time:             Wed 22 Jul 2026 14:54:44 +0000
Manifest this update:     Wed 22 Jul 2026 14:54:44 +0000
Manifest next update:     Wed 29 Jul 2026 14:54:44 +0000
Files and hashes:         1: RZTy7BffVsPQZUDzZtKvEYsxfx4.crl (hash: duwPrFR5mC+nuhBFzXzek8Ufj9JBBcxOc0+wG8WP6Qc=)
                          2: 30EAE110B9AD11EE83063243C4F9AE02.roa (hash: QreKN0Rd5UfNyWwEd5SMYjaTfZ6J0wKhOlda79WX3co=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:54:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE978, serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
        Validity
            Not Before: Jul 22 14:54:44 2026 GMT
            Not After : Jul 29 14:54:44 2026 GMT
        Subject: CN=6a60d9b4-ff66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:de:ed:8e:d2:e1:ee:95:40:ae:96:12:af:
                    ef:4d:fd:a1:b8:5a:c0:e3:c4:87:6e:ec:34:89:f9:
                    16:f2:05:94:99:4c:c2:ef:30:31:d9:15:11:74:9f:
                    6b:46:cf:30:ef:c3:18:7f:ad:b3:de:b0:be:37:56:
                    d7:a2:52:4b:21:9d:1f:f6:09:f2:1c:35:43:6e:0f:
                    c9:81:90:48:c4:97:f6:1a:58:54:2f:86:68:58:ad:
                    05:a3:7a:00:06:03:c7:ac:df:04:54:f6:bc:96:33:
                    f2:72:16:3b:8c:3b:04:44:8c:a9:0a:73:1e:3d:66:
                    2b:29:3c:b6:c0:f0:a9:d2:67:83:49:28:c2:7f:b1:
                    4f:a5:b8:60:b4:41:15:41:81:a8:25:85:38:d0:ba:
                    83:16:38:a6:5c:1d:a0:63:be:37:f6:e9:23:3f:5f:
                    24:43:37:1b:ef:9b:74:5d:e4:97:89:9b:34:c6:42:
                    b1:4e:67:8f:fd:ec:f0:68:d3:64:a9:86:ed:c6:ad:
                    48:db:1a:d9:87:b9:fe:b7:f1:75:e5:2f:c9:88:d7:
                    c8:cf:21:e6:de:7d:d1:7c:20:d4:c7:e3:79:ce:54:
                    81:f9:b5:b3:56:08:22:c5:76:37:c9:7f:30:db:c7:
                    4c:a0:1b:5e:57:ed:f3:0a:67:c2:75:21:98:1a:ec:
                    94:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8C:F6:F8:3B:2A:B3:B0:0A:A6:F4:27:15:8C:BD:95:DE:C2:0B:D4
            X509v3 Authority Key Identifier:
                keyid:45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:17:c6:69:7d:53:b3:00:83:11:ba:dc:d8:d1:f1:71:29:c6:
         8d:93:34:d5:4d:89:23:8a:d3:71:33:e7:a2:f3:08:20:98:75:
         d5:23:58:87:97:d4:da:98:56:b0:b3:c9:36:69:1f:37:dd:72:
         dc:8d:c0:76:ed:ec:21:31:1a:aa:13:f2:0e:4a:05:42:16:72:
         f1:a7:99:0d:75:fa:be:ba:07:2f:b6:00:9b:e1:a4:c1:b6:c5:
         71:6f:c5:64:a7:cb:9d:9e:18:53:36:eb:c4:33:df:64:fd:ab:
         e3:50:69:97:0c:43:c4:88:db:59:bb:35:57:a3:1c:58:c7:41:
         ad:f3:e3:c8:4a:7a:47:f7:b5:0a:90:57:8e:65:91:e7:28:90:
         6e:bf:34:50:8a:c6:58:ee:35:d5:02:09:c4:47:08:77:c1:61:
         0f:08:24:75:95:b7:af:96:74:56:cf:6b:3a:a9:72:f7:73:0b:
         73:15:73:2d:68:ce:86:7a:b7:98:39:52:39:fd:ea:56:46:fe:
         16:c3:4d:3f:20:1f:28:75:67:14:ee:2d:8a:25:02:3c:21:b1:
         3b:e9:94:fb:9b:6c:af:fb:8d:f3:04:6b:46:a1:25:cb:0e:49:
         c8:92:c0:c6:f6:64:30:45:e6:c8:8d:5d:0c:f3:65:59:d8:cb:
         ea:e7:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:56 2026 by rpki-client