Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
File:                     zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft (raw, json)
Hash identifier:          LMFtj9KDno/nm+da2vCvfA7AXTXWKS7xVMaq5b5DzOk=
Subject key identifier:   2E:0B:D2:0A:83:ED:16:70:1B:7B:0B:5D:22:28:B8:62:0C:B8:2A:57
Authority key identifier: CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B
Certificate issuer:       /CN=A91DFA25/serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
Manifest number:          73
Signing time:             Thu 23 Jul 2026 09:51:03 +0000
Manifest this update:     Thu 23 Jul 2026 09:51:02 +0000
Manifest next update:     Thu 30 Jul 2026 09:51:02 +0000
Files and hashes:         1: zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl (hash: 5V+j8/UnhKXf3T+aOd9OuC4+k4V6hfo5GtGgcsoFPzM=)
                          2: 9E283D22E07A11F0AD28F7913A6F56BC.roa (hash: zM/gqOyVFktPoDA/WeuwpVQb7+CuTjfIizkBCA5c5Lg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl
                          rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFA25, serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B
        Validity
            Not Before: Jul 23 09:51:02 2026 GMT
            Not After : Jul 30 09:51:02 2026 GMT
        Subject: CN=6a61e406-b296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:b2:f2:ef:dc:20:8c:3c:16:fa:0e:01:f5:
                    77:bc:da:52:ff:81:d2:6a:3d:b3:36:05:c1:a7:b8:
                    07:5d:74:03:95:05:2f:91:71:b3:e1:2a:df:ee:39:
                    e0:62:ea:75:48:a3:77:2a:15:9a:8a:e7:a8:0e:69:
                    42:de:12:88:8a:d0:63:d3:8a:4c:6f:24:0c:77:34:
                    c4:d9:36:0d:23:30:fc:ad:22:fb:86:a0:da:29:81:
                    fd:c7:e1:1d:73:2c:2a:06:b4:c4:57:d8:20:6d:02:
                    e7:42:5c:db:3a:eb:5a:0d:4e:d7:b2:09:6f:70:83:
                    1c:02:96:5f:6f:2e:1a:0f:e4:9f:1b:e1:0a:23:43:
                    88:c2:f2:10:0a:a3:94:59:65:ed:a1:ae:0f:d2:a2:
                    4f:17:d9:53:4b:4c:f4:58:2f:0c:97:f9:ec:17:43:
                    5e:35:6e:93:fd:f1:6a:bb:c4:f9:7c:03:70:4d:d5:
                    c5:ac:77:88:c6:f2:e9:3d:98:5c:8e:bf:50:e5:6a:
                    03:ec:37:f7:e6:11:ce:7c:fd:bc:49:f2:dd:04:a5:
                    a8:4e:70:7c:34:6a:ad:8f:b4:b2:e8:0f:3f:04:0d:
                    7e:9b:78:fd:25:81:5c:7a:23:9e:72:db:a1:f8:c6:
                    53:34:25:6d:34:c3:f9:88:8a:b6:57:95:d9:a0:1d:
                    0b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0B:D2:0A:83:ED:16:70:1B:7B:0B:5D:22:28:B8:62:0C:B8:2A:57
            X509v3 Authority Key Identifier:
                keyid:CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:5d:c6:27:d8:16:6b:99:8b:bf:dd:c9:b2:67:c2:3b:1c:d6:
         e2:e1:3d:16:bc:8f:b0:f1:bf:2d:9a:af:54:8c:b7:d5:80:49:
         6c:6e:5a:ae:1f:f8:38:2a:d5:a7:85:84:a6:0e:ac:71:26:78:
         e5:f8:b4:3d:ff:73:dd:8a:97:21:99:1e:92:5a:0e:a9:73:65:
         12:cc:b2:7c:88:ed:6d:fd:eb:8b:8e:15:86:5c:db:ed:bb:a6:
         e7:46:6b:52:7d:94:b3:17:04:4b:a7:cd:a0:54:b1:1a:84:67:
         f8:43:55:61:df:c0:73:74:f2:93:f3:b9:89:30:38:ae:e3:10:
         5c:79:f6:16:ea:9d:90:18:23:f7:32:4f:96:18:1a:03:82:c8:
         80:25:a2:5f:8d:8d:86:af:12:2d:c6:f5:8c:2d:76:f1:82:a5:
         c5:32:b4:8e:6b:ce:18:70:43:e2:9a:de:b6:0a:f3:21:53:89:
         8d:e8:6d:92:25:a7:c8:43:e1:1f:ee:f6:4d:3e:16:cb:f7:54:
         7e:0a:b5:4e:80:f4:ed:b2:37:29:84:dc:8c:79:fa:3a:59:cb:
         80:a9:12:f2:6c:b0:59:f9:da:3a:b7:8e:fd:73:fa:0b:53:22:
         4f:77:7b:97:23:9e:b0:79:17:31:a8:63:4c:24:7f:b1:b9:c2:
         cf:81:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:22:21 2026 by rpki-client