Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
File:                     cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json)
Hash identifier:          9zId5anMTfd0CVSTq0V2NYRjxLEvNqcUQpaTmqo192Q=
Subject key identifier:   35:C4:C4:24:5F:DB:FD:42:4D:B4:1E:ED:5C:88:78:5B:7A:A8:4E:C7
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Certificate issuer:       /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial:       0628
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
Manifest number:          05EA
Signing time:             Wed 22 Jul 2026 23:55:15 +0000
Manifest this update:     Wed 22 Jul 2026 23:55:15 +0000
Manifest next update:     Wed 29 Jul 2026 23:55:15 +0000
Files and hashes:         1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: eb6Rc4Eab/uYbzaj7XzK4n76geuIQjPJw5hvcXPpojs=)
                          2: C2D59C44559811F196E9B1D195833773.roa (hash: rPQ29Js0otbpC2kfjei1QmK5a7iDC6noRtlg8ljKwUg=)
                          3: B3110B8E5D6F11F181938A5ABF833773.roa (hash: 88VWidR+c8KxMwBLDiaixZqZwAYAjFYw2RjtohjUp1A=)
                          4: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: qDBbxutM6whAYRqUGL23M9IPWqduEyKAvV9efNJXIMw=)
                          5: C6EB59A8514811F18C98F063A3833773.roa (hash: +M6AGrSBwc8D2/Ub0BOuDHUMRKDibhdsw0NIJ/WIkdQ=)
                          6: 45A587CE540911F181B8BB5591833773.roa (hash: tHX02Ge/HSWD6wrR/8JkpM5CyXcYX10IE87OI0QCTUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
        Validity
            Not Before: Jul 22 23:55:15 2026 GMT
            Not After : Jul 29 23:55:15 2026 GMT
        Subject: CN=6a615863-ac9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:64:e7:ee:b5:9b:b4:94:10:a0:e1:b9:2c:
                    e5:98:03:f2:1c:e4:6f:1e:19:fb:05:ef:e1:d5:c6:
                    aa:42:28:43:dc:2e:fb:bb:a8:78:d1:2b:10:41:28:
                    f9:f2:b1:24:6a:0e:e3:b1:35:59:6f:d6:fb:4d:05:
                    40:69:66:37:fc:a1:5f:5f:c4:1a:46:73:af:9e:a1:
                    7a:d4:5f:a8:83:45:0c:a5:ac:ef:6c:2b:4c:42:c7:
                    20:5e:d0:33:e2:a9:75:9f:da:94:07:15:c3:d3:0c:
                    f2:c1:e6:68:c5:37:6b:7c:73:4a:09:11:a0:bf:89:
                    93:e1:05:38:80:bc:0d:f5:f8:6b:9b:bb:a5:be:6f:
                    3c:c4:c6:70:17:09:c4:e1:04:64:a1:bb:44:ab:9f:
                    7c:c8:4e:75:7e:64:d2:62:f7:51:fd:35:1c:48:60:
                    af:30:61:aa:56:a4:8b:65:d6:34:44:df:0a:a0:f3:
                    66:13:7c:54:bb:51:7d:d3:99:ed:2d:8e:a0:23:da:
                    eb:f1:77:c0:19:f0:45:67:76:ad:8a:0b:d5:a6:0f:
                    fc:e0:b4:51:fe:00:e1:4b:4a:88:bf:72:67:b5:49:
                    64:a3:12:ca:3e:19:55:0c:60:db:05:f2:45:95:df:
                    80:dc:ec:86:ea:18:83:5e:f5:81:66:50:3d:f6:ca:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C4:C4:24:5F:DB:FD:42:4D:B4:1E:ED:5C:88:78:5B:7A:A8:4E:C7
            X509v3 Authority Key Identifier:
                keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:17:41:9c:5b:af:35:55:b3:d1:b5:b0:c7:4e:9a:75:e0:ec:
         06:c4:26:d3:15:53:fa:20:eb:bf:b4:a1:df:8a:91:1f:7d:2f:
         f6:78:b2:c3:b5:24:37:5f:45:d9:0c:bb:fb:c6:79:58:d8:99:
         9c:68:47:df:40:4b:c3:a5:ff:27:cd:ce:f8:dc:76:87:52:68:
         ed:ee:9c:69:ca:d6:e4:21:24:7e:6a:63:d1:af:05:2d:b6:f0:
         b2:57:e7:9c:09:ef:06:48:d4:2d:48:02:73:e5:16:64:3a:68:
         36:3b:e7:07:57:d6:2a:a5:95:3c:70:c5:26:1c:42:6c:cb:20:
         21:76:db:42:66:12:68:e4:f6:64:ea:29:3d:22:27:69:3b:f0:
         eb:4a:14:b5:69:ce:9d:8c:55:64:90:cf:3d:8e:a6:e6:7b:d2:
         3c:ee:cb:4a:d7:96:3e:8e:ca:6e:c5:88:31:f9:df:fa:cd:d5:
         9e:8a:f5:76:29:25:23:3f:9d:5c:cd:70:27:a0:30:76:61:b4:
         cf:60:e1:72:d1:be:20:c4:71:1e:54:f4:0d:30:2d:4e:c9:f2:
         0e:60:7e:b1:cd:f5:b4:31:16:41:32:32:67:5d:d5:c6:24:fa:
         83:eb:8f:c3:7b:31:65:09:11:cc:8c:ec:b5:c2:18:e3:c6:27:
         a9:90:fd:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5
RkEwNjA4QTcwHhcNMjYwNzIyMjM1NTE1WhcNMjYwNzI5MjM1NTE1WjAYMRYwFAYD
VQQDEw02YTYxNTg2My1hYzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl2tk5+61m7SUEKDhuSzlmAPyHORvHhn7Be/h1caqQihD3C77u6h40SsQQSj5
8rEkag7jsTVZb9b7TQVAaWY3/KFfX8QaRnOvnqF61F+og0UMpazvbCtMQscgXtAz
4ql1n9qUBxXD0wzyweZoxTdrfHNKCRGgv4mT4QU4gLwN9fhrm7ulvm88xMZwFwnE
4QRkobtEq598yE51fmTSYvdR/TUcSGCvMGGqVqSLZdY0RN8KoPNmE3xUu1F905nt
LY6gI9rr8XfAGfBFZ3atigvVpg/84LRR/gDhS0qIv3JntUlkoxLKPhlVDGDbBfJF
ld+A3OyG6hiDXvWBZlA99spcnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXExCRf
2/1CTbQe7VyIeFt6qE7HMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx
RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3
cVpNX0tVUGNKcE9mb0dDS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoBdBnFuvNVWz0bWwx06adeDsBsQm0xVT+iDrv7Sh34qRH30v9niyw7UkN19F
2Qy7+8Z5WNiZnGhH30BLw6X/J83O+Nx2h1Jo7e6cacrW5CEkfmpj0a8FLbbwslfn
nAnvBkjULUgCc+UWZDpoNjvnB1fWKqWVPHDFJhxCbMsgIXbbQmYSaOT2ZOopPSIn
aTvw60oUtWnOnYxVZJDPPY6m5nvSPO7LSteWPo7KbsWIMfnf+s3Vnor1diklIz+d
XM1wJ6AwdmG0z2DhctG+IMRxHlT0DTAtTsnyDmB+sc31tDEWQTIyZ13VxiT6g+uP
w3sxZQkRzIzstcIY48YnqZD9KQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:28 2026 by rpki-client