Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
File:                     ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft (raw, json)
Hash identifier:          ZAlaXDpRgcV5h0w/s147ASMc67tEjD+koRqtiRfSnT8=
Subject key identifier:   43:B9:0A:5A:D1:50:26:26:B4:74:14:69:A6:6F:6D:6C:E1:A1:3C:93
Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA
Certificate issuer:       /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
Manifest number:          09ED
Signing time:             Wed 22 Jul 2026 20:35:17 +0000
Manifest this update:     Wed 22 Jul 2026 20:35:16 +0000
Manifest next update:     Wed 29 Jul 2026 20:35:16 +0000
Files and hashes:         1: ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl (hash: jJDR7Pjr3/wGMgyb9P36tc7c7Wq7tpPGmxOI7SMhN18=)
                          2: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (hash: 5RbDYlZaIKQenAR20w6lc3nfzj9SDGCtSWGXdzXfTX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl
                          rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
        Validity
            Not Before: Jul 22 20:35:16 2026 GMT
            Not After : Jul 29 20:35:16 2026 GMT
        Subject: CN=6a612984-fffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0c:d4:e9:06:bb:7b:e2:4a:f7:11:59:75:74:
                    6a:8a:0b:43:3d:ae:2a:a3:5c:f2:6a:c6:7b:90:1c:
                    3c:9b:82:ae:d6:51:7c:60:9f:55:75:bc:ff:57:18:
                    7e:5d:db:6c:2b:c8:0c:d1:6d:61:9b:24:59:2a:a6:
                    ee:59:b4:3d:42:7b:96:2f:df:4a:de:09:d8:d4:40:
                    a9:fd:a8:bf:bd:31:d0:fb:73:93:73:00:42:57:33:
                    12:a1:f2:b9:e9:b8:df:24:03:f7:93:36:e6:28:cd:
                    ae:56:ce:df:9d:4a:e6:d1:0f:18:07:ca:66:07:01:
                    83:bb:20:37:88:6c:28:a8:77:37:3e:2e:27:30:05:
                    34:f5:e7:a5:fa:c2:28:99:27:56:80:25:4f:6e:e7:
                    d8:6b:1a:cb:60:e1:ac:9e:0d:57:6b:3c:50:91:83:
                    84:5f:25:b3:bb:bf:67:59:8f:fd:0d:a7:2a:48:2b:
                    a8:6e:3c:b8:a4:5c:95:e6:f9:f5:37:a4:2c:65:78:
                    86:8a:88:b2:cc:10:66:15:ee:36:6d:44:be:1c:41:
                    c4:91:2b:72:6d:6b:91:6a:16:98:3a:03:8d:13:d7:
                    41:50:6c:df:58:8e:0f:a3:be:00:f6:f1:12:6a:17:
                    26:00:20:39:d1:47:4f:0b:b4:fc:28:2e:39:4c:4f:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B9:0A:5A:D1:50:26:26:B4:74:14:69:A6:6F:6D:6C:E1:A1:3C:93
            X509v3 Authority Key Identifier:
                keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:76:de:85:46:44:8f:71:dd:ba:72:d2:0e:9b:cf:99:c5:7b:
         42:08:90:96:82:fb:85:7a:c0:3d:26:83:18:02:fe:45:b6:ff:
         0a:98:b9:73:85:de:d5:6d:17:c9:c3:cd:8c:14:16:04:5a:97:
         94:9a:d8:d8:b7:34:47:3e:b8:b6:87:22:68:3d:8c:cd:8f:cb:
         a0:04:1b:12:fd:71:e3:ad:05:b8:8a:10:f9:4b:fa:d0:8c:5d:
         11:84:61:07:ac:a0:e2:02:34:cd:4a:46:25:96:c9:ef:68:d6:
         2c:9d:23:26:63:95:58:87:d0:02:df:57:2a:c0:4f:89:1b:b5:
         44:06:a4:11:e1:9c:9f:54:b3:e1:9a:55:f1:16:c3:b4:82:9f:
         e0:2c:bb:ff:83:78:4e:cd:3a:5d:6e:73:40:7d:5b:58:61:4f:
         ae:20:73:ad:a6:31:13:20:54:51:1d:8e:5e:8f:3c:20:0e:ed:
         89:92:7f:42:4d:29:d9:3c:b9:03:72:30:29:8c:df:12:a7:3e:
         16:14:1e:65:ad:dc:ea:de:16:3b:c6:21:b9:b6:67:48:94:e2:
         dd:f6:26:78:ac:a1:b2:b7:8c:14:95:1d:64:21:c1:07:08:d3:
         29:2d:78:45:a2:fe:47:87:8f:c9:d5:c1:07:a9:73:7c:26:a9:
         af:ea:20:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:37 2026 by rpki-client