Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft
File:                     zdfMWZTjQE5sI66UKlkhi1fFwTE.mft (raw, json)
Hash identifier:          ydNNK8WletXeHFEbDo4do9Y4301awzjiiQY+iHpXA5A=
Subject key identifier:   01:89:38:E5:7E:0F:5A:CC:CF:D2:74:E6:3C:7F:89:55:8A:FB:1D:CC
Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31
Certificate issuer:       /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft
Manifest number:          024F
Signing time:             Thu 23 Jul 2026 03:31:51 +0000
Manifest this update:     Thu 23 Jul 2026 03:31:51 +0000
Manifest next update:     Thu 30 Jul 2026 03:31:51 +0000
Files and hashes:         1: zdfMWZTjQE5sI66UKlkhi1fFwTE.crl (hash: pXV2fnXgCJeiSL2+puHQ1drKmZVvJTxNiQHrjc56XQc=)
                          2: 1DDE652A03C211EEB2272068C4F9AE02.roa (hash: llFnAd4PvWtf3MG4Cdslgb2xYToNMlGGxLhDUepbhB0=)
                          3: 1D45B78003C211EEB2272068C4F9AE02.roa (hash: C3/n/+v8kI1L85XbnP1WA7ETUgCOUM9dKDiIQ1P+/Ys=)
                          4: 1E7F6B9603C211EEB2272068C4F9AE02.roa (hash: 63/+lesN0/eCHS2MKvIDobrmNwR0+nGA552s4bk+OsY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
        Validity
            Not Before: Jul 23 03:31:51 2026 GMT
            Not After : Jul 30 03:31:51 2026 GMT
        Subject: CN=6a618b27-d42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:45:d3:93:2b:9e:d1:c4:09:b8:1c:6e:b6:
                    22:f6:0d:21:c8:18:31:92:3e:c9:25:19:5e:ed:b5:
                    14:46:88:cd:f9:7f:82:30:ee:d3:c5:c7:fa:3b:41:
                    6b:cb:df:be:38:a0:b6:f5:ff:fa:91:46:a1:2b:79:
                    ab:ef:c4:74:87:6f:57:7c:bd:8d:1d:ce:16:1c:82:
                    0e:eb:80:b4:bd:e2:41:92:a1:28:e0:a6:a6:52:f3:
                    df:9c:4d:39:48:ed:47:e5:22:21:b5:86:79:ac:3a:
                    83:bc:c4:1a:bd:df:9e:06:94:f6:fa:25:f9:6f:71:
                    b5:1c:64:e6:f6:8d:eb:16:e0:3d:23:a5:45:d2:64:
                    48:2c:ce:c3:28:89:1b:4c:6d:76:b5:1f:3f:b9:e9:
                    22:8e:2b:62:e7:c8:61:a4:a5:a3:4f:4b:50:88:23:
                    44:0f:46:8a:9b:02:32:68:36:e8:eb:ce:fe:77:f3:
                    cf:06:64:c3:c3:cf:3c:ea:32:a0:ea:8e:dd:50:a6:
                    5d:95:f3:51:3d:23:82:4f:00:07:57:22:22:ae:be:
                    19:cf:11:e9:8d:14:c1:b2:b3:61:89:e3:67:1b:e0:
                    4d:e5:2b:e3:72:2b:04:ce:9b:0b:de:c3:2b:6e:c1:
                    35:7a:07:e3:d6:d9:eb:b0:83:35:3a:75:40:80:03:
                    7a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:89:38:E5:7E:0F:5A:CC:CF:D2:74:E6:3C:7F:89:55:8A:FB:1D:CC
            X509v3 Authority Key Identifier:
                keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:36:53:48:87:38:41:6f:b4:be:b1:0c:6d:c8:0f:70:78:39:
         12:42:04:da:78:f3:52:87:40:3d:48:78:7d:22:38:68:94:a7:
         7a:8a:59:71:cb:80:55:63:c7:b6:e2:4e:57:de:8e:55:78:ae:
         59:36:cb:63:79:22:0e:7c:e7:19:e1:d6:f9:61:25:1e:c3:f4:
         86:34:a4:76:01:9f:b1:2e:8c:c5:42:37:ff:bf:3b:6a:97:07:
         df:ed:cc:6d:9d:1d:c2:29:3a:14:14:79:e6:ec:c0:c1:f1:c4:
         50:96:33:18:2f:a5:18:42:d6:93:da:7f:32:84:6d:90:6c:e8:
         3e:d8:9b:70:37:2e:1d:4e:1e:3e:51:5e:0f:a0:8a:f0:12:01:
         fe:58:0c:e6:01:82:c2:2a:bf:ac:73:2e:2d:ba:be:e0:cb:3c:
         d1:e5:81:4d:c5:03:24:7a:23:d6:17:d2:47:37:5e:b8:11:e0:
         27:1a:5d:95:cd:0c:dc:15:05:9c:55:58:00:7b:ce:f6:aa:68:
         f4:d2:ea:44:b9:f1:60:d0:e8:a5:1e:b5:bd:8e:23:8e:88:92:
         a2:1f:fe:f7:5d:c6:79:86:f8:d1:1e:ee:2c:23:29:ae:f0:f6:
         bb:8f:72:4f:37:8e:d9:ef:0c:21:eb:2c:9b:8c:f7:59:d8:4b:
         5a:c0:2c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:40:41 2026 by rpki-client