Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
File:                     ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json)
Hash identifier:          pyWrFS4JxEQJfYRRlSpPyffol4n+J5pe9973UJHAFeE=
Subject key identifier:   A9:07:40:E5:16:05:7B:D3:3F:83:16:E3:07:A6:14:88:A4:05:93:24
Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3
Certificate issuer:       /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
Manifest number:          0130
Signing time:             Thu 23 Jul 2026 07:16:35 +0000
Manifest this update:     Thu 23 Jul 2026 07:16:34 +0000
Manifest next update:     Thu 30 Jul 2026 07:16:34 +0000
Files and hashes:         1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: zyjuRZcq6vAzwIAnFl5mG/1+EelVBIF1WsPsvXjbzSI=)
                          2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: svfCZY/4ijPFg+GD8JzFGuMZM/fHEdmUD+EacNaNCNg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl
                          rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
        Validity
            Not Before: Jul 23 07:16:34 2026 GMT
            Not After : Jul 30 07:16:34 2026 GMT
        Subject: CN=6a61bfd3-f122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:d5:13:bd:41:ce:97:ab:11:b3:ac:7b:3e:
                    b7:8f:0e:60:b6:16:4a:d9:7f:d1:0a:2e:c8:f7:62:
                    f4:81:59:40:7b:88:3f:0b:30:8e:e4:d8:05:2b:03:
                    2b:03:e7:d8:5f:d2:23:e8:ca:db:b5:95:19:55:16:
                    96:0f:15:4c:11:99:b0:bb:96:99:0d:97:0b:f4:fc:
                    83:b8:82:7c:b0:f3:c9:d8:64:eb:76:e3:b7:4f:83:
                    0e:1f:d0:f8:ed:25:57:fb:98:53:09:cd:14:1e:7b:
                    f4:23:77:da:8d:7e:ab:88:5c:db:40:00:50:5b:e2:
                    48:34:22:f2:53:84:f9:93:9a:45:36:48:08:14:a8:
                    79:3f:2e:25:27:b1:3c:00:fc:3c:cf:e4:6c:a4:60:
                    2b:05:b7:8b:c4:bd:d4:17:1d:10:f6:43:9d:11:3e:
                    e4:f8:09:3b:54:25:67:f1:90:63:a2:31:7e:b1:29:
                    4b:13:a9:da:d6:34:99:73:38:d0:dc:55:a2:5d:82:
                    03:ce:29:40:32:0e:38:e8:6c:f3:e5:c0:e4:48:6f:
                    8e:6e:f9:e4:5b:62:10:92:d1:18:ce:66:11:1c:7d:
                    ee:24:be:3f:e8:3c:84:f1:c6:46:31:ac:38:4d:fb:
                    17:b7:a5:c8:c6:81:e4:62:bf:7f:55:10:af:4f:68:
                    df:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:07:40:E5:16:05:7B:D3:3F:83:16:E3:07:A6:14:88:A4:05:93:24
            X509v3 Authority Key Identifier:
                keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d7:8e:76:ba:4a:ef:5b:d6:2a:eb:56:7c:45:2a:9f:02:36:
         2a:ba:b1:0e:5e:ec:cd:f7:ac:dc:21:8a:6b:b2:30:ce:50:2a:
         3a:c6:28:1d:c6:ce:2d:2c:d3:e9:46:cd:9d:a0:27:48:d6:ab:
         98:a6:26:8a:4c:86:78:e0:e7:b6:3c:d6:a5:02:c9:3e:de:fe:
         b9:d6:ae:ad:08:91:15:e8:5e:86:73:ef:b9:60:52:b4:c4:dd:
         0a:6e:12:a9:9a:a2:f2:aa:43:29:43:83:b7:53:d3:c4:e4:a8:
         11:51:3c:9b:b1:bf:81:9e:b2:f9:b3:d3:5d:99:b4:08:64:d4:
         61:e5:86:93:89:61:22:f4:66:ed:6c:8a:e5:37:e9:eb:1c:c4:
         b2:97:7f:87:e6:28:08:d9:a9:09:6e:06:0a:10:19:2a:9e:8b:
         60:cd:50:59:58:ec:70:7c:7e:47:b2:6f:d1:ff:65:ed:d4:ab:
         74:3c:c9:f6:88:a8:7c:38:96:97:d4:63:47:b9:4c:f1:7f:85:
         64:f7:b4:df:39:05:55:a5:89:29:85:4a:ae:48:b7:44:f6:44:
         8d:0d:b3:31:ec:df:4c:f1:a6:4f:b9:4a:99:e8:59:9b:72:36:
         d0:88:c8:2e:61:bc:5b:ea:35:35:4f:e5:79:7b:7c:ed:44:7e:
         46:99:35:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:51:11 2026 by rpki-client