Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
File:                     ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json)
Hash identifier:          25aJMGWiO+Qydyotvz5WigG9K7QAX/rQ5It/13QTr70=
Subject key identifier:   79:BA:87:13:F6:80:DE:D9:C6:B6:96:23:DB:D3:43:2C:98:79:3C:F7
Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8
Certificate issuer:       /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
Manifest number:          C1
Signing time:             Thu 23 Jul 2026 08:47:44 +0000
Manifest this update:     Thu 23 Jul 2026 08:47:43 +0000
Manifest next update:     Thu 30 Jul 2026 08:47:43 +0000
Files and hashes:         1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: +E43MScPsSS9wxY62jOIXhgyBEPWtvGCydrfRmFBB7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl
                          rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8
        Validity
            Not Before: Jul 23 08:47:43 2026 GMT
            Not After : Jul 30 08:47:43 2026 GMT
        Subject: CN=6a61d530-8624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:08:95:41:7a:76:90:86:52:78:6b:1d:41:41:
                    14:eb:e0:07:dc:41:4f:8c:0b:09:e6:a4:79:31:a5:
                    ad:d4:04:88:08:2e:da:9d:06:0c:78:eb:94:ce:5a:
                    77:65:12:48:1f:88:53:cc:88:0f:ac:69:4b:6a:7f:
                    82:b0:79:ae:64:77:4d:d8:2a:14:05:de:df:ce:1c:
                    71:f0:76:0f:b7:42:7f:bd:b5:f2:98:1e:4e:94:51:
                    4e:39:d5:84:70:18:3d:b0:4c:ec:73:33:a8:5a:3e:
                    83:3b:34:e4:f8:9f:49:33:46:55:52:50:b7:68:f5:
                    6a:ee:5f:9e:a1:9f:8a:ca:65:8c:c8:80:11:5c:27:
                    44:62:bb:57:76:e0:5a:ee:51:5d:b7:6a:25:76:e2:
                    09:e3:25:49:6b:74:1e:ca:07:73:ed:ef:3d:77:b2:
                    cf:55:33:26:7a:f3:97:0a:ab:7f:0e:1c:4f:fa:0b:
                    eb:c9:90:cc:32:1f:47:ae:df:73:18:e1:08:60:00:
                    44:70:36:94:52:b4:c0:45:ac:8a:82:2b:0b:91:f9:
                    fd:3a:b0:bb:6c:ab:8c:c7:41:4a:1f:e8:4c:40:29:
                    9d:3e:ba:22:bd:f8:84:9d:0d:55:b5:69:c9:65:d7:
                    63:88:54:08:b4:cc:b7:b4:02:b2:31:7d:69:00:2a:
                    f6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BA:87:13:F6:80:DE:D9:C6:B6:96:23:DB:D3:43:2C:98:79:3C:F7
            X509v3 Authority Key Identifier:
                keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:76:16:63:9c:72:51:f8:5c:49:87:90:fa:f8:d8:c4:e4:bb:
         e4:1e:c9:99:90:09:92:47:30:c3:50:52:06:84:b0:e5:0e:2b:
         ae:d0:44:e5:71:a6:88:fb:62:55:13:bb:56:12:fd:cd:b4:8c:
         a1:92:61:8d:bb:63:2d:96:3c:cc:19:b0:24:9e:03:a6:17:42:
         c7:a2:17:91:e1:59:a3:92:7c:91:df:62:7f:99:42:74:21:f6:
         b5:e4:7a:35:85:00:2b:97:ca:c9:3b:f1:97:0e:90:ab:56:30:
         c0:20:6e:6f:11:01:1c:d5:cf:e4:a8:62:07:5f:a2:4e:02:3f:
         8a:3f:18:c2:5e:41:a7:be:a1:64:d2:e3:8a:d6:8b:db:36:0c:
         94:dc:cc:23:8d:03:84:e7:a1:ec:9a:06:c8:18:d7:0f:34:d6:
         df:a2:c5:bb:1e:5d:66:bb:c9:70:dd:51:70:f9:0c:d1:e8:b2:
         1f:78:b8:54:37:62:83:05:96:b8:7c:48:05:16:69:9d:4d:c2:
         96:ca:de:7c:fd:1f:35:08:e2:0c:18:ef:6e:2a:6a:42:b4:3b:
         62:14:fc:82:f4:ea:24:c6:da:9b:a9:80:4f:1f:bb:ce:d8:20:
         74:d3:d3:38:e0:85:4c:50:1b:1c:8a:65:66:8f:78:a9:72:6c:
         61:ce:37:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:55 2026 by rpki-client