Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
File:                     z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft (raw, json)
Hash identifier:          nVQAk656MlYuPq26DY3imEDIvTSTSbuWQIRinA5EcD8=
Subject key identifier:   18:F9:10:99:5E:13:CC:AD:51:29:07:78:0D:E7:B5:B8:19:1F:44:6F
Authority key identifier: CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF
Certificate issuer:       /CN=A91F8F9B/serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
Manifest number:          016A
Signing time:             Thu 23 Jul 2026 06:22:31 +0000
Manifest this update:     Thu 23 Jul 2026 06:22:31 +0000
Manifest next update:     Thu 30 Jul 2026 06:22:31 +0000
Files and hashes:         1: z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl (hash: tckMnM2GuDqEXn9Zk/weRDtyCM9cTCkf6zQbWMZb4h0=)
                          2: 7143C5B85DBF11EFB8714857C4F9AE02.roa (hash: HnPe7oTE/NJwLfNgQpYdaZfEzbuO3TebzvAvQ+UM9po=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl
                          rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8F9B, serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF
        Validity
            Not Before: Jul 23 06:22:31 2026 GMT
            Not After : Jul 30 06:22:31 2026 GMT
        Subject: CN=6a61b327-abbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:45:7c:17:54:b1:bf:9d:c5:5b:24:34:b1:
                    fb:79:2a:44:5d:dd:a4:6f:cc:22:9d:60:34:a7:0c:
                    33:72:54:86:08:f4:9e:39:a9:9b:7c:de:79:be:52:
                    e9:b8:22:0c:bd:39:b0:69:25:d1:de:8b:a3:b8:f0:
                    5a:b3:24:9c:7d:cc:af:3d:06:62:4b:ef:b3:da:c2:
                    cc:3d:9b:2d:a5:92:e7:97:7a:ed:7d:61:06:af:57:
                    9e:a9:7d:ca:6c:33:58:b0:2e:af:0a:1f:09:fe:02:
                    67:1c:29:03:de:86:20:85:35:76:e1:69:33:bf:04:
                    90:ac:c8:57:45:7e:e0:02:6b:6d:ed:fa:01:cb:f8:
                    58:a2:c0:db:01:b9:5d:ee:da:4e:27:45:f4:32:60:
                    36:57:65:dd:cc:f3:c2:4c:fe:e4:e1:58:08:b1:f2:
                    94:7e:0a:d3:d3:de:55:65:97:ac:cc:91:b5:d9:3c:
                    c2:14:b4:c1:06:1a:33:95:45:e4:99:0e:72:8b:50:
                    da:30:2c:08:3d:a2:1d:ae:22:9e:48:45:ff:eb:93:
                    77:16:4b:7d:65:5d:6e:92:7f:54:21:5d:a7:c4:6b:
                    5d:2a:04:56:e7:03:4c:9d:13:fb:ec:85:ee:13:51:
                    4b:79:97:8f:4d:17:d2:0e:dc:c8:58:9a:b4:24:74:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F9:10:99:5E:13:CC:AD:51:29:07:78:0D:E7:B5:B8:19:1F:44:6F
            X509v3 Authority Key Identifier:
                keyid:CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:77:ab:b3:3a:23:d4:c5:69:b5:4d:b9:75:49:ec:0b:aa:40:
         39:a0:5b:ce:98:ed:5c:fa:94:a1:f1:ff:b1:bb:5f:39:80:e2:
         6c:28:1e:4d:15:1e:be:a2:54:b0:f1:46:c9:cb:fe:96:04:18:
         3e:be:fd:e0:05:0d:24:d5:40:bb:9e:79:2d:d2:34:13:29:91:
         a8:19:b8:cb:f9:97:a9:41:2c:3e:5b:88:12:07:3c:bc:65:34:
         99:b8:85:1d:87:b0:7e:66:bb:7d:dc:b3:31:5d:08:46:df:2c:
         f6:60:b8:3e:ce:b2:1c:15:52:4c:93:d3:10:39:0a:c6:31:5f:
         49:7a:54:30:a4:fd:48:fe:99:5c:dd:2d:69:f0:98:72:c5:f2:
         86:95:cc:38:96:66:69:16:bf:30:d4:95:88:01:af:f1:5e:1c:
         d2:ff:15:c6:3d:94:30:71:ae:55:29:f0:f7:2f:40:c7:c5:c4:
         89:09:39:73:06:bc:b8:e4:2e:60:91:e1:4b:30:c8:04:09:70:
         3e:ac:7d:1f:c0:a5:c7:ec:ad:e8:e2:59:28:c5:10:5f:00:f5:
         13:78:3b:ac:49:60:61:2d:10:12:80:97:a4:03:5e:d0:8c:c8:
         f9:83:41:dd:4f:3e:cf:e2:85:c7:a3:9e:3f:2c:3b:b7:6b:81:
         cd:0e:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:34 2026 by rpki-client