Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
File:                     zrvyvK-5VyfhLNi231EWuKFskEk.mft (raw, json)
Hash identifier:          cbkOC6Wr4Vv7WerI4mfunDykvyM5qeceNwEWWtV7DNo=
Subject key identifier:   C5:34:10:11:C0:7A:D6:0A:77:6B:44:A2:E2:49:06:C7:90:4D:FF:90
Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49
Certificate issuer:       /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
Manifest number:          CE
Signing time:             Wed 13 May 2026 06:56:20 +0000
Manifest this update:     Wed 13 May 2026 06:56:20 +0000
Manifest next update:     Wed 20 May 2026 06:56:20 +0000
Files and hashes:         1: zrvyvK-5VyfhLNi231EWuKFskEk.crl (hash: 7OlgTxTJ2HWt4elcvgUxQ5PGNxcEyyuqw/2qXTGHHvg=)
                          2: 5E68E50A175411F09318BD57C4F9AE02.roa (hash: eH1wM+wRYnXUxuQ4RnmT4QdaFVHNLHxpHC9QEvFzpB8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl
                          rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049
        Validity
            Not Before: May 13 06:56:20 2026 GMT
            Not After : May 20 06:56:20 2026 GMT
        Subject: CN=6a042094-a4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:94:74:ed:73:34:c9:37:84:c4:77:8a:dd:
                    45:3c:98:b2:f5:44:d8:4a:76:86:db:04:55:c3:4c:
                    ba:08:ad:51:75:5f:fc:72:fb:85:b7:f0:21:de:04:
                    5f:a7:2c:9f:14:c1:2e:a6:61:4e:4c:1d:8c:e2:ef:
                    55:1d:6c:c4:85:03:90:38:5b:89:c8:a8:bc:8e:3e:
                    b6:5c:0c:6d:76:33:dc:a1:4e:28:fa:58:1a:fc:2f:
                    9b:c8:54:b8:ce:5a:00:5b:03:47:94:fc:36:c2:b5:
                    e3:8b:83:57:dc:e3:49:98:30:ab:dd:d5:78:86:1d:
                    e6:a7:42:9e:e7:ab:15:0c:7f:55:54:b1:48:51:41:
                    b3:bc:fa:70:c3:e3:a8:0e:52:7b:49:ee:46:9b:58:
                    86:ee:98:66:51:98:c2:41:c5:2c:80:a9:e7:23:c8:
                    68:ba:e4:65:5a:f7:5e:8e:bd:c2:87:a9:3f:10:04:
                    4d:ac:8d:fa:1e:af:ab:1e:13:21:ec:a5:06:bc:ff:
                    fb:54:87:8b:af:b5:62:c2:c5:3a:c7:5b:72:df:5a:
                    60:0f:eb:80:64:84:9f:1b:d9:97:78:40:4b:1b:a2:
                    bd:46:b8:13:fd:95:00:93:36:71:87:db:2c:4a:c5:
                    3b:d0:ad:fa:37:24:42:d7:32:d8:c9:f6:ae:77:0c:
                    ea:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:34:10:11:C0:7A:D6:0A:77:6B:44:A2:E2:49:06:C7:90:4D:FF:90
            X509v3 Authority Key Identifier:
                keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b8:b3:6c:f3:65:74:2f:43:5d:c1:c3:69:74:ae:b6:ce:89:
         c2:d7:74:86:4e:5e:fc:c9:77:ec:5c:c2:e5:a8:79:43:2c:b2:
         c1:f0:0e:05:26:9e:85:41:f1:fa:c0:fd:60:69:70:08:71:b5:
         55:36:ef:a1:a0:87:32:ea:47:da:e4:95:e7:26:86:51:60:de:
         c9:a6:60:df:8b:5c:46:42:d3:43:1c:7a:78:50:d9:9b:78:a8:
         14:23:63:b0:ea:64:43:c5:c8:6d:76:bf:df:75:c0:e3:20:33:
         b5:53:04:f6:f3:65:3e:8e:1b:ab:a4:30:3e:6e:c6:87:0c:c8:
         ea:05:9c:0f:11:c0:47:26:f4:99:80:0b:18:00:6a:41:91:cd:
         b5:3c:ad:87:4f:4d:7a:2d:61:3b:72:70:f9:8c:f2:1a:9b:d4:
         29:43:95:77:24:9f:37:a1:f6:ed:c4:5a:93:3f:cf:bc:b2:f2:
         fa:5f:5c:92:f2:2e:c0:a1:84:fd:6c:9b:49:d7:03:88:35:a5:
         1b:6b:9e:91:1c:2a:aa:29:e4:1f:2f:34:23:ba:dd:18:13:86:
         f3:4c:28:48:ac:38:fe:f8:2a:9e:44:c9:33:55:ae:08:66:90:
         d9:ce:82:56:ad:09:01:5c:4d:dc:d3:0f:a4:30:d7:31:fb:56:
         7c:1c:30:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:59:13 2026 by rpki-client