Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
File:                     Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json)
Hash identifier:          /1PhogBhW3nyDZyltL9YoxTS+i4UVSXQ8LEPJwVh7Y8=
Subject key identifier:   FB:95:71:F3:4D:26:60:97:38:32:C3:A5:1E:BD:1C:F6:4A:FC:75:65
Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
Certificate issuer:       /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Certificate serial:       0411
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
Manifest number:          0411
Signing time:             Tue 12 May 2026 20:36:25 +0000
Manifest this update:     Tue 12 May 2026 20:36:24 +0000
Manifest next update:     Tue 19 May 2026 20:36:24 +0000
Files and hashes:         1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: 91JAJxzUii4LT8eQg3oDHCWGKcA/d6sS+eaokD5zmBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
        Validity
            Not Before: May 12 20:36:24 2026 GMT
            Not After : May 19 20:36:24 2026 GMT
        Subject: CN=6a038f49-6791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e9:28:0f:8f:18:41:89:59:98:41:e9:83:ab:
                    41:f5:04:38:ce:b5:f8:d1:54:f8:62:0f:24:99:fc:
                    91:ad:b1:7f:f1:0c:ce:4e:ec:73:3b:64:60:7f:87:
                    e1:d5:20:06:11:7c:37:3a:3a:4e:bc:61:5c:93:fd:
                    5b:f6:83:03:5d:33:7c:bf:df:c9:1a:0c:60:fa:fc:
                    81:dc:24:0f:6d:49:e8:86:1d:4d:05:44:25:83:1e:
                    e2:e4:b8:41:2b:be:2e:0e:49:8f:a2:45:93:a3:6d:
                    62:75:dc:0d:92:04:e6:f0:f8:3e:ed:23:59:9f:96:
                    95:9a:df:14:28:b1:4a:08:51:46:fd:e5:fb:70:c4:
                    17:0b:3b:05:00:30:1d:c7:35:08:5a:10:e3:f7:00:
                    48:c3:ab:be:85:95:a1:24:bf:8a:bb:52:43:7e:a8:
                    c1:29:92:0f:0d:7b:34:fd:f0:a9:ee:3b:bf:8d:8e:
                    c2:98:00:6b:a9:69:9c:a2:47:ce:8e:48:ce:61:0d:
                    3d:a1:a0:35:98:85:4c:20:17:04:4d:ba:4a:3b:cf:
                    86:63:23:93:77:bc:f5:a6:b3:1e:3a:b6:21:43:54:
                    1f:7d:66:ff:14:3f:61:53:6b:3a:21:ba:8f:44:0c:
                    0e:fb:ae:e4:67:56:2d:7a:aa:03:db:a7:bf:07:f2:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:95:71:F3:4D:26:60:97:38:32:C3:A5:1E:BD:1C:F6:4A:FC:75:65
            X509v3 Authority Key Identifier:
                keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:8b:96:67:09:3c:d8:83:4a:2e:18:28:e4:bd:cc:c0:45:c7:
         06:1a:cb:8e:16:24:0a:bf:07:89:88:e7:57:d8:e0:f7:c6:8d:
         48:1f:ca:d7:ec:5f:45:be:85:e6:70:e8:80:12:19:7a:59:94:
         fd:33:23:97:24:11:95:64:16:1a:a0:33:f1:44:41:79:5a:bc:
         ca:c9:ca:4b:68:96:c8:ef:f8:e0:2b:39:cf:c5:56:af:7b:2a:
         84:b9:8a:8c:b7:db:20:82:83:fa:61:14:d3:3a:4c:73:28:56:
         e7:ba:4c:ad:f9:0e:9f:24:fb:87:c9:a4:22:ac:d2:14:55:a5:
         50:d3:4e:24:48:d9:9c:6d:e7:1a:f5:10:98:a2:1f:bd:59:fa:
         dd:c9:cd:5a:bf:44:24:24:3a:03:a7:be:4c:74:e6:51:81:28:
         03:c7:87:85:ec:9f:44:5b:65:02:2e:d7:7f:ea:88:b4:95:11:
         18:5e:5c:08:b4:19:fe:14:92:0a:b1:4f:5b:98:12:5b:ab:7f:
         1d:04:63:df:b2:62:9b:db:24:25:e8:70:46:ca:61:62:34:9d:
         d2:a1:56:c3:d4:d7:47:9a:e5:8a:43:69:2b:e1:6f:fb:ba:e5:
         08:7c:8e:a7:63:c6:ba:9b:45:c8:32:61:48:a0:5a:d1:72:bd:
         2d:6d:cb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:22:38 2026 by rpki-client