Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
File:                     RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft (raw, json)
Hash identifier:          tK1im1foudk/zfEC5aW9IZ6fAlYyamPhDW3DpIlQZeA=
Subject key identifier:   F6:0C:DC:6B:91:24:62:69:61:40:A3:69:B4:FD:C1:31:CC:EA:76:92
Authority key identifier: 47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17
Certificate issuer:       /CN=A911DD04/serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
Manifest number:          01B2
Signing time:             Mon 11 May 2026 04:03:52 +0000
Manifest this update:     Mon 11 May 2026 04:03:51 +0000
Manifest next update:     Mon 18 May 2026 04:03:51 +0000
Files and hashes:         1: RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl (hash: wgDCTzuFVCMWXuTt7zMTWFxwDJCFaSPrSYZQi9wBYZk=)
                          2: 939790AAB9BD11EEA19BE74DC4F9AE02.roa (hash: 4Xxfcn9vWAxmFmsir9WaEVwPirqEsxparkquZplonJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl
                          rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DD04, serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17
        Validity
            Not Before: May 11 04:03:51 2026 GMT
            Not After : May 18 04:03:51 2026 GMT
        Subject: CN=6a015527-d133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6a:fc:0b:bb:b3:dd:e9:48:36:56:e5:82:bd:
                    66:21:53:4a:41:8d:f7:20:fb:9c:c9:06:c5:7c:39:
                    e4:39:3d:eb:28:c5:41:5f:0e:21:62:35:3f:22:35:
                    f6:5f:4d:1d:b7:ec:f4:bc:88:a5:bb:ed:2b:93:7f:
                    54:72:27:f8:33:ac:81:9a:f5:48:0f:79:0a:f7:bb:
                    39:aa:08:a4:7a:0f:0b:68:62:95:84:d8:8e:64:4b:
                    b3:c7:64:a2:39:49:7e:cb:53:c4:bc:76:3a:84:9d:
                    23:86:81:a8:32:36:17:bb:4e:a6:99:6a:e0:24:46:
                    05:32:72:9d:b5:a8:5e:ec:09:b6:90:c9:62:70:95:
                    22:9f:a2:82:0a:14:95:a4:62:74:34:17:0a:cb:74:
                    f5:9f:95:61:68:17:50:62:62:8f:32:c8:5c:d3:7a:
                    72:ce:b1:9a:09:bb:49:e1:b9:e7:7e:15:4f:3e:c7:
                    b8:eb:10:38:14:55:6f:0b:18:41:40:b5:77:59:76:
                    b7:b0:d9:92:b7:58:76:86:8a:cc:8e:de:2a:c0:37:
                    d6:cb:85:ab:47:e0:8e:d6:bb:71:2f:25:55:23:2f:
                    12:6e:d5:f5:3b:5a:02:88:f3:c8:81:e4:14:f0:83:
                    5a:1c:bf:cb:15:9f:c4:14:28:eb:34:9d:cd:bd:d1:
                    38:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0C:DC:6B:91:24:62:69:61:40:A3:69:B4:FD:C1:31:CC:EA:76:92
            X509v3 Authority Key Identifier:
                keyid:47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5a:e9:22:36:e8:43:72:e8:cf:66:46:5b:37:c4:11:5a:71:
         81:ad:16:a0:6e:3e:16:1c:9d:cb:f1:a8:fe:10:e5:cd:90:85:
         27:13:b4:ea:32:28:16:ea:b2:c8:0c:12:2f:3f:2b:bc:ec:f4:
         49:f2:9e:12:51:bc:a1:ab:55:6f:8e:ba:9a:a5:47:d8:22:fd:
         ce:0b:c4:27:ec:a7:19:ed:b8:82:a5:21:1b:1f:6f:98:1b:09:
         66:f0:01:eb:be:2d:7e:3a:89:32:30:c3:a8:bb:5a:58:46:f0:
         f5:a7:ce:a1:aa:f0:1e:8e:c6:10:8f:fe:88:42:69:ed:9b:07:
         af:70:bf:7f:8e:65:ab:a4:c5:d3:11:a5:e4:d2:bd:68:05:8e:
         78:2f:cc:6f:98:82:e1:1c:62:89:89:77:df:a3:d6:bd:cd:d0:
         36:f8:ef:5d:c1:7e:3d:1c:7f:45:b6:94:2b:a7:3d:76:18:87:
         2d:b1:d0:c1:0c:c3:a5:de:d8:bb:76:39:92:4f:a6:3e:fa:2a:
         e1:7f:9a:58:99:73:c0:de:99:54:f3:86:8b:35:b0:4b:9d:5d:
         c3:7d:70:00:3c:68:50:3d:bd:21:25:dd:17:59:b5:d4:60:a0:
         7f:88:10:12:09:b8:56:a1:03:ff:e9:02:fb:5e:1d:ce:64:30:
         fc:5a:5a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:36 2026 by rpki-client