Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
File:                     zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json)
Hash identifier:          OL4bbEU3B9d2iccaXuAe2k0Ss17bnDkHsVZ664h0Zjc=
Subject key identifier:   AF:28:4D:76:CF:1C:69:7B:0C:F5:34:91:40:EA:59:78:6E:EA:63:1B
Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88
Certificate issuer:       /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88
Certificate serial:       09D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
Manifest number:          09C9
Signing time:             Tue 12 May 2026 19:56:53 +0000
Manifest this update:     Tue 12 May 2026 19:56:53 +0000
Manifest next update:     Tue 19 May 2026 19:56:53 +0000
Files and hashes:         1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: iQaXSojbjMa8U3pOSKdbGX0hX1kqb1uGSKOfhyiAZSo=)
                          2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: b1FfdoGhx5a9SVnzfI7f+c3x30UgLcfNHueh+5jSvgI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl
                          rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2513 (0x9d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88
        Validity
            Not Before: May 12 19:56:53 2026 GMT
            Not After : May 19 19:56:53 2026 GMT
        Subject: CN=6a038605-f562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5b:33:7d:44:f8:73:96:f6:40:03:4c:a1:a9:
                    74:b1:ef:62:94:ae:a9:3b:1b:f6:b2:46:f9:29:05:
                    b4:99:d2:e8:eb:d3:50:81:bd:97:55:93:46:f3:ea:
                    c9:37:f0:39:36:e7:ae:cc:78:a0:98:98:ee:76:08:
                    81:ae:72:aa:17:d8:1a:0c:8b:c4:a9:49:33:47:8e:
                    97:6b:98:97:c3:77:8f:61:32:fc:2e:1a:f5:fd:af:
                    2c:93:17:a1:76:36:9b:63:91:81:10:f6:6b:f8:0e:
                    df:5f:11:81:7a:ab:b4:8e:e2:8d:db:1d:d7:81:10:
                    7d:3a:ce:92:fe:1a:fe:a0:35:80:5f:09:5c:05:a3:
                    80:4b:14:68:a5:06:1a:de:4a:ed:f2:cc:0d:d8:0e:
                    90:c3:43:b1:6e:a0:3e:d0:1f:26:39:0c:27:0e:ce:
                    3c:eb:f2:ce:e2:ec:d4:72:54:71:92:db:80:6a:c3:
                    a3:0b:dd:9d:4f:d3:c8:04:6c:98:14:6c:dd:3a:9a:
                    45:81:40:e8:70:42:40:5c:0c:b8:f9:b2:a3:21:ca:
                    6c:8f:6d:81:9f:b7:96:a6:f3:79:62:df:29:66:4f:
                    99:d1:0f:ff:d3:02:e9:ef:57:b7:f3:85:5f:be:d9:
                    be:ef:ae:0a:29:22:c8:66:75:a2:aa:22:0a:c9:7e:
                    ef:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:28:4D:76:CF:1C:69:7B:0C:F5:34:91:40:EA:59:78:6E:EA:63:1B
            X509v3 Authority Key Identifier:
                keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3d:a8:15:6e:da:01:36:0c:cc:89:fb:82:13:e0:37:14:42:
         f0:57:da:a3:29:3b:8f:78:7c:8d:15:aa:6f:80:99:d6:8e:e8:
         2f:bd:94:20:67:ce:09:7a:59:ab:69:1f:68:02:04:09:f0:38:
         6b:b6:2a:c5:30:32:99:02:2c:85:d2:43:be:ed:da:b2:c1:57:
         b7:a9:2d:0a:98:76:b7:a4:77:35:27:60:dd:4f:6f:53:51:9e:
         b7:1b:dc:3a:57:ed:b5:03:db:ae:d9:5d:51:80:97:d9:22:54:
         29:96:4b:c8:9e:ec:a8:27:6d:dc:ee:bb:b1:06:02:37:01:ec:
         d1:8f:2b:e4:bf:56:ae:6f:12:ab:d1:08:6c:67:1a:c3:73:88:
         7b:c1:93:97:f8:7d:36:d0:8a:b8:a3:8d:e2:d6:8d:81:8c:20:
         f7:9f:0e:5d:6f:ac:e5:01:9a:10:4d:06:49:bd:14:8b:44:50:
         6d:30:62:71:05:01:4f:bf:5a:bc:c7:ed:26:48:e8:40:7d:f7:
         9e:58:f3:64:dc:d6:91:ab:64:f5:af:17:25:52:76:84:96:cd:
         e1:85:4a:27:ca:bf:7a:27:c3:5f:78:9b:69:d7:51:84:61:90:
         23:02:1f:92:81:62:7e:d9:af:c0:1e:1c:6e:90:c7:2a:25:1e:
         b2:b2:ae:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:46:08 2026 by rpki-client