Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft
File:                     ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft (raw, json)
Hash identifier:          OhEIe4LK7tNJxF/eRxz6zdWnovf4SlitepvKdDm+Yrc=
Subject key identifier:   29:F6:2D:F4:87:11:5B:1E:9F:06:E2:E6:61:1F:E4:AE:D3:C0:EF:9F
Authority key identifier: 64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C
Certificate issuer:       /CN=A91263DF/serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C
Certificate serial:       0A7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft
Manifest number:          0A73
Signing time:             Tue 12 May 2026 19:38:13 +0000
Manifest this update:     Tue 12 May 2026 19:38:12 +0000
Manifest next update:     Tue 19 May 2026 19:38:12 +0000
Files and hashes:         1: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl (hash: gk2t2coLEAdSkqRP9ZkSCRr464DGNShBURaY1BMqTDo=)
                          2: 0D3A9110829911EABD93A72DC4F9AE02.roa (hash: PxOmvDmrB3CEdW6KhDSMOQWoDMH93at+hpnwpbEaqbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl
                          rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2684 (0xa7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91263DF, serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C
        Validity
            Not Before: May 12 19:38:12 2026 GMT
            Not After : May 19 19:38:12 2026 GMT
        Subject: CN=6a0381a5-4303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1c:98:7f:56:b1:f4:eb:6d:13:4a:01:86:73:
                    6b:fe:52:7b:3b:91:9e:d3:ed:21:b7:aa:e5:c1:b8:
                    95:09:b3:da:56:a3:20:ef:ec:33:44:c5:0e:99:ae:
                    9a:ca:5c:fb:01:d3:f1:81:b9:db:67:f3:0e:42:f5:
                    85:07:93:9c:08:83:e5:99:42:dd:6a:d3:1a:af:81:
                    4a:62:32:c7:38:0e:9d:b8:cb:07:54:ad:6f:6c:b2:
                    f4:d1:3b:24:fd:69:5a:12:ca:fa:32:e8:ef:d4:cb:
                    35:0a:fe:59:46:41:3c:7e:62:a6:43:71:44:75:0b:
                    d7:ab:e4:af:ce:38:a1:b7:45:52:2f:6b:f1:da:15:
                    00:d2:0b:97:03:c8:04:78:49:b1:12:4f:f8:c3:de:
                    d3:04:04:20:92:31:34:5b:da:16:5a:3c:48:23:a4:
                    67:f7:e2:09:7d:25:52:d9:3c:1a:0d:35:b8:5b:38:
                    75:6f:27:21:6f:58:0a:00:49:4f:e7:da:64:ee:b2:
                    04:80:39:75:1b:48:fe:48:2b:71:4b:70:2c:fd:ac:
                    be:40:a2:ce:d1:f1:79:ce:f8:ab:dd:1d:2b:8b:20:
                    e3:aa:2a:cb:5b:6b:f5:d3:06:81:31:e9:4f:12:f8:
                    b3:77:eb:ea:54:f4:fa:2f:0e:a2:35:aa:26:62:c3:
                    29:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F6:2D:F4:87:11:5B:1E:9F:06:E2:E6:61:1F:E4:AE:D3:C0:EF:9F
            X509v3 Authority Key Identifier:
                keyid:64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:1e:3d:cc:06:da:93:59:93:ab:63:b4:19:11:f2:4d:97:c1:
         cc:e4:ab:fa:b3:bf:12:f3:14:bf:44:73:78:24:a5:f7:53:bb:
         88:a0:c2:e3:03:ac:08:c1:25:49:38:b5:4b:c3:73:82:38:f4:
         84:f7:bb:02:1a:ca:ce:6d:93:25:9e:86:63:ce:4f:2d:1d:e3:
         62:1d:d9:d8:9f:6f:4d:9c:7a:fb:08:2a:1e:aa:bd:ea:65:3d:
         88:6c:58:25:bb:a3:79:99:89:05:37:d7:bc:59:a1:7d:09:17:
         7a:76:9b:ce:9e:77:51:16:2a:d6:17:3f:e2:0b:74:81:f2:99:
         3b:aa:43:ed:aa:34:aa:c5:d8:53:9a:26:70:71:66:b2:e9:2d:
         68:be:a5:44:0a:a0:6d:d5:bc:b4:e5:19:21:c3:ab:73:ba:46:
         05:59:30:4d:55:4d:08:90:4b:fe:bb:a2:b2:f5:26:85:69:a0:
         94:93:8a:bb:a9:28:3d:ec:da:41:70:3a:a1:56:a8:07:61:03:
         30:1b:47:ac:6c:1b:a2:f2:35:54:4f:6e:71:9b:fe:27:a0:3f:
         7e:03:03:7e:c4:4f:50:0b:ca:1c:79:e2:ad:c1:32:6a:64:ce:
         35:e4:c2:43:f7:67:1a:45:6d:5f:c8:6f:8a:7e:de:ca:42:ba:
         a1:ec:75:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:32:23 2026 by rpki-client