Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
File:                     Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json)
Hash identifier:          YChsh+aj8fZxd+dDT61xcES6viAQQHOJcnTSaRHXFvg=
Subject key identifier:   06:52:2C:5F:20:D4:70:88:1C:DF:C7:51:55:47:84:49:24:61:29:A0
Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
Certificate issuer:       /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Certificate serial:       0D0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
Manifest number:          0CFD
Signing time:             Tue 12 May 2026 18:14:49 +0000
Manifest this update:     Tue 12 May 2026 18:14:48 +0000
Manifest next update:     Tue 19 May 2026 18:14:48 +0000
Files and hashes:         1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: 3o4XDOlNp7KU7nAnx8OjXn3P48EDYJ3lluXtm/L+Qwg=)
                          2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: Q8Oy4wo2YJgEZIjyNWkq80rcuQvvGozUBEBODPVmJ6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
                          rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3339 (0xd0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
        Validity
            Not Before: May 12 18:14:48 2026 GMT
            Not After : May 19 18:14:48 2026 GMT
        Subject: CN=6a036e19-1b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:29:ae:31:33:92:59:b2:32:c4:5f:6b:85:
                    90:92:48:59:fd:b2:9e:b8:d8:9b:dd:a9:61:36:26:
                    ac:a2:72:22:ae:19:37:5d:6f:6a:28:4a:9e:2c:77:
                    cd:ac:fb:ed:a0:89:29:07:ba:fd:79:56:92:31:20:
                    7e:81:43:a4:1d:1f:f4:34:b9:54:74:91:bf:42:f0:
                    e1:88:e5:d1:6f:76:30:84:15:e5:08:8f:de:67:52:
                    7b:3b:64:5d:83:e0:03:a4:0e:ff:7e:22:26:07:c4:
                    75:70:ab:2a:7d:3c:67:09:8d:02:0c:b4:58:be:f0:
                    2d:c0:8d:f8:d7:a6:c5:24:1c:a2:d4:ca:72:bb:78:
                    eb:db:c4:e6:d6:90:cf:94:ec:e8:65:39:f6:86:da:
                    7c:17:d2:c2:a3:26:16:41:9a:13:34:da:7e:48:c2:
                    71:38:ae:55:28:dd:3f:d7:9a:fb:ee:65:14:8c:a5:
                    8a:4d:41:52:be:42:c9:9e:8b:18:d7:0c:ee:11:9a:
                    b3:7c:ea:23:53:45:6f:94:5d:76:94:ab:71:92:0e:
                    a9:04:d6:d1:cf:d2:68:18:f0:5f:1d:49:4e:cf:1f:
                    b7:3b:70:7f:ce:2d:1b:ea:a2:93:a7:28:f1:0a:11:
                    4b:bc:ba:9b:10:1d:18:cb:59:8a:74:d8:cc:4d:86:
                    72:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:52:2C:5F:20:D4:70:88:1C:DF:C7:51:55:47:84:49:24:61:29:A0
            X509v3 Authority Key Identifier:
                keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a8:0b:2f:2a:4a:ff:22:ae:a5:a8:9e:ef:e2:66:3c:37:72:
         eb:77:47:74:d9:06:4a:51:55:52:86:ae:64:04:37:6b:0e:ac:
         b1:00:eb:f3:4e:59:cd:91:d3:06:a9:92:f2:39:2f:5c:f8:df:
         57:98:40:7f:69:e4:e4:12:07:b0:2f:b4:d1:28:b6:40:37:18:
         30:80:2a:0f:3c:f4:49:cf:15:9c:9f:72:98:21:96:fc:22:94:
         04:cd:f7:e2:0d:41:16:2e:0a:2f:1b:0f:82:ae:53:29:dc:d9:
         7e:98:89:3e:6a:d5:5b:a6:92:fd:c8:7a:46:58:fc:68:96:e4:
         16:47:9f:4c:44:bd:37:fe:67:4c:78:77:af:45:86:3b:83:33:
         f4:f4:16:7c:de:00:09:65:f1:d7:27:a1:f5:e0:c0:7c:82:fc:
         65:a4:50:65:9e:84:eb:33:32:fd:cc:71:17:2e:54:e4:4c:52:
         97:cd:3b:03:6d:59:28:f3:19:1b:e6:3e:48:39:85:1f:9a:84:
         0b:f2:09:1c:3e:82:db:fe:ef:c3:3f:d2:b8:02:fc:13:36:0a:
         3e:d1:3f:24:1d:ee:dd:bc:24:11:9f:6c:da:42:97:c0:3c:3b:
         d9:dc:b1:09:f3:e9:38:d0:99:88:74:ef:de:35:9b:bc:1d:4a:
         e2:1a:e6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:32 2026 by rpki-client