Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
File:                     z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json)
Hash identifier:          7zS8XfrB+Ex64A5aZs5zuIUzaP9jLWo17V9bk1r3vdE=
Subject key identifier:   3D:E3:EB:0F:78:2D:E8:6B:DD:7A:D4:4E:FC:B1:1F:EB:96:3E:7B:14
Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
Certificate issuer:       /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
Manifest number:          011F
Signing time:             Wed 13 May 2026 05:56:19 +0000
Manifest this update:     Wed 13 May 2026 05:56:18 +0000
Manifest next update:     Wed 20 May 2026 05:56:18 +0000
Files and hashes:         1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: F+yZXw6tJT1XPY46hBezL+XiFhhnu6HwdMdEkAtqQbw=)
                          2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: 6I64utdnK0TaFg9y+W+RqybL90K1jeQS5liIOPne5so=)
                          3: F2DF64BAD28511F0A20E5C80C4F9AE02.roa (hash: XjB5jPSTt3eJTKS4dRa9T7cx4SalbQsD8ABjmrgjNZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl
                          rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
        Validity
            Not Before: May 13 05:56:18 2026 GMT
            Not After : May 20 05:56:18 2026 GMT
        Subject: CN=6a041283-adbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:48:14:47:e0:18:25:8f:0c:4f:98:a5:fc:
                    4c:f0:06:1e:80:a2:86:22:6b:d1:c0:c6:2c:7a:83:
                    92:bf:ae:6c:38:26:8e:0c:96:35:90:2f:05:d4:ae:
                    bb:0a:9b:80:20:57:f2:24:0b:c6:7e:48:61:e8:5d:
                    bf:74:cc:32:0a:c8:95:df:51:dc:4a:14:d3:46:c1:
                    13:12:de:3a:12:72:62:4f:61:43:a5:13:0b:b3:be:
                    b8:04:50:61:36:c6:47:e6:4d:56:bd:88:ef:e5:42:
                    9d:4b:50:e8:d6:60:7f:6f:c0:77:84:e6:04:f8:62:
                    e6:ec:bb:06:de:51:06:2f:d4:e2:8d:8b:7f:f5:f3:
                    3e:22:80:cf:2c:a1:4d:18:e5:52:d9:5d:f8:d4:12:
                    31:a6:28:c8:26:f6:8a:67:31:eb:08:59:13:71:95:
                    8a:76:1d:15:87:13:cf:2b:f7:f1:88:6b:3d:08:a3:
                    57:c6:6d:81:46:f0:a1:79:1c:28:42:e5:7a:5a:70:
                    b5:d8:5b:a0:91:ce:a9:7f:9e:4f:07:dd:7f:a2:e1:
                    a8:59:cf:77:fa:8e:6e:bb:32:fd:25:fd:38:6b:e6:
                    2a:26:29:69:40:15:e9:05:0b:11:69:50:c6:8b:5e:
                    82:56:4a:24:57:15:3c:89:ca:3f:f4:4a:ac:0e:8e:
                    d5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E3:EB:0F:78:2D:E8:6B:DD:7A:D4:4E:FC:B1:1F:EB:96:3E:7B:14
            X509v3 Authority Key Identifier:
                keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:91:27:84:98:05:f7:f4:89:61:57:2e:1b:d0:22:15:2b:a1:
         ff:30:64:cf:eb:09:df:d8:a8:e7:1e:2c:66:d9:37:51:e8:35:
         69:bb:23:f0:bc:df:9b:a2:7d:28:fe:09:63:1a:cb:81:97:3f:
         18:bc:2c:63:b4:7f:a0:f2:1c:e0:17:22:5c:fd:0e:56:e2:ea:
         b4:39:c7:3c:31:d7:87:02:89:40:e5:29:96:5f:f2:36:a5:ef:
         f0:57:4f:16:ad:31:1e:06:78:ff:39:04:12:c3:25:78:2a:54:
         00:9d:92:d1:10:89:67:49:8e:16:17:1f:9c:e4:89:46:f8:a5:
         5d:b8:a0:52:2a:37:c3:ae:21:cf:8b:f2:c6:c7:0c:ec:8a:9c:
         0f:48:e0:df:d2:b5:85:08:2e:7b:2d:c2:23:55:37:26:2c:f4:
         ff:4f:e0:3d:ca:3e:d7:e9:a3:0a:da:dc:7e:66:e7:34:eb:38:
         28:41:74:8f:59:7e:41:86:2a:cb:af:27:2c:3c:67:c2:e0:90:
         a4:69:7f:c9:19:9c:56:ad:a5:fd:74:3d:c9:eb:a4:65:15:7d:
         82:e4:f6:f4:96:c8:0d:9b:58:88:ba:00:a5:cc:03:75:3d:22:
         9c:ba:d8:f2:a2:ef:a6:3c:6c:fa:cb:81:54:4f:89:81:35:86:
         86:19:78:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:03:26 2026 by rpki-client