Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
File:                     ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json)
Hash identifier:          R2vtS8NJ3MJNPc8VswQyJgqgYer8VsFJevajaLJrnMU=
Subject key identifier:   0A:1A:AF:2A:9A:A4:36:CE:B6:0E:56:23:62:E9:02:24:D7:F9:A3:1F
Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94
Certificate issuer:       /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
Manifest number:          0130
Signing time:             Mon 11 May 2026 05:37:49 +0000
Manifest this update:     Mon 11 May 2026 05:37:49 +0000
Manifest next update:     Mon 18 May 2026 05:37:49 +0000
Files and hashes:         1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: WyaoJz6AayTa+8rFi7fYzDFN3+21Hfw5f6WrPHBRmFo=)
                          2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: 0/KER6jtg26LthiMhAoQFVwFGIJvGgJoOvUmyRDRsmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl
                          rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294
        Validity
            Not Before: May 11 05:37:49 2026 GMT
            Not After : May 18 05:37:49 2026 GMT
        Subject: CN=6a016b2d-63a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:db:c8:14:fc:e4:58:3a:1b:c7:ca:df:26:
                    f1:4c:dc:ff:e1:7e:44:f0:3b:5f:09:d0:10:19:52:
                    24:37:d8:d1:b4:d3:9d:a0:06:44:d9:43:2a:b3:6a:
                    da:04:e0:55:a6:0b:dc:85:1f:c6:53:fe:47:97:65:
                    48:ba:c6:49:58:22:e4:69:50:d4:6f:65:01:2b:20:
                    46:e2:67:dc:c7:f2:be:3b:fa:ee:cf:9b:21:a5:5a:
                    b6:b5:ce:89:14:73:6d:17:44:5c:ff:32:91:39:ff:
                    bc:0a:41:e4:e1:2e:26:35:cf:06:4f:1e:7e:7a:50:
                    67:a9:62:64:cb:2c:e0:c1:83:cb:93:20:0a:b6:31:
                    5b:1d:42:98:6d:1c:0d:5a:a3:3b:a3:78:ee:35:89:
                    fb:1a:66:8e:85:07:e2:17:87:18:45:fb:6a:68:aa:
                    1a:2c:6c:95:f6:ba:38:f4:88:6a:f0:ec:c4:a2:5f:
                    4c:70:d1:22:94:1a:8e:bf:ef:96:1c:53:8e:80:f1:
                    be:88:fc:30:cd:64:55:30:ef:14:3b:dd:2c:27:52:
                    db:26:7e:5e:d7:62:c2:b8:8d:5b:1e:be:28:bd:93:
                    78:dd:f6:72:f1:de:41:75:64:ad:6a:fe:60:14:8b:
                    88:45:73:a6:a8:c6:97:d4:18:7b:87:bf:31:1c:2c:
                    b3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1A:AF:2A:9A:A4:36:CE:B6:0E:56:23:62:E9:02:24:D7:F9:A3:1F
            X509v3 Authority Key Identifier:
                keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:4e:21:4a:65:0e:c0:85:d1:ae:fd:51:e5:2d:5c:5b:c2:d2:
         df:94:86:b6:0b:37:e5:20:84:71:b0:6d:52:67:a4:a3:a7:a7:
         f3:f1:4b:31:73:4d:03:b6:f7:0e:df:a7:15:94:5c:9c:44:db:
         31:6c:31:26:af:8d:eb:44:a8:50:aa:87:ea:de:10:54:72:94:
         fb:2e:14:81:11:77:c8:78:43:b4:84:d2:ea:e9:aa:2e:84:d5:
         ee:7f:2c:0b:54:be:9e:af:c2:d0:50:62:c4:03:2a:35:99:84:
         2e:0a:14:29:18:b8:0f:71:eb:2a:6e:fd:69:46:16:19:ee:c6:
         e6:c3:b0:4f:d5:e4:d8:8b:69:ce:22:79:59:5e:45:95:e5:a3:
         aa:51:37:b1:da:d5:49:08:c3:4a:ac:f3:91:53:c9:5c:2a:0d:
         20:76:39:d9:9f:00:40:90:11:9f:e2:4c:1f:42:2a:3c:50:dc:
         1e:bb:17:a8:6a:63:88:0e:35:4f:ed:4b:85:59:d8:bb:aa:cc:
         e3:46:19:db:19:cd:1f:c3:9a:d9:e0:a8:f6:74:05:28:a0:0f:
         93:f1:fd:0a:ca:37:5b:aa:85:6a:da:32:20:2a:c1:79:b6:69:
         6b:4b:ed:50:53:52:18:1e:4d:13:f3:b0:94:62:df:08:c3:b8:
         5c:c3:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:43 2026 by rpki-client