Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
File:                     z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft (raw, json)
Hash identifier:          nAG0xZYTx3fqYhCjQ+nXUFDl7aA3z1SIuWvs+AUlzfs=
Subject key identifier:   9C:B7:27:FA:73:58:ED:B5:11:7B:E2:7B:5E:11:C2:80:C8:A8:5A:AD
Authority key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97
Certificate issuer:       /CN=A913CE18/serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
Manifest number:          5A
Signing time:             Wed 13 May 2026 08:13:21 +0000
Manifest this update:     Wed 13 May 2026 08:13:20 +0000
Manifest next update:     Wed 20 May 2026 08:13:20 +0000
Files and hashes:         1: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl (hash: 4jxeflpb4A4I0qHjVkCqdIOrwceBdESCmW/IaFc7Wko=)
                          2: 66FA3E10C68311F0A13F9748C4F9AE02.roa (hash: qhmDYrXSka0BnnAzbzb+vh6r8WiWcCMdpJjXHDEOqUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl
                          rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
        Validity
            Not Before: May 13 08:13:20 2026 GMT
            Not After : May 20 08:13:20 2026 GMT
        Subject: CN=6a0432a1-095d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:a7:bd:28:cb:d3:12:44:5f:88:f6:56:a8:
                    8a:7c:a1:fd:04:c6:9d:2a:a7:a8:d1:32:48:3d:d3:
                    38:ec:4e:09:ab:d4:ab:17:4a:7d:25:6e:5e:23:93:
                    22:86:ee:da:a7:40:6a:56:eb:38:d8:0b:9d:39:38:
                    cb:5c:1b:34:1f:76:60:28:df:f7:92:b0:fb:f3:7d:
                    e1:fb:aa:38:41:0e:ca:9f:eb:91:98:b9:f9:e0:8a:
                    14:ca:54:75:be:44:9b:9a:52:81:6c:39:50:3a:b9:
                    e3:74:cf:0f:0d:75:27:ba:b6:65:96:6a:64:17:c4:
                    a8:29:88:c2:e7:9e:0c:86:c8:da:47:a8:fc:a8:6a:
                    2b:f3:5a:42:15:57:c1:e1:ca:6a:4a:c1:c4:14:9f:
                    84:ff:81:14:ef:1d:ef:f4:8d:66:16:43:0e:5a:bd:
                    00:1f:a0:f4:0c:95:7d:74:8e:9f:ba:48:d7:0a:dc:
                    3b:b8:9d:34:9b:96:91:75:2d:6a:f5:a6:3d:50:90:
                    1a:4a:39:d8:05:7c:de:6c:d0:7c:01:5f:0b:a3:cb:
                    db:36:be:b8:62:d7:58:e8:df:a7:c2:ba:c5:49:39:
                    88:22:04:79:9c:f4:71:b4:81:be:49:90:b8:f8:2d:
                    69:47:32:cb:ce:1c:62:a4:47:ce:d9:2a:16:6a:39:
                    f0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B7:27:FA:73:58:ED:B5:11:7B:E2:7B:5E:11:C2:80:C8:A8:5A:AD
            X509v3 Authority Key Identifier:
                keyid:CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:26:ee:c5:6a:bf:1c:4d:0f:2c:54:2b:f6:13:69:49:61:c3:
         03:e0:bc:67:2e:66:c8:d3:a9:e0:be:98:6b:b6:db:f3:cb:4d:
         ff:77:9a:0c:27:41:54:c0:eb:cb:ee:05:77:f8:87:c4:93:b3:
         8c:0d:45:f1:1a:ba:55:2a:80:e6:e2:dc:c7:4d:f0:e1:71:18:
         cf:29:1c:3e:fe:f0:af:e8:4f:47:0c:ef:9d:b6:92:6c:14:dd:
         d8:f6:ab:e2:b6:ce:1d:00:fe:6a:65:94:41:5a:e1:89:df:61:
         ef:01:17:41:74:74:0b:f4:0a:cc:f5:99:33:67:eb:8f:a4:14:
         41:e5:b4:ab:b7:84:b2:38:6a:c8:87:c9:7d:4d:71:42:37:06:
         ca:de:e4:46:f9:be:2d:32:da:97:65:29:9c:90:b5:1d:07:d6:
         01:d7:95:f0:ed:6d:36:7b:a2:9d:00:2b:2e:63:a9:dd:d6:c3:
         36:d1:bb:7e:42:f6:69:b8:27:4a:ac:5b:95:b2:b1:8c:37:d4:
         da:e2:31:63:01:f6:33:b1:1d:e2:2d:ad:cb:8d:12:9f:5b:3e:
         0a:e0:c8:fe:01:e3:1d:90:e4:71:ca:8f:95:00:88:c8:51:0d:
         15:3f:af:70:30:60:38:03:70:f7:04:49:b5:c4:48:2c:b5:b1:
         88:2f:0f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:07:25 2026 by rpki-client