Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
File:                     ZVgfndzt1kYkkalmT_KWJlal-FQ.mft (raw, json)
Hash identifier:          2/3ORDl/1J9ticsseQgpHvpxaWVviRGhUvXZfuThWHQ=
Subject key identifier:   65:AA:1D:32:97:8D:AA:97:19:82:E0:DB:93:20:6C:D3:A6:7E:66:05
Authority key identifier: 65:58:1F:9D:DC:ED:D6:46:24:91:A9:66:4F:F2:96:26:56:A5:F8:54
Certificate issuer:       /CN=A913EECE/serialNumber=65581F9DDCEDD6462491A9664FF2962656A5F854
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
Manifest number:          06
Signing time:             Wed 13 May 2026 09:22:17 +0000
Manifest this update:     Wed 13 May 2026 09:22:17 +0000
Manifest next update:     Wed 20 May 2026 09:22:17 +0000
Files and hashes:         1: ZVgfndzt1kYkkalmT_KWJlal-FQ.crl (hash: m7hmiMFMxh55nPQY/AEHznwWCU4X/zOfmF9XyIHoxN8=)
                          2: 4D03668449E711F1BCBB7A79B5833773.roa (hash: LGCooesPA4j4gXzOKKJURalYXy31FTNPJfPPUMRN1nE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.crl
                          rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 09:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EECE, serialNumber=65581F9DDCEDD6462491A9664FF2962656A5F854
        Validity
            Not Before: May 13 09:22:17 2026 GMT
            Not After : May 20 09:22:17 2026 GMT
        Subject: CN=6a0442c9-01cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:71:36:f7:d2:3b:c9:95:5d:c4:5c:a7:b7:20:
                    42:66:5e:e5:3f:f0:e8:3f:cc:70:8e:99:45:ff:ed:
                    fe:e0:de:46:23:df:ef:c2:63:6e:33:4b:f0:b9:16:
                    a0:13:fd:e3:49:1a:d1:ca:f8:f7:ba:e5:2a:9d:5a:
                    6a:32:23:0b:cf:77:0b:0e:04:5c:50:ae:15:5d:c3:
                    17:c7:be:ee:14:3a:b5:b0:31:dd:88:4d:c4:18:ae:
                    e5:7c:ce:ce:c5:f3:e2:3d:31:b3:64:65:73:31:ec:
                    88:79:02:f2:9b:90:43:09:e3:c1:42:37:a7:91:90:
                    dc:06:cc:76:c2:4a:3b:62:0e:df:d8:c7:83:37:00:
                    0a:68:da:2d:56:02:1d:d0:64:82:45:85:a8:b9:c5:
                    50:ac:e8:6a:59:91:14:78:98:c1:25:0a:08:15:09:
                    38:53:72:8e:bd:a2:ac:87:ba:cc:7d:94:0d:48:55:
                    30:87:e9:2a:96:99:37:02:32:b1:43:5e:f9:ec:d3:
                    3d:68:26:50:4b:02:3a:b9:09:64:35:b1:32:09:1a:
                    ac:51:30:ac:61:0a:fa:81:92:07:e1:1f:35:bf:af:
                    ff:ab:d1:a6:5c:94:93:98:8e:32:f3:74:32:5c:a7:
                    6f:1b:9c:88:e8:6e:56:42:8f:df:17:d7:e3:e4:ae:
                    e0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AA:1D:32:97:8D:AA:97:19:82:E0:DB:93:20:6C:D3:A6:7E:66:05
            X509v3 Authority Key Identifier:
                keyid:65:58:1F:9D:DC:ED:D6:46:24:91:A9:66:4F:F2:96:26:56:A5:F8:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVgfndzt1kYkkalmT_KWJlal-FQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EECE/612E3FB249E211F1BB80C78FB0833773/ZVgfndzt1kYkkalmT_KWJlal-FQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:de:b7:96:79:76:23:58:b2:da:ee:67:1c:d5:01:88:68:a0:
         3b:08:4b:2b:14:d1:4b:5c:53:c3:5a:1f:90:97:b8:39:60:b0:
         30:5e:b6:62:42:01:e3:e3:9b:84:90:db:a0:28:92:05:2a:78:
         04:fc:be:04:64:ac:da:63:a8:52:3f:27:28:e1:d7:16:36:f7:
         4f:9a:3d:54:e6:b7:31:36:ad:f3:cc:9e:1b:1e:67:5a:a9:af:
         15:b9:3e:70:85:21:c8:f0:ed:3e:db:6a:00:18:65:f1:a2:61:
         a4:60:cf:27:93:40:4f:d0:83:e5:93:88:d2:80:2f:7c:17:9f:
         9c:c3:25:34:db:8e:17:97:72:da:01:c2:6f:d1:f2:0f:b5:21:
         84:f1:3b:3f:38:57:e8:e2:9c:43:06:f0:68:a9:89:c9:e5:b9:
         f7:2a:67:fa:d0:a5:5a:99:80:9d:76:52:f5:3d:b5:f0:f5:88:
         2c:48:06:b8:3e:41:88:66:47:4b:61:a9:8c:1e:ca:df:b9:c7:
         32:29:c2:4b:11:6d:da:bf:d4:cd:08:41:57:da:a0:9a:a6:da:
         65:e9:c8:72:08:eb:4a:81:0d:fa:0c:ee:76:e6:f8:47:cb:91:
         e3:ba:eb:f3:b1:e3:32:a7:f2:97:97:7a:6e:84:87:32:cc:1c:
         eb:af:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:10:56 2026 by rpki-client