Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
File:                     ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json)
Hash identifier:          HRMmxPevC1vk20xzpiuSRLeIVp8C4+5M67ZeVcWopts=
Subject key identifier:   A2:D9:61:A6:C4:18:78:5B:AB:98:FF:4D:ED:A4:F8:3B:66:25:61:B1
Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
Certificate issuer:       /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
Manifest number:          020C
Signing time:             Wed 13 May 2026 03:05:02 +0000
Manifest this update:     Wed 13 May 2026 03:05:02 +0000
Manifest next update:     Wed 20 May 2026 03:05:02 +0000
Files and hashes:         1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: KZAffPn5g6be+6T3EavNO0xkAAJBx/DMmei2ASyaLTM=)
                          2: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: IBvzA5r6hVshNungWhQmp5lB9eEIYNrjugpKnBqI56I=)
                          3: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: b/Saiu1AabxrsPj47AXLm3MK1rkDbyAOEnOPk0nFsqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
                          rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
        Validity
            Not Before: May 13 03:05:02 2026 GMT
            Not After : May 20 03:05:02 2026 GMT
        Subject: CN=6a03ea5e-6ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:6c:d0:03:7a:28:49:58:80:19:0f:0d:11:
                    75:8f:f3:f9:8b:1f:7b:a9:66:a1:5c:76:f8:fe:03:
                    f6:19:d9:3e:b4:35:5a:7f:ff:c4:58:fe:2f:1d:d2:
                    80:67:cc:67:3e:02:d5:49:4f:36:40:fd:de:f6:f5:
                    27:a3:de:1a:69:21:0f:83:b3:3b:98:2b:46:2b:ad:
                    80:6f:54:29:b8:fb:21:38:12:72:19:e1:53:91:6f:
                    c5:7f:00:6a:ff:b2:82:97:76:95:f0:00:6f:b2:1e:
                    22:1c:0f:fa:1f:c9:b1:7e:f2:9f:b5:20:9f:79:41:
                    49:d6:e6:bb:db:68:6d:d1:a1:b0:68:ce:23:53:d8:
                    76:8e:21:11:5d:32:c6:79:8e:06:cb:1b:8d:3e:77:
                    f1:d1:35:7b:5e:18:51:61:a6:dd:b8:e5:2e:f3:1e:
                    fc:80:0f:32:49:d2:80:1d:a6:a0:e4:0a:01:b1:78:
                    9b:78:26:e7:e2:5e:1e:9e:b2:2f:4b:b1:3d:11:f2:
                    41:e7:f6:07:66:12:19:d0:fb:f8:7c:97:0b:19:3a:
                    be:65:33:37:b2:59:87:29:8a:80:32:c1:a3:3b:c6:
                    65:25:e7:cb:63:b8:76:25:37:e7:d2:ef:3b:26:a1:
                    16:87:60:f1:b1:93:59:f7:ff:34:00:4e:40:7e:c3:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D9:61:A6:C4:18:78:5B:AB:98:FF:4D:ED:A4:F8:3B:66:25:61:B1
            X509v3 Authority Key Identifier:
                keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e8:e5:bb:a1:57:d7:85:c2:07:c8:6d:9e:ff:26:ce:38:59:
         dd:42:b9:0a:14:49:c5:4c:15:2d:47:8c:49:25:e6:7a:fc:06:
         2d:2c:67:1b:7c:c3:a2:b4:0c:fb:a8:11:a2:cd:b8:33:ef:bc:
         25:a5:cb:dd:b4:19:c0:ed:89:ae:49:b9:2b:1e:35:7d:85:bf:
         49:25:a4:52:86:0d:24:fd:de:9b:2c:62:27:e1:9f:22:d9:7f:
         46:3d:c5:4a:9d:91:60:1f:fa:37:eb:37:8c:4b:0a:33:04:46:
         83:69:28:23:ba:f2:ef:a3:5e:2e:0d:95:34:f5:bc:76:39:73:
         fc:86:0a:d7:cf:43:e6:74:56:7e:bd:7c:f9:16:73:bf:32:72:
         28:94:8d:4c:50:06:3b:96:52:8e:a2:bd:e9:28:ec:4b:05:9b:
         50:a0:a0:8b:09:be:bf:ca:e4:97:f7:d1:28:1e:29:1a:be:1b:
         93:90:d4:df:66:34:c7:5d:ef:df:ab:b6:82:2b:39:66:ab:ac:
         7f:dd:32:e9:fc:22:fb:0e:6f:c0:01:bf:89:84:43:ef:d8:4b:
         07:63:02:a5:2d:2a:37:95:66:38:27:14:3d:4c:e3:54:f6:50:
         02:6f:e4:03:17:ed:33:71:0f:2d:85:80:00:77:f1:4b:2a:88:
         86:0b:9d:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD
Qjg4MkQyQzkwHhcNMjYwNTEzMDMwNTAyWhcNMjYwNTIwMDMwNTAyWjAYMRYwFAYD
VQQDEw02YTAzZWE1ZS02ZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv7Rs0AN6KElYgBkPDRF1j/P5ix97qWahXHb4/gP2Gdk+tDVaf//EWP4vHdKA
Z8xnPgLVSU82QP3e9vUno94aaSEPg7M7mCtGK62Ab1QpuPshOBJyGeFTkW/FfwBq
/7KCl3aV8ABvsh4iHA/6H8mxfvKftSCfeUFJ1ua722ht0aGwaM4jU9h2jiERXTLG
eY4GyxuNPnfx0TV7XhhRYabduOUu8x78gA8ySdKAHaag5AoBsXibeCbn4l4enrIv
S7E9EfJB5/YHZhIZ0Pv4fJcLGTq+ZTM3slmHKYqAMsGjO8ZlJefLY7h2JTfn0u87
JqEWh2DxsZNZ9/80AE5AfsMpnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKLZYabE
GHhbq5j/Te2k+DtmJWGxMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx
RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw
c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT
UkV5OXJzdnVDTTdMaUMwc2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACujlu6FX14XCB8htnv8mzjhZ3UK5ChRJxUwVLUeMSSXmevwGLSxnG3zDorQM
+6gRos24M++8JaXL3bQZwO2Jrkm5Kx41fYW/SSWkUoYNJP3emyxiJ+GfItl/Rj3F
Sp2RYB/6N+s3jEsKMwRGg2koI7ry76NeLg2VNPW8djlz/IYK189D5nRWfr18+RZz
vzJyKJSNTFAGO5ZSjqK96SjsSwWbUKCgiwm+v8rkl/fRKB4pGr4bk5DU32Y0x13v
36u2gis5Zqusf90y6fwi+w5vwAG/iYRD79hLB2MCpS0qN5VmOCcUPUzjVPZQAm/k
AxftM3EPLYWAAHfxSyqIhgudYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:30:25 2026 by rpki-client