Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
File:                     Z0fEVgFDfWEgWyv7QGfO0i6358E.mft (raw, json)
Hash identifier:          s0a6UEFr1YU+FEx12NYudAs1sVHqWe8TMubpxjgUVJE=
Subject key identifier:   78:12:43:09:D5:E7:13:10:0A:1C:37:4F:40:EC:E8:43:65:31:F1:38
Authority key identifier: 67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1
Certificate issuer:       /CN=A914AA99/serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
Manifest number:          5F
Signing time:             Mon 11 May 2026 08:12:13 +0000
Manifest this update:     Mon 11 May 2026 08:12:13 +0000
Manifest next update:     Mon 18 May 2026 08:12:13 +0000
Files and hashes:         1: Z0fEVgFDfWEgWyv7QGfO0i6358E.crl (hash: F22aGK0gsy6vIkdqe8UeufO9Y6Kcs0vbqkwE4jdTtf8=)
                          2: 734D9ACCC2D711F09CE49A22C4F9AE02.roa (hash: oYZWWWudX6hmiWeAE8vtLuoPPfGME7k5YKBNL4ygl9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl
                          rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AA99, serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
        Validity
            Not Before: May 11 08:12:13 2026 GMT
            Not After : May 18 08:12:13 2026 GMT
        Subject: CN=6a018f5d-0da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:dc:c9:e8:be:da:22:8c:24:88:57:5f:cb:
                    42:96:7f:15:70:cf:5a:54:0a:af:18:87:da:e0:8d:
                    89:7c:ed:3d:4f:33:c8:43:2b:48:8d:2e:e4:fd:da:
                    6f:ad:e3:a2:cc:b2:1d:11:78:4b:8b:8e:88:f8:22:
                    3c:b5:31:b3:00:5a:53:96:b6:c7:f3:fe:c5:7e:53:
                    a6:50:52:7d:67:fc:5f:2a:55:7a:c4:52:05:ee:bd:
                    5b:97:e3:91:f3:c3:51:42:84:71:5e:67:6d:d8:ac:
                    d9:34:fd:a5:32:f4:70:95:6f:37:b3:52:fb:9f:f8:
                    b8:44:51:c4:bd:da:55:35:d2:39:d9:a5:23:81:36:
                    eb:66:f0:78:a9:0e:8a:41:a1:8e:15:8d:ed:46:86:
                    5c:10:76:75:93:db:70:15:5b:92:33:f6:f6:d8:b4:
                    5c:b3:39:f8:81:a2:f2:a8:ba:29:7f:cd:ae:9b:d2:
                    51:94:1f:a9:4e:82:04:7c:84:71:4c:69:4d:0b:ec:
                    c4:c3:f2:7b:9a:bb:39:fc:fe:c5:88:b2:72:44:c6:
                    c5:2c:1f:67:e7:63:7b:54:47:7e:dc:ac:51:c7:a2:
                    b2:bb:2e:12:d8:63:58:c2:22:69:6a:e3:b1:78:51:
                    de:94:38:dc:04:5f:85:9e:38:00:08:ee:cd:61:64:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:12:43:09:D5:E7:13:10:0A:1C:37:4F:40:EC:E8:43:65:31:F1:38
            X509v3 Authority Key Identifier:
                keyid:67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:31:0c:47:47:d8:78:32:13:3e:a0:30:d4:76:65:6e:66:05:
         40:78:38:70:e2:b0:ba:33:6c:42:19:cd:1b:04:e9:b6:fb:30:
         96:3f:36:cd:6b:68:99:d3:6b:ca:20:3e:7e:bc:f3:da:56:46:
         8b:7d:12:ae:9d:fe:f4:2a:98:1c:58:32:aa:0a:83:dd:4c:9c:
         4a:69:9b:60:26:bf:74:04:1f:48:14:7b:eb:c7:4d:0d:a1:47:
         32:73:7d:7f:61:42:a2:db:5b:94:ef:ac:88:10:d7:75:61:2e:
         9c:26:ef:ce:cf:23:b5:16:a0:c9:f1:a5:36:86:c0:c9:f9:b9:
         e5:ef:2d:6b:24:0e:56:f2:2b:7a:7f:ca:65:76:14:a5:bf:d7:
         2d:84:5c:f5:3f:42:82:78:b6:c1:c1:2d:fb:a4:cb:65:2d:26:
         9a:fd:28:af:05:90:e6:ac:73:39:7f:70:bc:ee:ef:ce:0c:b1:
         63:71:fd:8c:1b:00:90:c3:26:c4:d1:c5:93:4f:62:36:ea:29:
         d3:9c:36:be:d4:27:9f:01:92:72:51:43:3c:d1:db:7d:5a:67:
         57:a8:4d:ea:7a:1b:41:23:44:de:c6:d4:9c:a7:b8:df:f8:68:
         08:29:15:13:c0:fd:44:3f:61:76:c9:20:a0:d8:3f:ce:1f:02:
         e5:34:70:b6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QUE5OTExMC8GA1UEBRMoNjc0N0M0NTYwMTQzN0Q2MTIwNUIyQkZCNDA2N0NFRDIy
RUI3RTdDMTAeFw0yNjA1MTEwODEyMTNaFw0yNjA1MTgwODEyMTNaMBgxFjAUBgNV
BAMTDTZhMDE4ZjVkLTBkYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDO6dzJ6L7aIowkiFdfy0KWfxVwz1pUCq8Yh9rgjYl87T1PM8hDK0iNLuT92m+t
46LMsh0ReEuLjoj4Ijy1MbMAWlOWtsfz/sV+U6ZQUn1n/F8qVXrEUgXuvVuX45Hz
w1FChHFeZ23YrNk0/aUy9HCVbzezUvuf+LhEUcS92lU10jnZpSOBNutm8HipDopB
oY4Vje1GhlwQdnWT23AVW5Iz9vbYtFyzOfiBovKouil/za6b0lGUH6lOggR8hHFM
aU0L7MTD8nuauzn8/sWIsnJExsUsH2fnY3tUR37crFHHorK7LhLYY1jCImlq47F4
Ud6UONwEX4WeOAAI7s1hZKa5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeBJDCdXn
ExAKHDdPQOzoQ2Ux8TgwHwYDVR0jBBgwFoAUZ0fEVgFDfWEgWyv7QGfO0i6358Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBQTk5LzBGMzdDODg2QzJE
MzExRjA5OUMwNjM4NkM0RjlBRTAyL1owZkVWZ0ZEZldFZ1d5djdRR2ZPMGk2MzU4
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWjBmRVZnRkRmV0VnV3l2N1FHZk8waTYzNThFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB
QTk5LzBGMzdDODg2QzJEMzExRjA5OUMwNjM4NkM0RjlBRTAyL1owZkVWZ0ZEZldF
Z1d5djdRR2ZPMGk2MzU4RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAnMQxHR9h4MhM+oDDUdmVuZgVAeDhw4rC6M2xCGc0bBOm2+zCWPzbNa2iZ02vK
ID5+vPPaVkaLfRKunf70KpgcWDKqCoPdTJxKaZtgJr90BB9IFHvrx00NoUcyc31/
YUKi21uU76yIENd1YS6cJu/OzyO1FqDJ8aU2hsDJ+bnl7y1rJA5W8it6f8pldhSl
v9cthFz1P0KCeLbBwS37pMtlLSaa/SivBZDmrHM5f3C87u/ODLFjcf2MGwCQwybE
0cWTT2I26inTnDa+1CefAZJyUUM80dt9WmdXqE3qehtBI0TextScp7jf+GgIKRUT
wP1EP2F2ySCg2D/OHwLlNHC2
-----END CERTIFICATE-----
Generated at Wed May 13 05:41:41 2026 by rpki-client