Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft
File:                     z64jGpiXN_YdrZV8wk0hNYWBjtw.mft (raw, json)
Hash identifier:          x3bi3+H0I/lIFeFG+XZHVOLLL2ND5yAheRDJ+QIYQdk=
Subject key identifier:   CA:E2:26:43:49:92:8C:6D:FC:13:70:22:D6:35:AA:DD:28:F3:6C:E8
Authority key identifier: CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC
Certificate issuer:       /CN=A914B45F/serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft
Manifest number:          020B
Signing time:             Wed 13 May 2026 03:03:30 +0000
Manifest this update:     Wed 13 May 2026 03:03:30 +0000
Manifest next update:     Wed 20 May 2026 03:03:30 +0000
Files and hashes:         1: z64jGpiXN_YdrZV8wk0hNYWBjtw.crl (hash: weo65yKlVL8WsXk1fK9DKpES+GnaO8PemAFh5EEp7JA=)
                          2: 578C92D62F6611EE9CAFAA58C4F9AE02.roa (hash: z9CfvJM12QlNZXNF44p70rHwRjByPI+ZqLnmCsquLHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl
                          rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B45F, serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC
        Validity
            Not Before: May 13 03:03:30 2026 GMT
            Not After : May 20 03:03:30 2026 GMT
        Subject: CN=6a03ea02-35db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7e:44:cd:da:1e:f1:c8:e6:fb:d7:f9:9d:f6:
                    28:24:7f:7d:b4:91:c0:9b:ac:6b:76:87:dd:42:ae:
                    ac:7b:10:58:bc:89:90:f4:89:d7:53:78:65:d6:ed:
                    99:75:c3:d5:b8:75:f7:d4:ce:8a:a6:e3:c0:8f:bd:
                    5f:d4:88:8e:60:5a:91:69:67:bd:91:45:0d:a0:f6:
                    64:87:3d:a6:74:e3:1b:bb:18:8e:b3:bf:fb:db:9e:
                    14:7d:e2:90:69:29:71:af:81:1d:97:cf:ac:88:cc:
                    21:0f:b4:5a:8f:2c:60:fd:e4:b8:b5:36:70:c4:d6:
                    a7:7a:c5:0d:18:33:b8:f9:9e:df:db:45:56:35:b0:
                    9d:a7:2d:44:36:a2:95:ea:4f:0f:7a:85:df:4a:e7:
                    45:53:cb:ff:bf:17:19:35:6a:d2:b5:9e:af:03:4d:
                    d3:fa:e2:c4:b2:ef:e4:15:00:e3:8e:12:7e:55:9c:
                    7d:c9:ee:84:24:e1:81:7b:8e:be:c8:56:1e:a6:66:
                    c4:86:f1:d1:19:7c:07:6c:b3:11:d2:08:2f:c0:38:
                    61:4a:03:d9:18:b8:f6:c6:0c:e3:75:b2:7f:68:41:
                    24:6d:a8:80:bb:7a:76:32:67:45:ab:f5:ea:26:08:
                    59:e9:a5:eb:31:12:1a:f4:36:a6:c1:ac:00:fd:55:
                    a9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E2:26:43:49:92:8C:6D:FC:13:70:22:D6:35:AA:DD:28:F3:6C:E8
            X509v3 Authority Key Identifier:
                keyid:CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:df:21:43:08:3e:ef:f8:bc:4e:ea:94:45:c5:43:4e:3f:ab:
         0c:77:bd:4e:03:4a:dd:62:2c:f2:fd:9a:41:36:09:60:a3:1e:
         d3:6b:0d:78:c4:d5:c7:18:7b:a2:a2:85:dc:fc:d5:8f:77:e1:
         ec:8b:7d:94:83:00:33:44:02:6a:f3:4d:c1:45:a5:9c:60:af:
         0a:e3:e9:0e:29:7a:55:06:09:35:13:f1:14:b6:8d:6d:32:55:
         00:8a:f2:69:51:7c:69:da:dd:c2:d1:17:06:b0:53:30:6b:a4:
         c9:7d:3c:8b:f0:10:a9:86:bf:6b:a5:d9:0c:12:61:18:a6:8b:
         64:80:6a:d4:c2:8b:a4:27:9a:97:7e:ee:6d:f4:72:29:b9:0d:
         1d:a5:d9:ca:3c:a4:e5:e5:88:48:e9:df:7b:60:b8:64:a9:5c:
         b5:14:c9:5b:6d:4a:bc:a0:3a:3b:16:59:3c:eb:de:4d:d0:2c:
         12:e9:19:0c:a0:6d:04:74:90:f9:52:fa:29:9d:eb:fb:98:78:
         30:ab:21:55:29:d5:2f:4e:3b:ab:93:d7:ca:40:b8:96:7c:7f:
         d6:e8:37:1d:7d:ac:df:16:83:12:a1:a2:57:21:d3:1c:6a:f2:
         f5:4b:fd:b3:cb:6e:1d:1e:b7:12:94:37:0b:dd:de:db:75:0e:
         a2:52:58:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:11 2026 by rpki-client