Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
File:                     08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json)
Hash identifier:          Map0wYOQFPCl79gOdUNid1VhrZ7q+DfKVB80WXIZgBU=
Subject key identifier:   08:D8:91:20:C0:FD:1F:CC:45:C0:35:62:AB:ED:66:C6:52:89:08:24
Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
Certificate issuer:       /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Certificate serial:       0BF7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
Manifest number:          0BCB
Signing time:             Tue 12 May 2026 19:03:29 +0000
Manifest this update:     Tue 12 May 2026 19:03:28 +0000
Manifest next update:     Tue 19 May 2026 19:03:28 +0000
Files and hashes:         1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: Ca7RLGNd5+lHfSfGlQ7ZUQbeEGUdHaykS3Fw+rOvO1U=)
                          2: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: 84SKbcYJYQpkdPhgKDfKJZGQMSbK1foRAoBLyJS3rw8=)
                          3: DE437646F8A911EB98242219C4F9AE02.roa (hash: C2BWvQ+C/+Sn9VLF0lBp78gdjNkGbixDoXI6j4xdzH0=)
                          4: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: RFpssbMsMYAgstv88gTpUDNVcPFKgB5u5+7fNcGeiow=)
                          5: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: zr9WgE2KmAHV01j5bTwejKCZJZ/f953lXlW3VV/8nH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
                          rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3063 (0xbf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
        Validity
            Not Before: May 12 19:03:28 2026 GMT
            Not After : May 19 19:03:28 2026 GMT
        Subject: CN=6a037981-ca4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:3e:b6:d0:de:66:3a:5f:b9:9e:7d:4f:40:
                    1a:f8:19:b9:8d:c1:81:41:f3:39:98:82:3a:fd:f7:
                    ee:d1:92:7a:eb:ab:cd:51:90:f3:24:17:cd:d1:c1:
                    1c:b6:cc:66:56:9a:12:a8:92:23:61:ad:84:3c:b7:
                    94:2f:bd:47:18:e1:4f:83:f8:7e:a5:06:b3:92:1f:
                    9a:5f:29:b5:80:a8:f1:b3:cd:c9:b0:d6:f3:61:0c:
                    ec:71:c8:b2:31:25:be:8b:94:4f:1c:d8:b8:ec:d9:
                    53:dd:78:0d:56:51:47:c8:e4:24:86:ff:21:34:20:
                    0e:ee:9e:4a:b3:36:8c:e9:00:ad:7b:4a:36:a4:f6:
                    30:02:c7:75:ee:5a:99:8c:42:3f:6d:1d:3e:5c:82:
                    ae:7a:fe:10:e8:d2:ef:2c:81:98:a3:2c:d3:7d:fa:
                    c5:f1:96:6f:a3:40:a5:cb:9e:42:67:a7:41:53:13:
                    6c:38:7f:0b:17:0d:9b:50:ba:67:7e:a3:bd:3b:7d:
                    f6:19:1f:81:5a:41:b0:b1:d7:d6:f9:b7:86:32:55:
                    44:17:d6:33:53:56:db:18:5c:fc:c6:f9:61:af:cc:
                    30:d1:c3:f9:85:be:aa:38:97:97:51:b2:c6:e0:d9:
                    27:10:f9:7c:36:4a:46:ff:1a:2b:cc:f8:f2:9d:71:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D8:91:20:C0:FD:1F:CC:45:C0:35:62:AB:ED:66:C6:52:89:08:24
            X509v3 Authority Key Identifier:
                keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:59:a0:67:23:b9:8a:fc:e3:71:8f:59:75:b9:72:a1:aa:a1:
         95:95:06:7c:0d:0c:9c:9d:95:7e:53:34:7e:91:95:dc:5a:ab:
         7a:81:b2:06:18:fa:78:2d:5f:dc:f0:50:dd:2d:bf:76:8a:ea:
         7f:e0:35:cc:71:2d:08:2d:da:df:47:1a:2c:0b:92:cf:78:7a:
         a6:80:bf:af:8e:30:9b:55:d5:20:66:1e:ac:5f:4e:5b:87:fc:
         1b:ef:77:3b:62:2f:ed:f7:50:03:c1:77:45:4d:d8:79:ee:03:
         f3:7b:ae:55:04:68:2f:93:b1:bf:da:15:57:23:da:c3:02:55:
         06:e0:ed:c0:8f:cd:77:be:c3:ac:8b:39:c8:d7:35:d3:72:6a:
         f1:c1:6d:8f:9b:05:cd:ba:0e:67:26:49:bb:22:57:55:1c:e1:
         84:37:be:16:29:04:46:c8:ae:fe:b7:99:11:c5:16:c0:08:3b:
         5b:3d:b5:a8:86:8d:85:5c:ec:30:71:b4:5e:56:8d:e7:a3:80:
         7d:6a:28:d7:d7:da:d8:c2:57:fd:98:ef:33:5b:a1:71:b4:e1:
         06:d8:1e:28:3e:96:f5:ad:ae:24:31:0c:10:a0:f3:17:98:88:
         31:a8:4c:b9:61:af:91:71:63:44:18:46:87:cf:8d:af:bb:3a:
         91:21:49:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:17:36 2026 by rpki-client