Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
File:                     zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json)
Hash identifier:          dAyQOTKZp7CJUcvUVAIfXxdT4/bCvP16HC8kXkfHGNs=
Subject key identifier:   B8:A3:EC:E6:96:1A:71:73:99:78:75:A8:01:56:3E:E5:48:DC:92:4D
Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
Certificate issuer:       /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
Manifest number:          0183
Signing time:             Wed 13 May 2026 04:56:29 +0000
Manifest this update:     Wed 13 May 2026 04:56:28 +0000
Manifest next update:     Wed 20 May 2026 04:56:28 +0000
Files and hashes:         1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: xZZ745lxUnS10mfgeIHtkSRZ8yHmqWTpifY1W5sybpA=)
                          2: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: UeaRLdDzY1ShESbWYDfFd7UbKiVJI/tCLkGrM3fnfPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
        Validity
            Not Before: May 13 04:56:28 2026 GMT
            Not After : May 20 04:56:28 2026 GMT
        Subject: CN=6a04047d-eed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3d:62:32:49:35:e0:eb:3a:93:e4:49:40:ce:
                    3f:75:83:f5:29:b7:ae:3a:b6:1b:12:dd:f4:d9:0e:
                    40:f3:57:15:ba:98:ec:a7:d4:bf:7f:8a:5e:67:80:
                    7d:68:b0:e7:42:08:3e:29:e0:19:18:75:7e:0c:74:
                    b6:ac:88:4b:f6:4f:00:78:c4:1f:6b:86:96:4c:bf:
                    ae:41:74:2a:ef:45:93:7c:59:23:52:b3:b4:86:35:
                    a8:6f:20:25:4d:3a:49:bb:b4:8d:d3:37:1a:dd:04:
                    a6:4c:75:1b:82:12:35:51:1a:b8:1b:80:e3:14:36:
                    1e:e0:b0:2b:c1:92:35:d2:f9:59:be:da:33:fd:0a:
                    5c:05:60:ec:08:c1:be:53:8f:f7:a6:35:0a:28:ae:
                    ed:f6:ed:7a:ea:a6:de:4e:b6:c0:10:21:74:a5:c2:
                    96:0a:22:95:31:93:27:68:28:36:d1:27:71:dc:a1:
                    0a:d2:85:df:3a:6d:c8:29:a4:fd:e2:8f:7d:18:b9:
                    e9:e0:9f:e1:31:46:cb:dc:c2:98:66:42:79:c9:f8:
                    75:5c:23:b0:26:6c:96:26:fb:7f:df:d3:71:84:c9:
                    0e:2e:6a:31:c2:ca:c3:b0:ae:0e:24:d0:ea:eb:66:
                    fa:2f:2d:cd:cf:3c:94:7a:2e:48:01:51:90:7f:2e:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A3:EC:E6:96:1A:71:73:99:78:75:A8:01:56:3E:E5:48:DC:92:4D
            X509v3 Authority Key Identifier:
                keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:1e:c8:19:6d:aa:e0:26:a8:30:c2:d8:a9:f3:c1:75:b9:ee:
         d2:c6:69:ad:15:36:eb:d4:51:ac:13:b6:c5:b7:ce:3a:92:08:
         69:31:26:25:b7:e2:e5:a8:f5:3a:12:9c:49:6e:b1:9a:d6:47:
         88:1e:9b:de:ee:8b:69:af:55:39:e9:02:6d:2e:07:6c:52:10:
         fb:50:e9:8a:76:bd:bc:fc:0c:d8:f2:f1:30:b7:71:88:a9:2a:
         9d:fc:17:61:0c:39:b3:24:41:3a:6f:37:3f:55:e0:4c:ef:61:
         8a:6d:a2:af:a5:8a:30:0b:0b:69:9b:4e:4c:d3:40:4b:8d:d1:
         f2:9b:60:bc:de:96:c8:87:9e:00:15:aa:62:95:7d:3c:67:4a:
         34:c7:ec:6f:a8:4d:f6:42:8b:a2:dd:e7:bb:44:99:73:0d:df:
         dd:09:19:b7:22:c9:69:6a:b7:f8:c9:eb:1e:4e:af:27:10:f7:
         b8:14:d0:d1:ea:49:bf:e0:a5:3f:a3:d8:2e:61:a9:91:0b:c4:
         5f:0d:3a:89:c7:e0:6c:3e:fc:12:d4:db:35:46:97:23:aa:f4:
         ab:1c:15:8e:59:c4:dc:03:de:74:12:d8:51:ef:52:99:97:e2:
         89:4c:1c:a4:3d:04:5b:36:4e:74:28:cc:70:8f:da:13:a3:ab:
         30:df:d4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:13:33 2026 by rpki-client