Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
File:                     ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json)
Hash identifier:          vEC3LMBR6JhZLawwl56zbA7/cwjcluyqf8Rm3T9JUJg=
Subject key identifier:   0F:87:85:7A:7D:13:1B:1E:6C:BB:82:E8:05:88:69:F2:0D:79:81:4B
Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB
Certificate issuer:       /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
Certificate serial:       08D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
Manifest number:          08C6
Signing time:             Tue 12 May 2026 20:29:39 +0000
Manifest this update:     Tue 12 May 2026 20:29:39 +0000
Manifest next update:     Tue 19 May 2026 20:29:39 +0000
Files and hashes:         1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: s8YnAaAfe2iDo1eEn4FEJtYvVIP9bEFalWDTObYahX8=)
                          2: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: hgHBm4hp3RapLpi/uDm+lqvL2Jv07HJ2pVNo82bX6vM=)
                          3: CCB2690EED0B11F0949792B43C6F56BC.roa (hash: CZgH9sRalQIh6CRftMF2d66cWrAC6h6CJtvjvDnCQhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl
                          rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2263 (0x8d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB
        Validity
            Not Before: May 12 20:29:39 2026 GMT
            Not After : May 19 20:29:39 2026 GMT
        Subject: CN=6a038db3-7c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:81:3a:f2:55:10:73:9c:ec:21:7f:21:e0:
                    c7:ab:86:38:47:27:bc:92:20:48:40:5c:b7:f2:f0:
                    76:7a:54:32:f1:d5:6f:2c:1c:85:cd:9d:3a:c4:54:
                    7a:ac:7b:0e:13:1c:75:45:b5:1f:68:d3:83:50:77:
                    42:28:25:35:8e:9e:3e:11:1a:e0:be:e9:82:3a:b2:
                    ae:27:41:8b:ce:92:6f:62:a0:f7:99:e4:1f:1c:d7:
                    c3:90:fb:b7:43:f2:62:ec:49:35:e3:09:01:5e:97:
                    4d:25:57:7e:8a:95:d7:d1:68:43:f6:7b:9a:51:13:
                    9c:d8:f4:fd:83:9c:d5:d8:09:ec:5a:16:b1:60:b5:
                    50:2e:93:f3:ca:97:17:ae:67:16:eb:77:ad:a1:34:
                    17:ac:38:31:9e:99:d5:a1:6f:b3:57:b2:aa:4e:ef:
                    66:52:be:75:50:85:24:4b:f5:fa:dc:fa:ab:c4:d1:
                    7a:7d:5a:86:d9:3d:30:b2:ae:42:f8:21:fc:56:b3:
                    6b:f3:d7:61:76:20:87:f9:00:93:8a:eb:23:7f:d5:
                    28:97:bc:37:94:62:e1:8e:b0:c0:cf:d2:8b:ff:58:
                    9a:0f:a0:49:85:50:61:1e:f7:93:99:ac:4c:0b:60:
                    09:a2:c1:ef:8e:af:29:29:d9:dc:d2:ff:82:f4:79:
                    6a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:87:85:7A:7D:13:1B:1E:6C:BB:82:E8:05:88:69:F2:0D:79:81:4B
            X509v3 Authority Key Identifier:
                keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a3:61:c8:7c:da:4a:f4:80:7a:02:60:2b:88:01:57:51:e8:
         b1:5e:37:63:ba:0f:96:ad:07:49:e8:b1:ba:e7:b0:96:43:90:
         5d:72:9b:83:90:01:d4:fb:62:86:c6:52:4c:61:d7:d0:ee:eb:
         01:91:cd:9e:38:d2:0d:7d:1d:0d:cc:ee:f0:17:b7:7a:1e:e5:
         33:85:97:fb:da:c7:7c:2d:6a:e8:49:d5:63:82:25:a5:51:fa:
         3f:7f:eb:0c:d7:64:7e:53:43:00:7a:65:5e:29:ae:53:8b:61:
         1c:06:26:3b:c0:21:42:5c:f9:93:45:70:3f:3f:af:78:b2:1b:
         7f:d3:39:8c:d7:22:8c:6d:6e:6b:f2:0e:c1:59:17:aa:a6:07:
         31:08:42:f0:37:0a:f2:5a:29:e0:98:aa:b8:0a:40:ae:37:e5:
         38:b3:ae:46:91:25:be:50:86:b0:0f:f2:55:da:80:70:f3:84:
         75:5e:e2:5d:dc:d6:9e:40:2b:03:11:75:11:9a:3a:cb:11:40:
         cf:b0:15:f4:99:f6:c2:93:28:50:ef:8f:2d:ca:08:69:13:97:
         43:4f:c6:cb:60:d4:a2:1d:48:a7:2a:d3:a9:45:18:b9:e1:82:
         be:26:b0:20:86:9a:b1:03:36:99:de:a9:5d:4f:bf:54:25:5d:
         0d:2b:0e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:27:52 2026 by rpki-client