Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
File:                     ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft (raw, json)
Hash identifier:          xXkFAK+lsqcXgJ0g/1bI5iYkuvOyZZVxybcxA36JbOM=
Subject key identifier:   AA:C0:6D:B0:FD:62:8F:F3:85:22:4A:8F:37:9D:9E:57:74:50:89:2E
Authority key identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86
Certificate issuer:       /CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86
Certificate serial:       069A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
Manifest number:          0692
Signing time:             Tue 12 May 2026 22:32:13 +0000
Manifest this update:     Tue 12 May 2026 22:32:13 +0000
Manifest next update:     Tue 19 May 2026 22:32:13 +0000
Files and hashes:         1: ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl (hash: i/T1Prvu1lrx37ZziCcaLUeAYeYjDJqkIS+RMFxjvjU=)
                          2: 3CE37DD8C0F911EBB5625E1CC4F9AE02.roa (hash: kKFHElA513S2ePi08UhxofDps7bPiV+Vk5IuCYGiQoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl
                          rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159298, serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86
        Validity
            Not Before: May 12 22:32:13 2026 GMT
            Not After : May 19 22:32:13 2026 GMT
        Subject: CN=6a03aa6d-9c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:f3:50:6e:ad:7b:9d:14:2e:e1:4c:a3:b0:
                    04:fa:69:a2:17:a5:c8:35:4c:6d:79:6d:c3:0d:96:
                    d7:95:1c:12:26:d6:0b:c3:f1:5b:49:b5:e9:95:24:
                    a5:53:1d:81:82:3b:03:39:df:a5:09:77:61:b5:fa:
                    7f:54:bd:58:44:c2:5a:32:17:a1:ae:22:dc:99:2b:
                    8e:1f:0e:e3:7a:4f:d9:0a:f5:d5:11:63:05:81:aa:
                    bb:6c:00:1a:45:2e:57:a5:da:58:77:9f:2a:ed:e4:
                    6c:51:20:9c:6c:de:6c:7a:9f:ab:c5:0c:93:6e:53:
                    0a:f5:eb:99:da:ab:4d:fc:44:0f:21:dd:bf:b1:94:
                    69:c4:94:b8:f1:ab:fb:c9:dc:45:de:4b:56:bc:a2:
                    85:fe:ce:17:fe:a9:a5:9a:c4:a0:7f:37:56:40:a7:
                    9d:82:a9:8a:ff:16:88:53:c3:bb:02:16:7e:d7:8e:
                    14:5f:49:c4:3f:12:8e:ae:ef:04:47:3d:16:68:4c:
                    d5:8f:d9:91:65:ad:68:0e:8b:f2:22:85:4b:80:d1:
                    af:24:4e:c0:a5:9b:26:84:19:00:a5:76:09:2f:aa:
                    d4:3d:49:cd:ee:fa:04:22:10:80:7f:c6:67:99:d4:
                    b1:4b:30:4a:f6:85:3d:ab:92:06:42:53:7c:5a:39:
                    ed:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C0:6D:B0:FD:62:8F:F3:85:22:4A:8F:37:9D:9E:57:74:50:89:2E
            X509v3 Authority Key Identifier:
                keyid:64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7e:86:b2:b6:7c:37:47:f3:ae:ee:c6:74:74:56:11:6d:51:
         fe:97:75:52:9b:33:af:47:6e:d7:42:13:bc:03:f4:63:98:b7:
         5a:12:59:81:db:be:82:c9:b0:b0:ad:72:f8:33:2f:11:51:b6:
         d2:60:54:a6:cb:34:31:82:8d:de:2e:b1:64:6c:5f:67:ec:63:
         12:7e:ed:2d:37:8b:95:8e:fe:aa:d7:50:7f:89:18:e1:b1:20:
         ff:c1:57:42:87:1a:41:d2:58:14:ad:88:13:76:39:1f:86:84:
         25:7c:30:4b:d6:ef:15:fb:75:65:2d:1b:c0:c0:4e:9c:9c:12:
         9c:7f:99:11:d2:80:19:db:fa:27:1f:d8:10:85:6b:be:53:a5:
         32:69:8e:8c:d3:de:bf:7d:39:a3:ae:df:7c:14:6c:18:fc:8c:
         60:cb:74:c1:92:16:73:c3:04:1e:2e:be:61:eb:97:6c:2b:09:
         e4:95:38:44:0a:66:6d:08:f0:5a:c9:b4:2e:54:67:2f:97:19:
         cb:d4:c1:7c:2b:23:13:fd:9f:99:cc:8b:af:e5:66:08:d4:7f:
         c0:dc:97:42:11:ad:9e:e7:fb:4f:8e:ca:a5:f2:b2:34:7c:f6:
         46:2c:86:ac:be:86:a8:d0:93:d8:88:94:c5:c3:27:30:7b:26:
         6d:f7:b0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:28:48 2026 by rpki-client