Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
File:                     ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json)
Hash identifier:          eclLdpAdy8F7vCmJG+zbUdMjX9N+sdIUC3mVr7VJW4k=
Subject key identifier:   2F:17:3A:74:17:71:4E:CA:0B:2E:95:B2:69:AD:BE:2F:78:78:DE:73
Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2
Certificate issuer:       /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
Certificate serial:       0D2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
Manifest number:          0D27
Signing time:             Tue 12 May 2026 18:06:32 +0000
Manifest this update:     Tue 12 May 2026 18:06:32 +0000
Manifest next update:     Tue 19 May 2026 18:06:32 +0000
Files and hashes:         1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: 4yLl+KvxmWOSE4B2pq/Tl1lzmDgWXgMNW4EH2BQFxvE=)
                          2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: OmDgPiLqgyux0zOKc/tnQAGnWY/1q9h2d6j4Yw1Hv60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl
                          rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3374 (0xd2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2
        Validity
            Not Before: May 12 18:06:32 2026 GMT
            Not After : May 19 18:06:32 2026 GMT
        Subject: CN=6a036c28-8722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:2b:f7:17:2a:46:5a:62:fc:09:d0:89:98:
                    56:8f:4e:57:bd:25:50:1f:0e:88:17:28:3b:e3:d9:
                    b7:06:54:b1:68:aa:27:01:27:88:ab:11:ee:e3:2b:
                    1a:58:5a:01:f6:15:f4:62:a0:75:8f:5d:76:ef:b9:
                    b2:73:17:4a:4d:2c:a9:e1:4a:6c:09:47:12:e7:c9:
                    d5:2d:58:f6:a9:7f:0e:12:65:ec:e5:fe:a6:4b:f3:
                    7c:3f:51:7b:ff:d0:c3:32:ce:dd:88:8a:69:92:0b:
                    96:31:0d:43:b9:f9:98:1d:de:d4:e3:d2:73:a7:96:
                    97:2f:e2:bb:0c:a0:63:01:6a:ba:e4:66:dd:90:71:
                    92:66:32:07:3a:5b:fb:dd:e3:54:ca:23:d5:23:a3:
                    78:d6:19:c7:e9:07:ea:3b:f5:75:a1:db:f0:d7:e3:
                    01:e9:6c:15:62:f0:aa:2e:fe:2b:be:97:1b:0b:99:
                    16:e9:2d:95:34:1a:65:72:3c:73:ff:70:c6:bf:57:
                    3c:e4:06:43:cf:b6:cf:1b:9c:2f:b0:46:13:7f:a7:
                    97:5d:14:33:50:ac:dd:e8:88:6c:c3:20:e4:3b:53:
                    1e:dd:ba:cf:bc:7b:d7:a3:52:b7:57:f6:81:fc:6b:
                    5b:83:b8:ea:e6:9e:cf:16:2d:3e:8f:58:9c:e3:fa:
                    66:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:17:3A:74:17:71:4E:CA:0B:2E:95:B2:69:AD:BE:2F:78:78:DE:73
            X509v3 Authority Key Identifier:
                keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c6:fe:e1:2b:ae:c1:b6:ec:8d:c8:22:65:96:16:38:5c:a4:
         48:cc:5d:cc:82:66:2a:3d:14:f2:34:f1:ad:3a:02:71:f1:5b:
         46:48:6d:cd:b2:7b:07:07:e4:f9:6b:c6:8d:2d:0c:cb:6a:da:
         b1:d1:52:c5:ef:9d:3d:b2:fe:73:ec:36:29:e5:de:fa:14:64:
         57:4f:21:60:5d:ec:28:37:d3:b7:ba:b5:c6:36:3d:39:2a:74:
         bd:17:92:8e:65:55:00:66:bf:43:58:a0:42:d2:b8:83:72:57:
         64:46:78:5d:74:a0:6d:2b:0b:99:4a:04:6e:56:d2:ae:0a:2b:
         b1:f4:5a:5f:3a:a6:18:3d:22:86:5a:34:cd:fa:a6:ff:5a:47:
         48:ee:7f:53:2c:dd:b3:70:ce:2d:f9:a1:50:94:e3:47:33:2d:
         30:88:b8:99:81:98:84:b6:67:95:18:b6:f5:ff:6f:f0:91:8f:
         5b:3a:24:c3:e3:4a:fe:8b:69:fa:eb:e0:77:b4:39:cc:ba:aa:
         a7:6a:3e:88:6d:ea:b9:56:b4:6a:1b:ee:86:be:f3:36:6d:f4:
         ca:a5:3b:3e:ef:3c:4b:41:0b:11:ff:72:c9:fe:c4:96:78:6a:
         7e:52:78:b0:ef:48:96:47:19:e8:2a:c7:88:de:01:05:1a:5d:
         4f:69:0c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:35 2026 by rpki-client