Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
File:                     zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json)
Hash identifier:          n6payuk2+8zO2J3ojAvF9e1t/oem7VYs2tS5z8/2O/A=
Subject key identifier:   42:50:1B:69:F2:20:4A:39:78:EA:81:60:12:43:0D:6C:1C:16:08:60
Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Certificate issuer:       /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
Manifest number:          87
Signing time:             Mon 11 May 2026 07:58:29 +0000
Manifest this update:     Mon 11 May 2026 07:58:28 +0000
Manifest next update:     Mon 18 May 2026 07:58:28 +0000
Files and hashes:         1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: RSMnmEhNRmqjqPtwK3QV2Uv4g/8D6ZXZV+EAo5regLY=)
                          2: 6FBBA45AFD2711F0B1802E18426F56BC.roa (hash: InU5YhYgQdECTfOQlDj5F02bMyaCjuUJFEGGYk6O1Jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
                          rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
        Validity
            Not Before: May 11 07:58:28 2026 GMT
            Not After : May 18 07:58:28 2026 GMT
        Subject: CN=6a018c25-4d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:2c:fa:cb:73:bd:c2:2f:92:28:47:3d:79:
                    2c:77:5f:68:8b:7c:7d:90:4c:45:b1:79:6c:66:98:
                    eb:20:00:87:2a:26:dc:7c:f8:2b:9a:65:d3:b8:e7:
                    4d:63:27:10:fe:23:a9:16:a4:bf:8c:c1:3d:c3:f4:
                    4a:86:d5:37:67:55:4b:7b:07:08:ba:bf:2c:47:9f:
                    54:fc:0e:5a:75:c4:d4:db:83:1d:eb:98:62:bc:f6:
                    4e:0a:9e:2b:8a:f2:4e:57:05:67:fb:87:25:2e:6f:
                    99:a9:6a:ae:2a:f5:b3:37:2f:29:94:fc:89:d0:09:
                    c5:ed:f4:d5:65:3d:44:3c:67:75:b1:d2:63:3f:41:
                    96:11:4d:47:61:f5:79:c6:99:d2:2b:d4:03:08:5f:
                    0a:50:4a:91:2c:3d:0e:10:68:f4:90:76:bd:eb:7e:
                    87:de:fd:14:a1:55:72:26:bc:72:c1:19:8d:5d:04:
                    86:1b:e5:e3:d6:2a:13:a5:3d:16:20:7d:05:56:6f:
                    6d:17:83:f8:91:c8:db:74:91:c1:c8:4f:fc:ec:1a:
                    a5:1d:56:d2:4b:ff:b1:ce:11:54:6b:58:62:72:f3:
                    f8:8a:ad:cf:04:b3:72:b4:ed:85:dd:29:7a:b0:e6:
                    21:3d:5f:3a:45:89:39:5b:36:fe:25:f5:77:9a:06:
                    9b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:50:1B:69:F2:20:4A:39:78:EA:81:60:12:43:0D:6C:1C:16:08:60
            X509v3 Authority Key Identifier:
                keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:0c:dc:89:0a:b4:4d:49:35:a7:3e:36:d5:f7:0f:61:09:d4:
         79:92:9d:ac:dd:07:8a:fc:5c:02:45:93:37:ae:28:31:c1:df:
         da:45:1c:01:12:33:01:ab:9d:26:77:56:95:80:29:27:8b:45:
         58:34:86:de:27:c6:5e:d0:d1:1a:bc:35:21:66:65:ec:4a:bd:
         8a:eb:71:e5:fb:20:63:1a:d2:f3:d4:da:12:5f:d9:16:52:ef:
         d3:b5:1e:61:28:15:43:96:74:bd:1b:40:94:6e:f1:2e:91:98:
         1b:41:a6:34:0c:3c:f9:c2:6e:57:b7:94:bf:48:48:20:98:9c:
         dd:ec:85:91:77:11:32:7f:7c:f8:e7:78:cc:2f:a7:f9:8b:da:
         5a:1b:f2:6b:e7:ca:e3:15:ef:68:df:d3:f7:f1:91:b5:af:9d:
         ac:3b:c0:73:32:04:8c:8e:71:cb:11:79:4b:f1:a1:86:c2:6c:
         e3:5f:a7:52:d9:79:08:a6:f4:91:6c:84:bd:0c:38:0e:4c:ea:
         98:b6:4c:ac:d2:94:96:68:12:dd:77:2d:e8:8d:5a:87:5c:ae:
         8f:d1:dc:f3:94:bc:07:af:70:63:42:cb:8b:c3:26:73:5c:45:
         bf:a0:d8:87:70:24:63:e0:1d:a0:9e:9a:14:80:f2:3d:c1:18:
         39:f3:ab:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBBRUUxMTAvBgNVBAUTKENDNDI0MDcwNzQxMDM2MzczNUVCRjZFRkIxOTRGQjY3
MEYzNDVGNDIwHhcNMjYwNTExMDc1ODI4WhcNMjYwNTE4MDc1ODI4WjAYMRYwFAYD
VQQDEw02YTAxOGMyNS00ZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA17cs+stzvcIvkihHPXksd19oi3x9kExFsXlsZpjrIACHKibcfPgrmmXTuOdN
YycQ/iOpFqS/jME9w/RKhtU3Z1VLewcIur8sR59U/A5adcTU24Md65hivPZOCp4r
ivJOVwVn+4clLm+ZqWquKvWzNy8plPyJ0AnF7fTVZT1EPGd1sdJjP0GWEU1HYfV5
xpnSK9QDCF8KUEqRLD0OEGj0kHa9636H3v0UoVVyJrxywRmNXQSGG+Xj1ioTpT0W
IH0FVm9tF4P4kcjbdJHByE/87BqlHVbSS/+xzhFUa1hicvP4iq3PBLNytO2F3Sl6
sOYhPV86RYk5Wzb+JfV3mgabLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJQG2ny
IEo5eOqBYBJDDWwcFghgMB8GA1UdIwQYMBaAFMxCQHB0EDY3Nev277GU+2cPNF9C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEFFRS8xODhDQUYwNkEz
RUMxMUYwQjhFOTdGMzdDNEY5QUUwMi96RUpBY0hRUU5qYzE2X2J2c1pUN1p3ODBY
MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3pFSkFjSFFRTmpjMTZfYnZzWlQ3Wnc4MFgwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEFFRS8xODhDQUYwNkEzRUMxMUYwQjhFOTdGMzdDNEY5QUUwMi96RUpBY0hRUU5q
YzE2X2J2c1pUN1p3ODBYMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIAzciQq0TUk1pz421fcPYQnUeZKdrN0HivxcAkWTN64oMcHf2kUcARIzAaud
JndWlYApJ4tFWDSG3ifGXtDRGrw1IWZl7Eq9iutx5fsgYxrS89TaEl/ZFlLv07Ue
YSgVQ5Z0vRtAlG7xLpGYG0GmNAw8+cJuV7eUv0hIIJic3eyFkXcRMn98+Od4zC+n
+YvaWhvya+fK4xXvaN/T9/GRta+drDvAczIEjI5xyxF5S/GhhsJs41+nUtl5CKb0
kWyEvQw4DkzqmLZMrNKUlmgS3Xct6I1ah1yuj9Hc85S8B69wY0LLi8Mmc1xFv6DY
h3AkY+AdoJ6aFIDyPcEYOfOriw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:03:19 2026 by rpki-client