Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File:                     Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier:          i37jACStH+9zZK548sjFoIqoMmTQvc0+HmkdqWkR8eU=
Subject key identifier:   79:07:80:A7:70:8D:C1:7D:B4:9B:23:DF:7F:20:FB:AD:15:B5:4C:04
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1DC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number:          3F96
Signing time:             Tue 12 May 2026 14:29:29 +0000
Manifest this update:     Tue 12 May 2026 14:29:29 +0000
Manifest next update:     Tue 19 May 2026 14:29:29 +0000
Files and hashes:         1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: udlF6X6A4uWmtYLzbQfQHN2IS7zCdcMneWklHOEFprA=)
                          2: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: E0gVDm9kfoK0rIa6TEKpQcI3iviwBeS9QjJmURqDGcc=)
                          3: 727C68508AB411EA89D83541C4F9AE02.roa (hash: j1y9l++Cb4rS0kTDJ/au9IYHGMfWT1dKRtZ4fnBWD30=)
                          4: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: sLIpOudm+eiKR94GEfQZoeV78WGpsM7jzLSAv9i5/tM=)
                          5: 66891B80943011EA8988B883C4F9AE02.roa (hash: BqNOTLVBBC+AVn5T33rtKNkNE5KVCZAI+BxeO2sKXyk=)
                          6: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: SUdVIcZkUhygJe2xIbtJt7uwqKCG9Ii1WDhJ2Iav9eM=)
                          7: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: A41l4a5QeLuyAAjDqJtyo29qvmKv7EtwQyyVY7eLbxI=)
                          8: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: fGEvfx/uQTHZ/v0AMbNptNU7LfD/gnvxRSl+eXIuibU=)
                          9: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: XXo8cy9oUnqDsEuTHCCDf3i4rQnpL2CkAP7dtIYhL4s=)
                          10: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lf1ISH9QTtgl8L9L0ANGqCGTHFwv9Hzc9bbQJTH1hEk=)
                          11: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: 6P+1AW6+9CaIAdPsa+shyJsM8Exj94kKsPKnss2Jr94=)
                          12: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: iVpOoJBlOyG/3zE1oA25hpkQYIqJe26GyQVWdLF9Bv4=)
                          13: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: 6XI/IfvAsAWYLp6AJKm4dtAGOtIg8Onx4flKi94I10Y=)
                          14: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: Q016Kd6E9/hY+r6FwdJ1SCSeGt/Pfio83Euj8bOzMRo=)
                          15: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: w7c5NBEb8TY/ZmVexUmHMzZSB1L6WF2aygP/ojjQOss=)
                          16: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: HgJ0n+v739OZ1tLGuS29SCSO5u9C8UIQn4oKvIqQoV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7618 (0x1dc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: May 12 14:29:29 2026 GMT
            Not After : May 19 14:29:29 2026 GMT
        Subject: CN=6a033949-f4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:d8:83:05:66:21:18:38:1e:c4:a0:7f:fb:
                    02:53:be:ea:3a:02:36:d4:2b:05:1c:9a:f6:a5:4a:
                    2c:a9:dc:85:ed:36:ca:7f:a5:b6:79:4e:b9:d5:66:
                    7e:fa:13:fb:00:d1:46:4f:bc:16:21:fa:36:63:d5:
                    ea:69:a3:d1:b4:cb:ba:7d:d2:8c:cd:e1:33:aa:c9:
                    d5:19:27:17:74:53:e0:6d:a4:82:71:81:c8:9c:43:
                    ec:76:8c:c8:7f:94:5c:d3:97:5a:a9:7f:35:25:f0:
                    da:6d:08:8a:b3:9c:d6:c8:50:89:14:7b:48:4f:e7:
                    a0:1d:39:94:ee:69:d6:d2:02:61:7e:c6:4e:b2:5a:
                    41:fd:ac:61:03:7d:da:7d:4f:98:38:d3:fc:f4:e8:
                    6b:80:dd:45:5f:9d:ff:f2:83:e4:d7:9c:89:8f:dd:
                    93:b9:d3:87:cb:51:cd:14:32:00:96:6a:a0:86:9f:
                    f2:ac:7f:15:85:63:07:b1:e5:f5:79:33:38:b8:a7:
                    b8:e3:fb:2b:15:a8:25:25:f3:49:d5:db:57:61:46:
                    28:28:fd:7f:db:8e:a8:d2:d4:36:4d:64:f4:4f:93:
                    6c:7f:a5:8a:13:4d:6e:f8:22:90:9c:e8:7d:be:69:
                    3b:a6:9d:a3:8f:17:cb:d1:25:e7:97:f6:c4:2f:a7:
                    9f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:80:A7:70:8D:C1:7D:B4:9B:23:DF:7F:20:FB:AD:15:B5:4C:04
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:8c:42:b7:51:b5:53:f7:c8:32:5f:47:52:d2:70:f9:03:d7:
         a0:06:e1:82:69:90:ac:1c:57:05:ea:59:e8:89:9d:cc:81:75:
         2d:98:3c:52:fd:2c:f6:3d:2b:0d:db:f5:e4:af:4b:26:c0:47:
         3c:42:dc:13:d5:54:f2:ad:67:a3:2d:f3:eb:c4:f2:f7:48:a9:
         ca:93:f0:83:65:99:65:b5:c3:12:4e:93:60:85:0e:19:67:03:
         10:56:8a:66:15:50:8f:b4:39:88:ff:a1:55:b0:d0:73:ed:b6:
         01:ea:fc:a4:83:35:41:c1:69:cf:7c:f7:6b:84:e3:a6:01:cd:
         d0:0c:2d:a0:37:9b:a2:90:0b:dc:95:e9:7f:52:ec:1c:03:52:
         e3:23:27:d7:38:42:6d:a9:51:79:23:3b:b4:20:48:c0:f1:9d:
         dd:23:10:49:65:fe:0e:2f:d3:37:a3:d0:4f:52:6c:78:97:60:
         69:a2:10:ff:3d:9c:fe:0e:61:93:4f:e9:73:ca:6a:66:1f:79:
         29:a7:6e:51:f5:0c:28:37:c1:b0:5f:1d:27:3c:0b:ff:97:ed:
         b5:ca:cc:8c:62:4c:81:65:aa:49:bc:99:0b:37:9d:75:a6:d9:
         3e:e9:1c:f1:00:27:64:84:ca:ef:8c:3e:c2:51:39:fb:0e:ba:
         8d:c4:77:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:55 2026 by rpki-client