Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
File:                     zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json)
Hash identifier:          9L89CSLCSEcwWWCIP3wr6JgW8HLlwGLLyBpwpMfuzNM=
Subject key identifier:   B1:AF:27:14:8B:13:DE:16:4E:E2:9B:E3:96:04:D2:D3:2B:8C:29:7D
Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61
Certificate issuer:       /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
Certificate serial:       0A78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
Manifest number:          0A6E
Signing time:             Tue 12 May 2026 19:40:34 +0000
Manifest this update:     Tue 12 May 2026 19:40:33 +0000
Manifest next update:     Tue 19 May 2026 19:40:33 +0000
Files and hashes:         1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: o2Gg9j4Ig/9pu3+AZFkIBIsOkmz20tVXDXM4/zwZyCI=)
                          2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: cZrqWOQatMkIn2VzGfcaWDnVlXfxEpjr06H/3z6i31k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl
                          rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2680 (0xa78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761
        Validity
            Not Before: May 12 19:40:33 2026 GMT
            Not After : May 19 19:40:33 2026 GMT
        Subject: CN=6a038231-ee79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:6f:d8:80:b9:12:70:ec:38:20:c0:ab:da:
                    22:ac:d5:8e:e2:93:27:44:36:2f:3a:f8:b1:08:5c:
                    93:4c:59:95:e9:d5:92:00:f0:ad:f4:3d:69:6a:4b:
                    b3:b0:ad:60:7d:4c:58:96:91:31:4c:e7:6d:06:ff:
                    b4:8d:31:9f:94:60:21:c1:6b:05:35:0e:7a:a4:78:
                    3b:68:39:50:60:27:cb:61:6f:87:28:8f:aa:a1:42:
                    46:34:91:d3:47:84:9d:42:b7:23:88:41:0b:85:a4:
                    0d:63:15:3e:bb:5a:43:ca:42:dc:6e:62:8b:35:20:
                    48:b8:25:d7:6b:aa:4b:43:72:3a:7f:ae:c9:6b:fd:
                    4b:99:df:86:95:60:7e:1f:26:6f:eb:3c:23:47:01:
                    7f:28:59:e7:2f:8c:a6:cd:fa:56:dd:c3:57:a7:49:
                    67:6b:ad:51:44:0c:9a:bb:d6:32:d6:5b:43:81:60:
                    55:60:a3:6e:eb:9d:4c:d1:23:c4:3c:a6:6c:a9:bf:
                    41:22:13:e5:ea:ae:d3:72:6a:2a:54:2d:30:40:63:
                    41:80:d3:7f:a1:89:f0:db:c4:af:b5:bf:8a:78:e1:
                    87:5a:30:0b:ee:9e:85:f5:de:fe:df:59:44:38:fd:
                    2c:97:de:f7:a8:df:32:7f:f3:e7:71:07:14:28:76:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AF:27:14:8B:13:DE:16:4E:E2:9B:E3:96:04:D2:D3:2B:8C:29:7D
            X509v3 Authority Key Identifier:
                keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:11:64:9d:05:6e:95:a2:47:fb:fd:8c:3b:bb:b8:c0:ea:74:
         05:c0:6e:d6:fe:f6:1f:70:a2:36:84:ff:a3:fc:ee:3d:2a:b0:
         09:20:c7:c3:73:92:d0:73:5f:0d:d4:a7:56:a4:20:f1:d7:7f:
         7d:2d:05:c7:56:71:0c:44:ad:14:5e:1e:79:41:fa:61:46:8b:
         8a:2b:21:c1:87:64:a3:a5:cc:ae:2c:b6:f1:72:27:e8:51:05:
         01:36:cf:4d:d2:d7:8e:aa:35:ea:bc:5e:62:83:59:96:d6:f2:
         7c:7b:57:ba:00:63:3a:03:a5:ae:10:bd:d7:78:94:b9:b7:8e:
         dd:a8:ac:e3:a1:3d:1c:57:58:f1:c2:6c:ca:ba:00:07:83:fd:
         d9:c5:14:87:ec:62:30:85:fd:d5:45:6e:7f:c2:69:07:da:74:
         51:1c:a2:f8:0a:d5:7d:3c:21:44:dc:57:11:9e:4a:7b:a7:5f:
         37:ec:35:5a:ee:3d:b4:45:cd:1b:1e:c6:8c:27:ff:e7:c7:3f:
         6c:ce:88:7c:0e:34:79:0d:1d:5f:2e:8c:d0:c6:12:96:3d:b5:
         77:fd:f5:83:8d:82:f3:6a:70:9b:32:7d:8f:74:88:80:44:50:
         2f:26:2a:b6:a4:b6:43:7b:dc:3f:d8:89:0b:61:3a:de:da:bf:
         4c:d2:d7:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0
NTc5NTY3NjEwHhcNMjYwNTEyMTk0MDMzWhcNMjYwNTE5MTk0MDMzWjAYMRYwFAYD
VQQDEw02YTAzODIzMS1lZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsfhv2IC5EnDsOCDAq9oirNWO4pMnRDYvOvixCFyTTFmV6dWSAPCt9D1pakuz
sK1gfUxYlpExTOdtBv+0jTGflGAhwWsFNQ56pHg7aDlQYCfLYW+HKI+qoUJGNJHT
R4SdQrcjiEELhaQNYxU+u1pDykLcbmKLNSBIuCXXa6pLQ3I6f67Ja/1Lmd+GlWB+
HyZv6zwjRwF/KFnnL4ymzfpW3cNXp0lna61RRAyau9Yy1ltDgWBVYKNu651M0SPE
PKZsqb9BIhPl6q7TcmoqVC0wQGNBgNN/oYnw28Svtb+KeOGHWjAL7p6F9d7+31lE
OP0sl973qN8yf/PncQcUKHY4BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGvJxSL
E94WTuKb45YE0tMrjCl9MB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz
QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF
VEtlUEJiazVMQUJGZVZaMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMBFknQVulaJH+/2MO7u4wOp0BcBu1v72H3CiNoT/o/zuPSqwCSDHw3OS0HNf
DdSnVqQg8dd/fS0Fx1ZxDEStFF4eeUH6YUaLiishwYdko6XMriy28XIn6FEFATbP
TdLXjqo16rxeYoNZltbyfHtXugBjOgOlrhC913iUubeO3ais46E9HFdY8cJsyroA
B4P92cUUh+xiMIX91UVuf8JpB9p0URyi+ArVfTwhRNxXEZ5Ke6dfN+w1Wu49tEXN
Gx7GjCf/58c/bM6IfA40eQ0dXy6M0MYSlj21d/31g42C82pwmzJ9j3SIgERQLyYq
tqS2Q3vcP9iJC2E63tq/TNLXQg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:06:22 2026 by rpki-client