Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
File:                     z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json)
Hash identifier:          9X7ckA4idaMrWnBOZx/mdlkBgtGSVjkpQIjQqS4vEDg=
Subject key identifier:   1F:1B:57:D6:06:3D:8E:02:0D:B4:5A:04:BB:5A:B2:12:51:E6:CA:20
Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6
Certificate issuer:       /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
Manifest number:          011B
Signing time:             Wed 13 May 2026 05:56:44 +0000
Manifest this update:     Wed 13 May 2026 05:56:43 +0000
Manifest next update:     Wed 20 May 2026 05:56:43 +0000
Files and hashes:         1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: Gzx+ICTHYljCb5XCYadgCgvK/gbO+nGNi14pW3RGWr8=)
                          2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: HouHZa5vGgcIa83LrMGT7+XMplAnXagri+kcUGhALfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl
                          rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6
        Validity
            Not Before: May 13 05:56:43 2026 GMT
            Not After : May 20 05:56:43 2026 GMT
        Subject: CN=6a04129c-2e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:84:64:b8:08:7a:19:8b:45:34:38:2b:2b:
                    41:c6:ec:0c:32:8b:3d:25:02:fe:89:ca:80:e4:70:
                    96:ca:9d:e4:2f:55:e2:f1:e3:f8:86:5f:5a:7b:63:
                    dc:be:9f:f4:f2:09:5b:0b:fd:0a:e7:2a:93:6c:95:
                    51:d7:41:e7:18:b6:c3:57:06:10:98:bf:b7:24:cb:
                    f2:68:72:5d:e7:d4:5a:8d:ef:a2:f6:99:55:2b:2e:
                    98:15:bc:89:e6:f5:b1:74:43:27:a8:12:f7:cc:cc:
                    c1:a8:63:2f:9f:01:8a:ba:3a:0d:28:72:e9:5a:97:
                    44:fc:fb:65:f2:9d:17:88:30:e3:5d:f0:7a:b0:d8:
                    a9:57:b9:dc:76:14:f0:d4:ba:01:49:4a:ee:15:96:
                    99:9e:95:7e:6e:1f:cb:53:8c:cd:e4:51:84:fe:6d:
                    c8:ad:67:98:8c:7e:4e:51:c2:9b:a9:fb:fd:1b:fb:
                    ab:21:7c:77:36:63:fc:b3:8d:bd:a0:b5:67:73:01:
                    d0:18:7e:45:76:fa:dd:e9:77:4a:89:0e:95:3a:3c:
                    5d:5f:b5:a8:64:8c:05:ea:99:fe:70:44:f7:b0:6a:
                    eb:c6:5a:4a:3d:3e:4d:c6:ea:00:82:71:b4:fe:63:
                    3c:94:ad:bc:4f:42:8f:80:bd:98:27:53:1f:af:73:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1B:57:D6:06:3D:8E:02:0D:B4:5A:04:BB:5A:B2:12:51:E6:CA:20
            X509v3 Authority Key Identifier:
                keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:3a:7d:53:3a:9d:74:b6:0b:9d:1c:b4:91:4b:ff:5b:4b:58:
         d3:5c:ca:3c:58:4e:b1:73:66:ef:d8:3c:dd:71:fe:19:9b:78:
         dd:14:4a:bf:19:c0:b9:de:08:2e:15:98:75:ab:31:cd:93:50:
         45:8d:c3:56:a0:be:f6:d6:c7:42:8e:05:dc:6a:65:81:30:a4:
         da:2a:d8:4c:f1:86:33:b1:a6:96:9b:27:c4:b2:fa:2f:de:1e:
         bb:1e:95:29:f7:56:62:7f:e0:7f:c0:b1:f2:41:8b:8d:29:25:
         2a:ae:67:27:5b:40:34:57:f5:1d:43:d3:15:02:4e:a0:be:4e:
         82:7a:9b:2c:59:d7:af:75:11:27:6f:5f:55:40:eb:a9:60:38:
         e1:48:d4:87:3b:dc:41:0f:d9:87:e7:9e:4e:4f:35:59:77:86:
         d6:c9:f0:2d:84:38:60:83:7d:e2:5f:da:95:d5:5c:02:7f:84:
         7f:e0:64:6d:41:98:41:7e:51:d1:1c:e0:b5:64:8f:9d:90:fb:
         43:b0:0d:fe:4e:a1:5c:46:a6:c0:dd:1e:e8:9b:92:ab:26:19:
         96:11:ab:96:96:4a:b8:27:a2:66:36:2d:da:ca:ec:3e:89:e0:
         32:4c:6b:05:60:9c:39:2d:e9:ce:f6:60:b2:df:7e:ac:8f:8e:
         af:32:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:04:01 2026 by rpki-client