Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
File:                     zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json)
Hash identifier:          JgWas2jF3ljepwYTdo3RXv36WerIPgvXu1EFuenK+Ks=
Subject key identifier:   22:C8:8E:33:4F:3C:81:E8:1F:9E:1A:A3:0D:A6:F4:6C:9E:FD:EB:D0
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Certificate issuer:       /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial:       0C9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
Manifest number:          0C90
Signing time:             Tue 12 May 2026 18:36:51 +0000
Manifest this update:     Tue 12 May 2026 18:36:51 +0000
Manifest next update:     Tue 19 May 2026 18:36:51 +0000
Files and hashes:         1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: Da7PRV/mUacQ4wX7w+PUvJt7xAaKmdkgp2O06AbuKnc=)
                          2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: MlGQE6i/naYke0ZwsPc47N+NQobrGaPsNs00jN9E6oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
                          rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3227 (0xc9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
        Validity
            Not Before: May 12 18:36:51 2026 GMT
            Not After : May 19 18:36:51 2026 GMT
        Subject: CN=6a037343-cd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ef:5d:82:f7:77:bf:db:fd:48:c8:6d:51:2c:
                    15:b6:b1:83:f9:e2:a4:86:fe:bf:9e:f4:76:b5:a3:
                    12:7f:9c:1f:dc:e6:4a:5f:08:e8:7b:b9:87:ad:8f:
                    75:f1:14:be:f9:14:38:80:e4:04:4f:49:5a:b5:39:
                    24:18:44:0f:83:60:02:57:56:c0:12:d4:fb:c8:ff:
                    13:e2:5f:df:8e:81:5c:03:a1:62:c8:30:e6:dc:b9:
                    6f:71:ce:da:a4:95:60:a4:35:4f:65:c6:93:d9:9b:
                    20:7f:7e:8a:a9:eb:de:d6:62:76:68:11:0d:19:93:
                    f4:df:3d:07:c5:ea:0b:cc:23:c0:40:ee:33:e3:5f:
                    aa:15:65:88:b3:85:66:7e:29:47:09:34:13:9a:d6:
                    e2:d0:b1:81:7a:f0:4e:40:6c:c2:fc:17:cc:f7:7b:
                    76:3d:cd:48:9e:79:bc:fa:79:ae:da:18:3b:cc:67:
                    08:44:0f:68:b1:6e:c7:f8:c0:eb:72:0c:c0:f6:2c:
                    6b:2f:87:59:ff:e9:0f:c2:64:18:35:be:f8:e8:44:
                    06:b2:d7:0e:07:6b:0b:dc:ae:39:76:eb:18:5f:6d:
                    49:7d:d7:d7:70:62:3d:de:89:89:c9:1a:00:2b:8c:
                    83:de:3f:6f:41:b2:b0:97:4d:56:dc:7a:59:7c:ab:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C8:8E:33:4F:3C:81:E8:1F:9E:1A:A3:0D:A6:F4:6C:9E:FD:EB:D0
            X509v3 Authority Key Identifier:
                keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0a:30:cb:7a:5b:c4:ee:ed:eb:88:c6:9d:e7:b3:cd:c4:10:
         f6:42:19:2f:ad:a0:ae:c0:f7:db:ae:cd:32:58:9a:0a:79:c4:
         0a:99:3e:aa:fa:0c:88:52:aa:f0:94:a1:db:b7:ce:d4:c5:31:
         2f:cc:8a:eb:85:1e:e5:b6:46:ef:01:09:0a:93:75:f7:75:a6:
         53:89:1f:1d:67:e0:0c:63:c8:11:48:fa:db:73:f3:33:e3:66:
         ca:cb:13:99:1e:20:2f:df:43:27:3c:44:44:5b:12:50:5d:0b:
         a9:ff:d8:14:89:95:7e:07:df:ca:c2:24:a0:35:0a:85:26:64:
         30:b0:64:9c:a4:07:f5:b6:ae:a0:89:c4:16:35:41:4f:b2:00:
         02:22:6c:cb:33:42:f3:78:15:0b:3c:ee:c3:41:cf:f3:86:78:
         ac:5c:be:39:f6:28:23:67:96:91:34:91:b6:91:b5:1f:cc:6f:
         49:34:5e:2b:06:57:af:99:a0:6f:bc:59:a9:9d:8a:6c:5f:34:
         8c:1b:df:21:fc:8c:82:15:dd:92:16:5f:eb:69:b3:2a:30:55:
         f0:37:25:f8:e1:14:7f:71:5f:6a:33:c5:ff:08:60:be:9c:9e:
         8d:61:55:72:b8:6b:9a:72:ae:fb:41:6b:b4:61:c2:29:eb:aa:
         3f:dc:9d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:46 2026 by rpki-client