Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
File:                     Z-1VajxcS_wnyhWKWXdWTDIHzso.mft (raw, json)
Hash identifier:          t81WPRtrIlIbYi31LJFm409c+hDSlbftKKMVVBkbPwk=
Subject key identifier:   E6:80:2B:BA:58:BC:A9:24:7D:1B:45:A2:BA:2B:7A:61:BD:BD:61:17
Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA
Certificate issuer:       /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
Certificate serial:       30F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
Manifest number:          30E7
Signing time:             Tue 12 May 2026 15:27:15 +0000
Manifest this update:     Tue 12 May 2026 15:27:15 +0000
Manifest next update:     Tue 19 May 2026 15:27:15 +0000
Files and hashes:         1: Z-1VajxcS_wnyhWKWXdWTDIHzso.crl (hash: Q9bxtFLe6Mg3T5zDs7NPM+VHh2zLqun9l6s6yuTTshM=)
                          2: 22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (hash: EZBXtatzDllfCW2rTDFXkEXED9M+uf0VNnXIRtQVlAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl
                          rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12535 (0x30f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
        Validity
            Not Before: May 12 15:27:15 2026 GMT
            Not After : May 19 15:27:15 2026 GMT
        Subject: CN=6a0346d3-bdf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:39:d3:ea:16:e6:03:8d:b9:06:04:24:cf:38:
                    6c:00:f4:dc:e6:12:36:34:81:ea:20:97:7b:e9:e1:
                    7e:4d:cd:7b:1f:00:b0:f9:8c:ad:da:9a:15:5d:ca:
                    5f:4b:be:dd:1e:ea:d0:29:2d:73:da:65:8a:b5:1f:
                    8f:48:df:50:e5:29:27:45:8c:8f:45:e2:06:eb:db:
                    87:bd:52:f9:f9:7f:2c:a7:a4:5b:7c:06:3c:c7:1e:
                    79:d1:fa:b7:bb:8b:dc:77:00:44:b3:18:ad:15:cb:
                    a8:68:63:9e:93:d5:9b:81:c1:0d:e1:40:b2:63:d3:
                    a8:93:e3:fc:bf:0d:02:d2:de:84:07:f7:1f:61:15:
                    bc:82:0b:c3:8f:5a:7a:7d:86:a2:12:f0:92:b5:12:
                    9a:6b:f6:25:b0:48:35:6a:e0:92:e6:6b:85:53:ef:
                    30:8d:29:ee:79:b1:75:5d:ea:50:c7:0a:1f:2c:ed:
                    45:81:ff:23:87:90:4a:63:de:37:63:98:08:38:c1:
                    7e:87:ee:14:3b:18:e2:c1:3d:40:69:af:0f:ce:04:
                    6b:0c:c7:ae:98:91:4d:a8:58:9e:91:6f:34:2d:d2:
                    39:d7:7e:66:84:a9:17:e6:01:9c:f9:9f:9f:5d:89:
                    94:f5:41:20:a0:7c:1f:37:e9:5e:8c:aa:e9:e8:ee:
                    aa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:80:2B:BA:58:BC:A9:24:7D:1B:45:A2:BA:2B:7A:61:BD:BD:61:17
            X509v3 Authority Key Identifier:
                keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8a:85:01:34:40:af:0c:d3:8e:8b:85:4a:a1:cc:37:21:ef:
         39:df:e9:c3:76:80:de:ac:66:e1:0e:83:21:eb:69:2d:68:cd:
         3b:f5:15:d4:c2:9f:88:e0:83:a0:b5:42:44:16:50:a5:73:0b:
         33:e4:9d:f8:7f:ba:ef:2a:60:5d:e5:dc:19:b2:3b:dc:72:83:
         1d:85:01:5e:ac:f2:a0:14:c6:6c:13:ad:8e:ec:79:52:c9:c8:
         8c:ca:63:72:47:97:0c:a7:94:7c:ac:1a:01:5f:bb:f7:93:ec:
         d1:00:80:27:a4:b9:09:b3:fc:ed:cb:03:07:0f:20:a4:7d:92:
         15:b5:26:ac:a9:1e:de:71:f4:4e:30:b7:2a:ed:7f:81:2e:7f:
         d1:de:5b:98:6b:e2:54:fd:f0:94:0a:7c:88:a0:c5:f2:1e:d8:
         ac:09:bd:9c:f4:64:5e:bc:eb:81:a2:dc:58:4c:5c:0e:30:55:
         59:e1:99:03:f6:01:5f:ec:28:c3:bf:f0:aa:66:8e:22:1f:22:
         82:20:5f:7c:c6:71:e7:48:67:14:e7:e4:f8:bc:13:c6:c1:9f:
         50:05:e4:11:6f:4f:b7:0c:ba:8e:dd:8e:33:fd:05:cb:47:0d:
         38:09:7f:49:b0:62:80:05:28:b5:e3:d8:88:ae:06:93:70:49:
         74:c0:11:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:40 2026 by rpki-client