Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
File:                     ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json)
Hash identifier:          Nk0V3eNx4PtUjlJP6B9yWPpceUmkSKFli3dfpRBkP64=
Subject key identifier:   22:9C:DD:AC:A9:18:3D:E7:F7:A4:9E:B1:0B:72:8A:7A:DB:9A:C0:2C
Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
Certificate issuer:       /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Certificate serial:       23B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
Manifest number:          23A0
Signing time:             Tue 12 May 2026 15:49:23 +0000
Manifest this update:     Tue 12 May 2026 15:49:22 +0000
Manifest next update:     Tue 19 May 2026 15:49:22 +0000
Files and hashes:         1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: TDXNUg8GNFQ9ozi36iyxRMJv6nlrfmIJaWkgWCf3YQc=)
                          2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: Qn2+lYGa2h6xQsCbP0A3ivL3myO3Z5q3ATYz2Fpqscc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
                          rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:49:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9137 (0x23b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
        Validity
            Not Before: May 12 15:49:22 2026 GMT
            Not After : May 19 15:49:22 2026 GMT
        Subject: CN=6a034c02-6562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8f:1e:c4:1f:57:40:2d:2b:3c:3d:4b:89:fe:
                    90:a5:96:ef:54:c9:7e:bc:06:c9:38:f9:f5:8b:1d:
                    ca:ee:20:b2:8a:3d:c2:f4:90:41:52:25:43:fb:e8:
                    9a:5b:5a:af:92:17:ab:93:56:37:fc:00:bf:a0:a0:
                    f4:6e:80:54:3c:d6:a6:42:e6:b9:f6:57:db:e0:12:
                    ad:23:be:6f:af:01:ea:92:29:f2:ce:a1:8f:cf:2e:
                    ba:9c:d7:11:1b:cc:65:4a:09:94:12:88:8d:3c:86:
                    c3:48:52:aa:f5:d7:7c:a0:4b:bb:cb:84:ea:ae:a6:
                    81:5b:5a:61:54:3a:8b:62:e7:6c:88:32:ab:b5:7a:
                    3b:7d:2d:07:8f:f2:7b:c8:50:c3:43:a7:70:6b:70:
                    be:fc:66:d5:01:b7:b4:92:43:70:95:d1:4b:3b:41:
                    14:af:d0:c4:db:98:b6:dd:46:7d:43:dc:9c:72:02:
                    24:8f:5a:7a:d8:c7:3e:00:aa:4d:45:72:ef:73:96:
                    d3:1a:dd:03:e1:e5:55:b6:63:db:49:e7:ef:b1:f9:
                    89:88:87:1b:09:ed:12:f5:cb:dd:55:48:09:d9:f7:
                    05:60:75:cf:17:16:97:45:a6:e6:8e:9b:96:8f:e1:
                    b1:47:8d:e9:6a:d0:10:43:c1:b9:f3:39:66:3e:4a:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9C:DD:AC:A9:18:3D:E7:F7:A4:9E:B1:0B:72:8A:7A:DB:9A:C0:2C
            X509v3 Authority Key Identifier:
                keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0c:67:51:37:70:13:5a:1e:3a:01:bd:c1:d1:ab:f1:c9:23:
         e0:f1:b4:f5:69:95:f3:35:e8:55:8a:ed:28:af:17:25:87:e4:
         46:61:b9:5a:4d:f4:e7:f4:d3:e8:a2:f6:ca:cc:73:ed:c5:35:
         f0:04:df:c2:03:05:f9:9a:53:e1:b9:54:2b:61:15:eb:31:84:
         1f:77:c8:da:b3:92:cb:28:bf:0b:92:8e:8d:85:dc:ed:55:24:
         bd:47:b1:ac:31:75:f0:0f:88:90:3c:e2:26:be:1e:bc:ff:7b:
         18:8b:76:0e:16:9e:1a:19:bb:73:94:c1:52:25:23:f9:25:a3:
         12:4a:08:8d:ec:ec:78:8d:ab:d9:1b:90:59:00:d9:20:c7:76:
         f1:6c:27:bc:e7:69:40:32:10:e6:e6:88:e4:e3:0d:0f:eb:40:
         be:26:d6:61:08:e7:71:81:6c:44:89:b4:4a:35:d5:f6:4a:e8:
         ca:ae:7c:6e:50:42:60:33:c2:3a:ed:46:3c:85:d9:ba:08:3f:
         12:49:4f:c3:1e:8b:c6:e8:97:9c:14:9a:b6:d5:95:f1:82:92:
         f5:2e:17:f1:cd:b2:b8:96:98:81:f4:a7:07:ca:b5:df:e2:0d:
         fe:94:28:69:9e:b1:0b:e9:05:33:45:49:76:f5:3b:8e:9d:d8:
         d3:9c:22:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:07 2026 by rpki-client