Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
File:                     ZwbZhOcxaBICGI0pntNfAFsBdYA.mft (raw, json)
Hash identifier:          68KfUIjvU9Gz5Keknc1MwpU7X1qTOZ3VvEEjTNrGhGQ=
Subject key identifier:   5B:0A:3A:4E:AD:14:14:36:76:8E:5B:27:26:E2:53:01:59:EE:1C:5D
Authority key identifier: 67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
Certificate issuer:       /CN=A917DCDA/serialNumber=6706D984E731681202188D299ED35F005B017580
Certificate serial:       353A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
Manifest number:          353A
Signing time:             Tue 12 May 2026 14:42:14 +0000
Manifest this update:     Tue 12 May 2026 14:42:13 +0000
Manifest next update:     Tue 19 May 2026 14:42:13 +0000
Files and hashes:         1: ZwbZhOcxaBICGI0pntNfAFsBdYA.crl (hash: yoBLhemb2ZqYGTHmeSbtvgEXs4ML0NjS/w6/pYYIFlA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl
                          rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13626 (0x353a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DCDA, serialNumber=6706D984E731681202188D299ED35F005B017580
        Validity
            Not Before: May 12 14:42:13 2026 GMT
            Not After : May 19 14:42:13 2026 GMT
        Subject: CN=6a033c46-b6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8b:dd:8e:45:ef:1a:dc:6b:e7:7a:3c:4e:97:
                    3f:82:05:9e:3b:f5:64:a3:1a:60:a7:8d:6e:96:e5:
                    69:ea:f8:27:02:f4:54:d1:19:a9:18:fa:0e:d1:bf:
                    b8:93:76:a1:a9:16:8f:8d:e3:5e:20:3b:09:06:53:
                    91:fb:05:fe:8f:32:65:38:af:2a:7e:82:36:35:4e:
                    65:de:e3:6f:67:82:31:6f:54:d2:3d:61:6a:ef:f2:
                    c1:e3:57:76:cc:4b:d9:09:89:41:6a:78:ad:51:52:
                    98:09:7f:6c:56:d3:c3:81:b3:4d:1f:48:91:97:73:
                    74:98:3d:bc:30:ca:93:5e:6f:d7:c3:89:f4:4e:d4:
                    7e:6e:b5:6a:dd:d3:a2:1c:4e:b3:15:f4:0f:58:d8:
                    31:b1:00:ac:e0:17:cc:91:f6:b0:a3:2b:f7:fd:9e:
                    fa:e3:9a:b4:f8:1e:de:d5:53:52:32:45:65:41:4d:
                    a4:76:4c:7d:a5:68:74:84:31:c7:99:bf:ca:c0:25:
                    3e:7a:fd:40:26:68:e5:e6:2e:25:2d:2e:65:10:18:
                    41:83:aa:89:e2:73:f3:74:e0:b0:7f:84:1c:13:ec:
                    39:75:ae:cb:78:a1:e6:8e:0b:33:69:aa:06:a8:40:
                    f7:47:e6:bb:28:2d:67:ab:74:d1:61:1c:78:4e:94:
                    0c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0A:3A:4E:AD:14:14:36:76:8E:5B:27:26:E2:53:01:59:EE:1C:5D
            X509v3 Authority Key Identifier:
                keyid:67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:bf:49:a9:ce:88:c7:54:5a:9b:83:03:8b:bf:37:7e:3f:03:
         e5:75:9e:d3:47:99:29:f8:32:e2:0d:bd:11:72:56:62:44:ef:
         66:35:15:ba:85:52:d3:f2:bf:c0:a6:a7:d7:f9:a0:88:b3:3b:
         0c:8b:14:01:65:9a:2c:22:f9:ac:4e:62:9a:c5:b1:90:cb:12:
         1b:41:f5:79:28:88:22:34:6a:a6:bc:30:e5:94:68:0b:d8:09:
         0f:62:c1:73:99:88:ca:3b:16:83:2c:bd:bc:50:66:34:59:c3:
         b4:cd:4b:70:60:56:ae:e1:c3:50:3e:ec:63:fc:43:1c:02:61:
         ff:93:d9:17:4d:4e:c0:a3:ab:b9:13:7e:db:0c:b8:ac:2c:70:
         03:11:df:34:5e:ce:62:6d:33:0e:e5:8a:aa:36:07:36:6c:54:
         4c:e8:2f:d5:5d:db:1f:35:5a:03:ec:87:93:7e:6f:5f:ad:b7:
         1a:eb:f5:06:31:b1:b3:ce:1c:a3:b8:55:e9:be:fa:e4:09:1f:
         0a:33:dd:52:69:de:10:2b:9e:47:ab:62:d3:be:f7:57:c3:20:
         d5:32:53:03:88:0f:c6:63:06:27:36:a5:59:64:1c:63:37:ae:
         97:9e:8e:97:c6:9a:6a:ba:3a:39:99:d8:ce:9e:12:86:09:45:
         72:45:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:18:33 2026 by rpki-client