Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
File:                     _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json)
Hash identifier:          Ki9hTikiOMOiVMrHd5Yfbofn3RLUFY/X6VukVJyWOfc=
Subject key identifier:   48:2E:A6:75:EB:09:16:74:49:C6:63:18:5A:FF:D1:8D:52:A0:37:5D
Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Certificate issuer:       /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Certificate serial:       0E2D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
Manifest number:          0D85
Signing time:             Tue 12 May 2026 16:50:19 +0000
Manifest this update:     Tue 12 May 2026 16:50:19 +0000
Manifest next update:     Tue 19 May 2026 16:50:19 +0000
Files and hashes:         1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: XGkOPBRiBWSHzHEx7dIB/MHbQZjJ9jtojfgiYvvLND0=)
                          2: CCFA7454F04611F087BCEF76546F56BC.roa (hash: HCXtiXKgHVhMpaTnQurvVC//OqVn5AKyKkMTKhQsmjM=)
                          3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: /3UCOZyy7IRWOhuU35PtgiVAbTlyg5NR99z+gedGo9I=)
                          4: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: 8GqLPEK+8+LiDMs6TXQYM/u72383yuqkd4BLQepKcQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3629 (0xe2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
        Validity
            Not Before: May 12 16:50:19 2026 GMT
            Not After : May 19 16:50:19 2026 GMT
        Subject: CN=6a035a4b-3290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:38:18:35:8b:52:fe:05:43:7a:77:c8:08:
                    83:ab:9d:13:c1:c8:56:df:6f:3e:ad:75:e5:3a:f1:
                    0c:ae:44:8f:10:2a:35:98:64:49:18:21:7c:d3:6f:
                    48:87:85:17:2f:fe:b7:46:79:6e:51:ae:ad:cc:ca:
                    4f:81:53:75:37:95:57:3f:ff:c8:2c:c3:1c:e2:ab:
                    ae:c4:1b:a2:2b:a7:1c:39:b9:bb:85:b4:07:67:35:
                    fd:82:d7:60:55:82:a5:ba:89:5d:45:28:d7:cb:3d:
                    0c:3e:74:39:c6:b2:55:16:04:c9:a7:9d:ea:ce:b7:
                    62:2a:46:76:a9:3d:6d:6a:8d:99:99:e5:c8:b8:d0:
                    e2:da:eb:62:00:95:44:19:2b:09:01:f0:0e:ac:40:
                    ec:65:f2:73:4c:a2:c6:fa:2c:2d:24:b7:1c:e1:c9:
                    bb:72:28:72:f3:6d:29:84:9e:10:0d:5e:d1:47:c7:
                    2e:be:b9:a4:b3:bc:55:3c:d6:c8:37:94:88:9a:a6:
                    50:a3:45:28:81:ed:77:58:78:af:2e:2d:9d:29:77:
                    b1:07:09:58:a4:0e:88:24:64:ff:ec:71:4b:99:e6:
                    7a:e0:91:0a:13:51:c1:bc:c2:4f:f3:af:27:ea:89:
                    78:ba:cd:8d:45:06:3f:a6:c7:fd:27:46:31:df:99:
                    77:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2E:A6:75:EB:09:16:74:49:C6:63:18:5A:FF:D1:8D:52:A0:37:5D
            X509v3 Authority Key Identifier:
                keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:e3:35:ea:2d:43:da:ce:40:b4:83:da:de:70:45:db:9d:d6:
         3e:ca:b6:13:d4:c1:7a:5e:05:31:30:6d:22:97:bc:78:01:62:
         b3:28:1d:94:59:1c:e9:15:dc:da:82:76:46:00:7d:3a:3e:60:
         31:fd:97:b3:5c:86:5d:9f:f9:6b:41:48:ff:3d:91:31:5a:d5:
         92:84:2b:45:21:da:86:cd:7e:c9:59:a0:2b:87:95:39:c9:b8:
         b9:32:5a:80:6c:14:9f:5f:b5:6d:39:64:c0:61:99:12:d0:fa:
         dd:b8:73:6e:89:7a:cd:40:0b:78:5e:09:0f:b3:ba:1e:ef:a6:
         56:1c:35:bf:4f:61:47:cc:c0:ad:c0:74:7c:c5:59:8a:84:86:
         d2:21:49:aa:f0:17:94:50:ad:51:67:0f:15:67:94:00:8f:da:
         b7:10:b0:76:7a:4f:be:8d:1f:f4:56:41:c6:4a:e3:8d:30:18:
         c7:b7:b8:6a:6c:00:c2:55:ba:f4:aa:e7:d5:fd:c8:b2:74:fb:
         fe:fe:72:d7:41:3c:39:5a:3e:5e:91:9d:b1:59:23:4b:b8:ea:
         bd:d9:df:99:d6:62:fd:9b:aa:22:c9:19:4a:bc:29:d8:8f:74:
         6b:cd:af:32:d4:a2:9f:8b:ea:0d:3c:01:76:d2:e8:4f:ed:1d:
         25:ba:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:52 2026 by rpki-client