Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
File:                     ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json)
Hash identifier:          +yVCKnLvknfsrO4WhVAfcleP2oh6p5fug4KK1Tg7wAw=
Subject key identifier:   FD:92:51:D4:DA:AC:C1:24:CA:12:6A:CD:B8:6D:EB:B9:23:C3:2C:7A
Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
Certificate issuer:       /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
Manifest number:          0150
Signing time:             Mon 11 May 2026 05:12:43 +0000
Manifest this update:     Mon 11 May 2026 05:12:42 +0000
Manifest next update:     Mon 18 May 2026 05:12:42 +0000
Files and hashes:         1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: 4jUAdXeQCFHwA4ze6qh5VtwJAaFf5FpAsKD6EsbRnIU=)
                          2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: 9qSoXVlEycNCIEdeN++oa2o1NIklOSP03YZ6af8JV3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
                          rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
        Validity
            Not Before: May 11 05:12:42 2026 GMT
            Not After : May 18 05:12:42 2026 GMT
        Subject: CN=6a01654b-811b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8f:55:4b:43:e5:84:f9:99:a8:81:9e:f2:0d:
                    8e:97:cc:09:39:32:74:56:4c:2b:47:ec:80:4a:a7:
                    bd:81:27:54:f2:14:f6:b9:41:55:98:d7:d1:d5:ea:
                    d1:04:9a:c6:81:96:31:60:88:a5:0d:f7:99:88:e7:
                    c5:33:4a:eb:f8:ad:7e:b6:9a:c0:55:d2:03:1a:e0:
                    bc:22:4c:51:45:52:1e:2c:b5:26:ec:ba:80:06:91:
                    45:48:00:56:ef:59:f1:6b:25:c0:64:39:49:e8:58:
                    96:e2:b4:d5:f0:da:aa:d9:6e:14:ef:00:6f:7c:91:
                    12:f9:93:21:84:37:20:fa:66:20:14:46:0f:1b:72:
                    c2:97:ff:55:22:0d:b1:2d:8d:ad:04:8a:bb:79:0b:
                    8f:c1:7e:2e:f3:aa:d0:70:43:62:1d:b2:3a:f1:f2:
                    88:45:69:75:15:c0:39:38:bf:52:fd:fd:96:25:ce:
                    8e:b6:22:8e:d6:dc:c3:e8:1d:6c:80:b8:62:b1:c2:
                    1a:db:dd:22:1a:e2:06:20:54:c4:d8:11:62:01:6f:
                    d0:4e:4c:43:35:b4:a0:4e:03:56:ab:41:b5:16:3a:
                    69:f8:2a:82:bb:51:02:a2:85:03:89:c4:11:66:22:
                    fe:a0:2e:a4:1c:b2:ea:ca:b4:15:86:d0:23:65:4d:
                    99:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:92:51:D4:DA:AC:C1:24:CA:12:6A:CD:B8:6D:EB:B9:23:C3:2C:7A
            X509v3 Authority Key Identifier:
                keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:70:d2:c0:60:a4:71:96:ce:40:c2:ec:4b:b1:19:84:48:1e:
         ac:f8:01:cd:b4:d1:23:8f:64:5a:69:83:f9:ee:d9:1a:ab:8b:
         e0:e9:fe:ba:5d:8b:0b:1f:39:4c:e2:f0:29:9a:dc:95:e7:24:
         74:8a:47:22:9d:81:b7:ee:8a:44:d7:63:80:1c:29:a2:49:a1:
         78:ae:fc:b3:79:fc:be:c5:98:a0:a8:34:b2:55:08:3c:f3:6c:
         84:29:e0:c5:a3:f9:1a:2d:68:ac:25:df:66:00:d8:11:2f:9c:
         41:df:20:62:b4:34:bd:62:e5:32:09:e8:92:dd:bf:33:a3:15:
         1a:f2:72:39:b8:af:7e:0c:2a:85:a9:e2:b2:49:bb:59:82:43:
         d8:da:ce:5c:1d:fb:d7:23:23:a3:0a:d3:eb:1e:a4:33:0a:45:
         6e:08:4f:f9:1d:d4:34:2d:a9:78:85:5a:02:14:00:e5:b5:51:
         6f:3e:16:4f:4a:52:9a:73:55:c8:90:b8:f3:be:f9:9c:62:26:
         d1:b4:43:59:bf:e2:68:57:4e:14:2b:4d:d9:62:ea:17:19:bb:
         b0:2c:80:49:b4:62:ea:b0:3c:14:fd:53:49:a3:e9:bd:b7:0d:
         7e:87:01:4e:76:a7:aa:5a:65:aa:31:5c:40:f3:2e:2f:09:9b:
         63:d0:28:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:29 2026 by rpki-client