Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
File:                     ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft (raw, json)
Hash identifier:          YiwsokKVJeCFoG03xBaoFAS9LbGT+Zp6MQPELDSZGbM=
Subject key identifier:   D5:16:54:87:E2:16:3D:1E:FA:48:17:F0:AC:F8:85:C3:0D:B3:DC:DE
Authority key identifier: 65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
Certificate issuer:       /CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Certificate serial:       0708
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
Manifest number:          0703
Signing time:             Tue 12 May 2026 22:07:13 +0000
Manifest this update:     Tue 12 May 2026 22:07:12 +0000
Manifest next update:     Tue 19 May 2026 22:07:12 +0000
Files and hashes:         1: ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl (hash: 94CPL4NmStUMfijxKNtMIgHzzjoUsyrcflaoLxRm2VM=)
                          2: 54CB555C57A311F09664E82DC4F9AE02.roa (hash: 8zSq/rqaKjpysVvvXWgHeKeayL3TVMK2Emf1uVmygFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
                          rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800 (0x708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91899BB, serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
        Validity
            Not Before: May 12 22:07:12 2026 GMT
            Not After : May 19 22:07:12 2026 GMT
        Subject: CN=6a03a491-0a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:e4:80:58:6d:be:1a:dc:9b:4e:63:48:62:
                    bb:dd:e4:b7:ab:9f:17:f3:cf:0a:1f:f1:00:bc:e7:
                    ea:b5:c8:57:dd:62:b5:ab:9a:92:7e:d8:29:9d:e8:
                    33:8c:7a:56:f3:7b:bd:fb:2e:98:9b:e4:04:26:75:
                    5e:6d:a6:2e:fc:a6:86:8c:0d:d7:f1:db:6b:c1:5f:
                    b9:f7:e9:67:47:74:0b:91:eb:1d:95:4d:e7:15:c7:
                    11:9e:80:95:c6:42:e0:cf:34:11:72:aa:bb:0b:37:
                    45:5c:c1:05:6d:99:cd:68:7a:7d:a4:6e:4d:33:f8:
                    b1:a9:e9:aa:48:be:66:03:6a:f9:27:04:9b:b6:a1:
                    e0:17:5e:c1:d0:ad:3c:1a:33:e3:91:fb:93:01:e8:
                    80:6d:ad:78:ee:3c:ad:32:86:8c:b6:76:d4:80:56:
                    00:74:b8:a6:7a:0a:cd:c2:42:4a:25:48:d5:27:ee:
                    08:91:61:cd:47:c2:14:6f:0b:fb:18:c4:37:2f:e5:
                    6b:4d:44:d4:ca:14:29:29:1d:9c:53:ac:61:bc:9d:
                    bc:6b:da:b7:c8:f9:12:ca:03:8a:36:8d:38:54:74:
                    67:fe:84:56:9f:08:19:62:d2:50:8d:b7:96:8a:4f:
                    7c:73:9d:88:70:e5:1f:14:ec:34:cc:74:12:b4:0d:
                    a4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:16:54:87:E2:16:3D:1E:FA:48:17:F0:AC:F8:85:C3:0D:B3:DC:DE
            X509v3 Authority Key Identifier:
                keyid:65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:fc:52:17:40:5b:7d:1c:8d:fc:d4:4d:2c:37:24:36:c0:85:
         46:96:8e:63:9a:49:65:75:09:d2:87:4f:16:b6:7c:28:af:94:
         c9:04:5d:36:32:7d:40:bd:06:60:f3:f1:ad:6c:66:12:22:de:
         f4:6c:d4:c0:77:a2:90:dd:99:6b:12:d9:f9:13:2f:e6:cb:73:
         27:2c:41:c3:b9:d6:68:8a:7e:15:81:51:9e:5a:75:e6:1f:6b:
         31:93:94:bd:c8:2a:82:03:42:19:14:cb:dd:71:97:a0:82:0d:
         94:80:92:2d:7c:29:55:6a:19:57:00:c0:f7:ad:9e:c0:7d:d3:
         fe:e4:92:da:cf:b8:35:10:3c:51:60:e2:c7:18:5a:4f:49:fb:
         9a:bb:27:f1:11:ec:47:c8:04:9c:74:bf:b9:96:e4:fe:28:b7:
         2c:25:b7:74:39:51:89:52:58:47:7d:5d:48:ba:39:8f:94:61:
         c2:4d:f0:92:d7:78:ff:9e:64:87:01:4e:74:21:03:36:fc:f4:
         f0:4e:aa:f9:e3:e4:f5:16:41:27:e8:e8:e5:ef:bf:d7:20:b3:
         fa:2f:ed:63:8f:1e:33:e7:8a:69:62:aa:7f:ad:8a:c4:3f:c0:
         d6:8a:95:36:69:bb:52:b6:a9:71:81:36:6d:3e:b3:7d:33:10:
         9b:04:f4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:06:24 2026 by rpki-client