Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
File:                     Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json)
Hash identifier:          0jRyNhAM54obbQfZQMbg5dlQYoJbfqPDFy+Bskb2pw4=
Subject key identifier:   15:11:B7:2A:15:EB:2C:5C:10:9E:B7:83:09:74:1A:F1:7B:29:94:FD
Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE
Certificate issuer:       /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
Manifest number:          75
Signing time:             Mon 11 May 2026 07:55:44 +0000
Manifest this update:     Mon 11 May 2026 07:55:43 +0000
Manifest next update:     Mon 18 May 2026 07:55:43 +0000
Files and hashes:         1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: 8fSXLq5nvStXzxakRlaqHMBslmh3xK2Xhub/neljfUo=)
                          2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: /odblAES8/7YPLaconnJ5Vgys59wwFEPqcpWiTdxc8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl
                          rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE
        Validity
            Not Before: May 11 07:55:43 2026 GMT
            Not After : May 18 07:55:43 2026 GMT
        Subject: CN=6a018b7f-f46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8f:e7:ec:50:bb:eb:4f:4c:ee:01:d1:aa:80:
                    b6:81:29:08:54:35:30:67:ff:a0:e5:e6:90:37:74:
                    a3:fb:0a:fe:6b:24:db:9f:bf:f5:8f:63:1b:3b:a8:
                    10:ce:59:19:7b:9c:01:89:df:b8:4e:3a:96:59:df:
                    35:f0:b4:c4:59:f2:06:5c:65:06:79:54:fa:99:45:
                    2c:76:04:4d:ec:4f:58:f3:5a:99:09:f7:d3:bd:d7:
                    6e:bf:19:9d:ee:47:7f:3d:b7:3f:1d:05:5e:fb:a7:
                    73:07:b6:23:b6:a6:91:c1:3b:e2:94:fc:fe:1d:0b:
                    bc:f8:a2:32:83:e0:38:b4:8a:f9:48:25:c1:0b:c2:
                    b0:36:b7:5c:f0:93:d5:24:22:12:20:cc:06:57:d2:
                    55:81:c4:be:18:ad:a5:4b:d6:6f:e0:0d:56:e7:ee:
                    a9:1b:03:b2:90:3a:93:ee:41:e0:a3:b3:01:68:b1:
                    28:33:ec:bc:0e:9d:15:df:69:79:56:7a:11:c1:2f:
                    bc:47:cd:a5:f7:91:bb:49:c9:40:d8:84:4d:c0:ab:
                    9b:c2:5e:e4:75:72:fc:51:bf:74:aa:a2:a0:4f:51:
                    ba:3b:76:3d:23:18:fc:a6:8a:b6:eb:f2:7a:98:a8:
                    0c:26:7a:ea:4b:bf:52:3c:93:07:40:1e:1a:1c:23:
                    59:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:11:B7:2A:15:EB:2C:5C:10:9E:B7:83:09:74:1A:F1:7B:29:94:FD
            X509v3 Authority Key Identifier:
                keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c8:de:21:53:c7:0b:48:b9:92:2f:12:93:ca:8c:50:84:d5:
         79:d2:4f:22:34:85:d1:c4:dd:c2:25:b4:49:82:c5:26:8e:58:
         19:2b:75:ab:ec:19:ee:a3:b2:dd:54:6d:b7:1b:4f:6b:98:44:
         df:d9:5f:7b:6c:4d:4a:8f:11:e1:bd:e4:54:63:1d:1f:fd:6c:
         96:fd:47:7b:b5:21:86:ba:a1:b1:01:ad:6c:91:f4:46:2d:9b:
         77:0e:ed:0a:e0:9d:70:31:15:73:6c:8a:fc:7d:9b:01:8b:0f:
         73:6d:6d:36:83:59:ed:fc:e9:6e:7a:06:8e:f3:02:ab:8b:e6:
         9b:59:c6:84:01:57:e5:39:9b:d2:8d:10:29:cc:7e:aa:2e:2d:
         5d:9c:ce:06:c4:85:37:04:3a:d2:c8:a3:ad:88:ed:ac:63:82:
         7c:93:64:10:6e:bd:86:55:fc:73:62:a1:cb:5b:fc:46:c3:50:
         fd:c2:a3:67:9a:25:49:a2:31:bf:c8:14:97:83:aa:fb:90:c0:
         14:93:b8:e7:6d:bc:55:2a:8f:eb:9e:79:9e:fd:04:b2:a4:9d:
         c1:b6:cd:b7:e1:6f:77:f5:76:fb:bd:90:06:47:22:ae:5b:6d:
         4f:56:4b:ce:9b:84:e6:7c:21:91:a0:94:25:8b:28:36:4e:a2:
         2a:19:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:52 2026 by rpki-client