Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
File:                     zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json)
Hash identifier:          uhWv7yIEjsTFfV81EqeeSvlkcwWSnDbJdBRDTLrWzBs=
Subject key identifier:   99:E6:26:55:32:40:3A:98:C6:D8:B9:8B:11:96:29:D0:3F:FC:C8:13
Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
Certificate issuer:       /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
Manifest number:          0153
Signing time:             Mon 11 May 2026 05:11:36 +0000
Manifest this update:     Mon 11 May 2026 05:11:35 +0000
Manifest next update:     Mon 18 May 2026 05:11:35 +0000
Files and hashes:         1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: +a3zBligpn+KFCRClc0Oo9IPW3HZFBkqnvC8pjSNzH4=)
                          2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: 5VZ6JaxYHvz/jnyWG4tULUFalKqQD2n3eSx0z0cU+H8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
                          rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
        Validity
            Not Before: May 11 05:11:35 2026 GMT
            Not After : May 18 05:11:35 2026 GMT
        Subject: CN=6a016508-c436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:ac:ee:92:37:5e:70:fe:21:8b:92:c3:7e:
                    1c:25:4b:93:c5:ed:29:2f:ae:cf:30:0b:96:8e:1f:
                    7e:20:cf:51:39:0e:13:7f:f1:7e:fa:85:ef:00:b3:
                    9b:d9:3a:94:29:0f:7f:24:a4:7a:95:f1:f4:86:26:
                    79:fb:fa:d1:47:c3:74:a7:85:18:e6:fe:71:43:c0:
                    1f:7d:7b:13:a4:15:c2:db:d0:c6:66:3d:73:72:f1:
                    69:1a:1a:2d:6e:63:0c:6e:e5:35:f0:ba:d5:a7:5a:
                    51:f5:5d:c1:fc:e7:5d:f0:cd:2a:7f:1c:87:3a:1b:
                    d3:32:50:02:e3:c6:dc:8a:27:a2:d5:87:1b:43:03:
                    77:b7:ae:e3:0a:1f:91:21:39:0d:de:95:d5:2a:e7:
                    9c:73:4f:dd:f4:65:83:f7:3d:5e:22:a0:17:44:6c:
                    9f:9d:4c:5f:ea:d1:5f:80:c2:0a:cf:57:55:9f:9e:
                    d1:c6:8e:e4:80:d2:41:28:ee:7b:0c:da:1a:ed:88:
                    c0:c2:d1:02:37:ae:a8:a4:14:f5:ae:e6:53:d0:66:
                    bb:a5:75:29:67:e6:d3:3c:3a:a8:b6:cf:d7:62:bc:
                    7e:38:93:2d:07:c4:74:8b:2e:54:90:62:fe:4b:a3:
                    bc:60:a3:8e:c3:3f:ca:b2:51:1f:a2:7d:c6:01:6f:
                    a9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E6:26:55:32:40:3A:98:C6:D8:B9:8B:11:96:29:D0:3F:FC:C8:13
            X509v3 Authority Key Identifier:
                keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:35:58:6a:41:6d:51:de:e6:29:36:76:cf:03:5f:09:a6:23:
         f2:ba:9a:ba:5f:93:4e:2a:56:09:29:22:bb:be:6f:ef:63:7e:
         04:ff:5b:3c:b9:be:9d:01:0f:ff:26:2a:79:b3:de:35:9b:2b:
         0a:bd:31:39:07:6e:76:90:ac:ae:f4:10:fd:43:34:a9:50:fb:
         21:92:13:53:e7:2b:9a:73:fd:d1:9d:16:36:ec:a8:72:5e:15:
         32:3a:c3:60:59:b1:f1:6b:d5:33:cf:9c:69:13:9b:9a:c3:c2:
         af:d1:81:3a:b8:03:74:69:fe:d4:5b:d1:7f:36:c6:f9:e1:68:
         0d:fd:d3:5f:f3:22:55:da:13:54:9a:fd:7d:da:ba:01:ab:eb:
         5d:2f:50:5e:4f:d5:10:69:87:ee:e4:ee:73:38:7c:78:d6:4d:
         89:c9:98:e8:6c:4a:57:e0:46:4e:2c:47:25:4d:5b:92:9c:d7:
         c0:87:3b:cf:fd:af:4a:4f:82:a5:c4:84:50:0d:ea:f6:d2:66:
         ec:49:cf:ac:0e:98:c8:77:d6:02:05:1f:2f:66:08:ad:1b:12:
         50:d1:f1:65:5e:ac:cb:e9:72:ad:d7:6b:98:72:fb:14:db:1b:
         a7:3c:3e:53:7a:1f:4e:a2:9e:49:b7:2c:c1:4a:c8:d1:c6:c8:
         26:8b:f1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:25:03 2026 by rpki-client