Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
File:                     0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json)
Hash identifier:          SlS/1MYjSuDqvVoXFKPW3w63gk0hFx4Ik32pKG8/aZU=
Subject key identifier:   AC:3B:9E:C3:8A:1B:9A:E8:E2:14:2C:8D:41:AD:52:CA:58:D9:F6:2E
Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
Certificate issuer:       /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
Manifest number:          71
Signing time:             Wed 13 May 2026 07:57:21 +0000
Manifest this update:     Wed 13 May 2026 07:57:20 +0000
Manifest next update:     Wed 20 May 2026 07:57:20 +0000
Files and hashes:         1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: K7EM7OlWhGmtpC8yQR1iB9LG4LI7p9JAcwz9laV5Mq4=)
                          2: 06ED25D2A7CF11F0927DA829C4F9AE02.roa (hash: x1p58QyGOEEZzvkP+F1o5eBxOfZdy5EZehyc+fW6wlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
        Validity
            Not Before: May 13 07:57:20 2026 GMT
            Not After : May 20 07:57:20 2026 GMT
        Subject: CN=6a042ee1-84d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:b5:02:b6:c5:fe:8e:fd:4e:bb:bc:d5:8f:
                    b8:e0:13:c5:95:3e:33:e2:f9:99:ff:dd:5c:41:a0:
                    d7:4f:bc:b9:34:db:98:15:c5:b6:c6:b8:68:ed:37:
                    2c:e5:a9:d6:34:9e:3f:9e:7a:24:ff:98:91:a4:7a:
                    00:31:62:bd:07:51:c2:94:2a:e9:c6:28:c6:c6:8a:
                    f7:fe:1c:e5:df:5c:9b:bb:3e:6e:b9:5c:cb:6e:56:
                    ef:43:bc:23:72:f5:d0:f2:9e:de:42:02:dc:e9:dc:
                    ad:6b:9d:b0:83:f8:a5:18:eb:c6:68:3f:33:cb:5a:
                    7a:9a:af:89:ec:fa:15:d7:e4:45:b2:4d:32:28:86:
                    c1:ba:97:46:72:5c:53:75:8b:ef:df:dd:9e:4f:8c:
                    27:23:8e:22:f4:39:ce:af:5d:70:00:b5:dd:2d:75:
                    92:a0:a4:2d:7a:86:36:a7:95:30:87:c6:ef:70:96:
                    d5:d5:b7:1f:4d:a0:40:f0:53:4a:9a:c9:0b:05:71:
                    cb:a7:e7:07:0c:4d:1e:5c:77:f7:63:ee:68:97:70:
                    fe:b8:1f:99:3d:c6:50:8c:8f:f6:cc:51:0f:0b:a9:
                    ec:a7:3b:0c:ec:4f:6e:3e:10:c1:a0:98:4f:ff:16:
                    fd:77:66:91:42:e4:c1:03:80:06:67:b5:46:f8:48:
                    56:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3B:9E:C3:8A:1B:9A:E8:E2:14:2C:8D:41:AD:52:CA:58:D9:F6:2E
            X509v3 Authority Key Identifier:
                keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bd:24:9c:62:8b:d7:88:75:94:1f:b8:c4:4b:a5:3a:6f:1e:
         54:b4:49:4a:51:b0:b4:e6:a8:d5:73:10:38:08:ec:a4:de:33:
         ec:47:53:3c:57:bb:fe:58:f6:3b:29:fd:6b:2d:07:fc:8e:6c:
         2f:55:05:77:69:a3:93:8f:01:63:f1:af:54:20:c6:e1:1e:49:
         ce:70:d8:90:80:9b:75:e6:74:b2:e0:b5:59:6c:85:af:a2:f1:
         af:73:df:98:98:c1:f3:06:1e:76:d2:44:b5:92:70:09:a6:8f:
         e4:71:c7:86:4a:25:af:60:99:ae:0d:64:43:a4:f7:f2:a1:3c:
         35:78:dd:d8:5e:02:be:18:e5:a0:97:da:57:77:d2:bd:ba:5c:
         e4:58:5d:95:26:87:94:3f:d2:60:90:96:e3:97:70:20:f3:7b:
         1a:27:d5:d6:50:9a:e8:92:f3:54:2b:2f:20:69:25:20:2b:36:
         c6:49:b6:82:a1:6e:55:66:48:1d:0b:67:c5:f1:59:fa:48:b3:
         75:fa:0e:a9:e8:f4:85:03:94:22:56:a3:8b:4c:08:9f:3f:3a:
         b6:0f:e6:07:fe:73:a3:6e:21:30:b3:8e:7a:b1:7b:6f:d0:8b:
         7b:5d:d5:d2:33:13:81:41:50:57:96:4b:f0:f7:9e:27:07:df:
         5e:87:95:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:37:36 2026 by rpki-client