Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft
File:                     ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft (raw, json)
Hash identifier:          MPg6gOKjWp0tbDWB8lkSWUfnohGVGmHTQ6tC7FP1Cbk=
Subject key identifier:   21:98:71:7F:49:A2:7A:08:19:D6:03:4B:FF:17:5F:C6:C1:B3:87:58
Authority key identifier: 67:21:24:F6:33:C8:91:9C:A5:D7:66:D8:9E:9C:CF:F0:B2:1F:0C:8D
Certificate issuer:       /CN=A91CAA4E/serialNumber=672124F633C8919CA5D766D89E9CCFF0B21F0C8D
Certificate serial:       13E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft
Manifest number:          1BB7
Signing time:             Tue 12 May 2026 16:56:45 +0000
Manifest this update:     Tue 12 May 2026 16:56:44 +0000
Manifest next update:     Tue 19 May 2026 16:56:44 +0000
Files and hashes:         1: ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl (hash: znwSiVLt4CmUfjAFdrCMcpdZmMZ7BMIFIqhs0masg28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5094 (0x13e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA4E, serialNumber=672124F633C8919CA5D766D89E9CCFF0B21F0C8D
        Validity
            Not Before: May 12 16:56:44 2026 GMT
            Not After : May 19 16:56:44 2026 GMT
        Subject: CN=6a035bcd-56fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:da:5b:af:76:44:45:5a:4d:41:fe:23:63:
                    71:82:45:76:7f:9f:25:a1:e9:ba:d0:15:2b:45:5a:
                    19:80:a5:02:03:83:63:9d:b8:ac:39:e5:04:b5:9a:
                    b2:a1:b9:a2:82:88:59:34:7f:13:05:f0:fa:bd:c5:
                    f5:ae:2d:d3:30:6b:d6:90:28:73:bb:0f:e6:6e:7c:
                    de:de:53:5c:96:0a:e3:71:b7:3d:5b:94:a1:cf:e1:
                    64:e2:71:90:33:28:7e:0d:54:00:2d:20:9b:98:c5:
                    8d:b1:f2:cb:e6:36:5e:93:57:1f:c9:bb:f9:dd:ab:
                    fc:ff:3c:63:29:3c:3e:b5:5f:21:c4:ec:53:84:df:
                    5f:0f:41:44:01:19:ec:87:18:fd:6b:42:6c:68:80:
                    02:54:d5:1d:e2:a6:e5:00:b2:b2:ce:84:f2:50:f5:
                    fa:02:bc:4d:60:a2:43:9a:8d:f5:1c:df:16:d7:10:
                    89:4e:fc:e0:c7:60:ce:b9:49:fd:ef:c1:e1:3c:88:
                    15:d9:d4:28:f6:91:26:69:80:c0:4f:a1:2e:c0:a5:
                    9a:0a:27:f5:bc:07:93:60:4a:c9:74:c2:0b:55:7e:
                    2f:eb:c2:f9:4d:69:de:1b:33:2f:11:41:5a:01:64:
                    97:e7:10:2c:4b:d3:66:b3:55:96:8b:eb:87:97:2e:
                    74:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:98:71:7F:49:A2:7A:08:19:D6:03:4B:FF:17:5F:C6:C1:B3:87:58
            X509v3 Authority Key Identifier:
                keyid:67:21:24:F6:33:C8:91:9C:A5:D7:66:D8:9E:9C:CF:F0:B2:1F:0C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyEk9jPIkZyl12bYnpzP8LIfDI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/ZyEk9jPIkZyl12bYnpzP8LIfDI0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b5:9d:da:e0:14:95:7e:aa:e4:1b:1e:b3:87:d1:f2:97:4c:
         d2:07:b5:6d:d0:83:dd:9b:ff:9d:c2:91:f4:5a:5c:0f:1b:a6:
         88:e3:a4:8a:a7:67:ba:ec:bd:eb:5c:3a:1d:5b:4a:a3:8e:24:
         a1:02:16:9d:2f:b2:5f:99:73:7e:04:da:36:30:bb:b8:77:22:
         5c:6f:49:00:ab:59:4e:25:05:1f:43:a2:83:af:f1:80:a2:83:
         d4:e6:be:39:1d:cf:bd:e6:8f:da:9f:95:13:c3:a5:91:f9:47:
         cf:04:30:e9:09:fc:19:86:e2:ce:84:e2:c4:33:da:77:35:bc:
         b8:4f:83:60:30:66:7d:06:1b:1d:c5:86:9a:ac:e0:96:b0:16:
         01:b0:d1:f6:7a:6c:66:06:7e:40:86:00:83:13:da:cd:ec:c8:
         37:ee:63:34:80:90:1d:23:2f:da:09:f2:70:08:7a:f5:e7:ed:
         ec:ed:d9:08:f5:05:a2:2f:9c:18:9f:8b:2b:b9:83:53:8f:e4:
         bd:b2:22:f6:c3:c4:21:20:21:8a:c6:a1:65:01:92:c3:cb:6b:
         52:cd:a5:a1:21:ed:b9:f8:65:a0:03:17:2a:5d:23:54:67:fd:
         86:69:08:5e:22:eb:56:df:d5:d1:91:b6:2a:6b:b2:d8:54:58:
         88:31:9d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:13:55 2026 by rpki-client