Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
File:                     ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json)
Hash identifier:          2vO+ZuoUnlV4vFFytEDcNv4hUzTXx20pq/ldMykHmrU=
Subject key identifier:   5A:FD:2F:57:19:10:3F:55:45:2B:2E:7B:65:3C:10:69:54:32:A1:2F
Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E
Certificate issuer:       /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
Manifest number:          014A
Signing time:             Tue 12 May 2026 21:41:10 +0000
Manifest this update:     Tue 12 May 2026 21:41:10 +0000
Manifest next update:     Tue 19 May 2026 21:41:10 +0000
Files and hashes:         1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: DlfwdCL949mK/Qr3B7C2suqaLTOnyhZ1HNBxbJJpmk0=)
                          2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: 4De+ftW6AlydF3aj182yhRL0S4HDbta7pD0izCS8LQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl
                          rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
        Validity
            Not Before: May 12 21:41:10 2026 GMT
            Not After : May 19 21:41:10 2026 GMT
        Subject: CN=6a039e76-4ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e4:9c:59:d0:53:e0:5e:f0:4b:4a:a3:84:13:
                    7a:cf:d1:8c:c9:f8:1d:b1:ec:ad:3f:5b:85:76:70:
                    3a:c5:ec:c1:cd:73:e6:70:62:e1:7e:27:e5:36:a0:
                    cc:8a:71:82:55:c9:0a:83:62:43:39:5d:eb:e2:8d:
                    9e:f5:b6:2d:9d:ca:b8:05:a1:55:62:d3:dc:6a:a3:
                    77:95:13:43:0e:bb:a7:69:c5:3f:64:aa:1d:bc:c5:
                    97:1a:b6:1d:7b:99:c2:43:69:80:a9:fd:b7:c8:cf:
                    97:ce:e6:a3:93:c6:c9:47:22:c1:78:db:77:ee:3e:
                    3c:37:33:60:5e:e8:b3:aa:37:2f:22:e3:1b:22:14:
                    4a:4c:9b:fb:83:65:22:f6:4c:1b:2a:63:0d:34:a4:
                    a7:79:eb:b5:66:1f:db:30:99:6e:a9:08:47:bb:59:
                    c5:ab:b4:ae:ec:cc:b2:e2:28:eb:84:a6:84:4e:0f:
                    96:67:6b:68:2c:d6:2d:c2:b9:30:11:e1:ef:53:86:
                    b4:e3:83:46:7a:ef:02:11:76:aa:58:db:7e:26:ba:
                    99:59:13:57:51:e2:a7:85:95:0c:42:ca:a6:ca:c8:
                    b5:91:25:47:f3:e3:10:d3:02:67:64:c9:19:01:f9:
                    38:53:e4:e7:26:a3:31:7d:d1:74:f9:6d:c2:08:74:
                    7a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FD:2F:57:19:10:3F:55:45:2B:2E:7B:65:3C:10:69:54:32:A1:2F
            X509v3 Authority Key Identifier:
                keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:49:ba:c4:f9:24:0f:51:35:4f:4c:b0:d2:28:e6:ff:d5:49:
         45:5e:d0:be:3e:35:8d:f5:62:23:b0:7d:e4:d9:78:57:74:3d:
         02:b6:11:1a:ff:a0:2b:2f:e3:3b:5a:fb:ca:11:a8:5f:f7:40:
         8d:07:0d:6c:ee:56:0b:42:12:e7:63:c7:4a:17:93:54:47:9a:
         9c:db:30:c4:1c:7a:ff:0c:92:19:8b:c8:79:2d:b8:34:96:ec:
         ed:34:c2:f0:c8:2d:d9:d9:0b:2f:33:fb:cf:c8:3e:e2:f6:28:
         68:8d:f9:e1:d5:86:3e:80:23:0e:ff:f9:e8:53:64:d1:7b:78:
         73:70:4a:e3:11:c2:a8:70:c5:67:c3:86:61:1a:24:8d:da:45:
         88:12:a9:13:e1:7d:26:fa:ab:36:7a:38:d4:af:6c:dd:14:14:
         f3:c8:d0:50:09:e3:5f:08:e2:14:b1:5f:f5:d3:e1:ab:3d:c5:
         49:5f:68:2c:d0:5d:53:bf:1d:8a:84:f4:bf:2d:63:ae:f5:bc:
         ef:80:15:45:b3:6d:99:44:57:82:ee:5f:04:48:cf:bf:51:37:
         d4:48:f9:db:2e:d8:c5:e2:69:dc:f1:cc:46:ef:61:89:50:59:
         6d:78:e9:bd:c7:26:ba:e7:3e:58:27:da:7f:7b:36:f2:c2:ef:
         eb:46:72:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I0MzUxMTAvBgNVBAUTKDY2RDlEODE3Rjg2QzgyREIzREYzQTFDNEQ5NzBGMkFB
ODVDQUFEN0UwHhcNMjYwNTEyMjE0MTEwWhcNMjYwNTE5MjE0MTEwWjAYMRYwFAYD
VQQDEw02YTAzOWU3Ni00Y2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3eScWdBT4F7wS0qjhBN6z9GMyfgdseytP1uFdnA6xezBzXPmcGLhfiflNqDM
inGCVckKg2JDOV3r4o2e9bYtncq4BaFVYtPcaqN3lRNDDrunacU/ZKodvMWXGrYd
e5nCQ2mAqf23yM+Xzuajk8bJRyLBeNt37j48NzNgXuizqjcvIuMbIhRKTJv7g2Ui
9kwbKmMNNKSneeu1Zh/bMJluqQhHu1nFq7Su7Myy4ijrhKaETg+WZ2toLNYtwrkw
EeHvU4a044NGeu8CEXaqWNt+JrqZWRNXUeKnhZUMQsqmysi1kSVH8+MQ0wJnZMkZ
Afk4U+TnJqMxfdF0+W3CCHR6uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFr9L1cZ
ED9VRSsue2U8EGlUMqEvMB8GA1UdIwQYMBaAFGbZ2Bf4bILbPfOhxNlw8qqFyq1+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9GNUU2MjcyNDVF
Q0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0czk4NkhFMlhEeXFvWEty
WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p0bllGX2hzZ3RzOTg2SEUyWER5cW9YS3JYNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjQzNS9GNUU2MjcyNDVFQ0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0
czk4NkhFMlhEeXFvWEtyWDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnkm6xPkkD1E1T0yw0ijm/9VJRV7Qvj41jfViI7B95Nl4V3Q9ArYRGv+gKy/j
O1r7yhGoX/dAjQcNbO5WC0IS52PHSheTVEeanNswxBx6/wySGYvIeS24NJbs7TTC
8Mgt2dkLLzP7z8g+4vYoaI354dWGPoAjDv/56FNk0Xt4c3BK4xHCqHDFZ8OGYRok
jdpFiBKpE+F9JvqrNno41K9s3RQU88jQUAnjXwjiFLFf9dPhqz3FSV9oLNBdU78d
ioT0vy1jrvW874AVRbNtmURXgu5fBEjPv1E31Ej52y7YxeJp3PHMRu9hiVBZbXjp
vccmuuc+WCfaf3s28sLv60ZyrQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:22:06 2026 by rpki-client