Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
File:                     ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft (raw, json)
Hash identifier:          l0ut1DLTYD7385VFfUXqvV1nxJlazzJaQFCc8SRQjFo=
Subject key identifier:   C9:A9:38:F8:F4:B3:E7:89:C9:F4:79:85:42:A0:81:BF:F7:CE:83:FF
Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA
Certificate issuer:       /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
Manifest number:          09A5
Signing time:             Tue 12 May 2026 20:16:18 +0000
Manifest this update:     Tue 12 May 2026 20:16:17 +0000
Manifest next update:     Tue 19 May 2026 20:16:17 +0000
Files and hashes:         1: ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl (hash: BMi1OW0E4MCbhip4J4vAVKhk44AmQqmmxavoGU60XRM=)
                          2: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (hash: 5RbDYlZaIKQenAR20w6lc3nfzj9SDGCtSWGXdzXfTX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl
                          rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
        Validity
            Not Before: May 12 20:16:17 2026 GMT
            Not After : May 19 20:16:17 2026 GMT
        Subject: CN=6a038a92-fd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:61:eb:4e:55:bb:f9:9a:82:da:07:da:7c:
                    47:b9:21:62:f4:6c:a7:e0:b2:65:0e:a3:78:df:14:
                    d7:d6:36:e6:58:83:a1:67:cd:3b:2b:9d:bc:11:02:
                    5f:5f:0c:57:98:72:92:a4:50:e6:51:dc:d3:ee:94:
                    b0:7a:0f:f9:b6:4f:c8:c2:44:d8:ad:22:6f:f0:71:
                    b2:16:a4:2f:16:7c:c9:b8:75:3b:e8:46:4d:86:cb:
                    88:07:95:9f:d9:2d:6a:6f:9d:2a:be:89:91:81:5e:
                    42:6b:53:59:e9:1a:b6:58:cc:8c:cd:99:96:88:1c:
                    1e:99:62:de:c1:38:52:2e:49:62:df:ad:1e:ec:78:
                    7f:2a:15:df:7b:1e:c8:2c:cd:90:58:74:30:9b:7c:
                    ab:46:61:da:4a:f7:98:20:e9:00:35:03:a1:45:de:
                    fb:b5:20:f0:a2:14:16:a9:81:c9:f5:9f:84:aa:04:
                    95:83:47:b1:49:a3:fa:a2:b0:f7:13:05:a3:ea:67:
                    8d:e9:7b:d2:08:50:22:db:f8:7f:72:51:51:e2:ce:
                    17:49:e8:52:60:8e:4b:36:7b:73:a3:f1:b7:02:48:
                    e2:18:82:7d:d0:53:68:7e:51:16:9e:ff:1b:5f:49:
                    d1:88:32:40:8a:3a:e8:bd:3e:06:e8:6e:c6:4c:09:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A9:38:F8:F4:B3:E7:89:C9:F4:79:85:42:A0:81:BF:F7:CE:83:FF
            X509v3 Authority Key Identifier:
                keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4c:7a:2b:e7:98:bf:f4:e3:b8:8a:bc:7b:30:89:78:ae:1f:
         a6:cd:49:6e:1b:fb:da:fe:0b:0d:f1:9b:f0:43:5a:97:ad:d8:
         9a:0b:ae:ef:80:78:db:19:be:d1:3d:3d:ad:34:a1:94:71:3e:
         5b:fd:49:1f:48:8e:60:8d:d5:06:c4:97:4f:45:7e:76:91:d2:
         e7:9d:fb:3a:c2:ff:eb:f7:a7:9b:88:48:49:02:13:b7:0b:19:
         0d:8d:9d:85:a3:8c:62:d3:45:e3:e5:ce:55:0b:9b:a6:88:c8:
         4b:12:2c:44:5b:84:09:f6:a7:52:af:b1:83:96:61:64:1c:4e:
         ed:49:4d:80:f0:f6:45:bc:de:87:83:0c:76:a0:80:57:65:ed:
         d2:5e:5c:6e:78:c7:e4:0a:71:43:bc:be:e3:d7:c7:e2:29:36:
         a3:3b:52:ba:c3:4b:03:a5:fa:a5:29:ea:18:92:a3:aa:67:2c:
         b9:23:1d:bd:47:cd:b5:52:09:3d:6f:22:c7:30:9b:7b:45:4c:
         56:57:62:78:98:e1:3f:21:ac:20:18:03:db:69:e3:f3:6b:30:
         e6:07:b6:21:79:e3:4e:af:58:04:d8:f8:8f:3b:71:bc:a1:11:
         7a:28:ac:5e:ce:a9:76:ed:b2:07:4d:7a:d8:d3:9c:c0:05:e2:
         7b:3a:56:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:43 2026 by rpki-client