Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
File:                     ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json)
Hash identifier:          salkoAMX5N4BWOQlVUqr3wLTL1PaU6SBn9ksjl5qZgs=
Subject key identifier:   25:CE:D5:5E:CE:A3:3A:55:DF:33:58:FA:B9:F7:07:42:6A:5A:72:33
Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3
Certificate issuer:       /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
Manifest number:          010D
Signing time:             Wed 13 May 2026 06:08:46 +0000
Manifest this update:     Wed 13 May 2026 06:08:45 +0000
Manifest next update:     Wed 20 May 2026 06:08:45 +0000
Files and hashes:         1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: jtcP3pmZ8EOc/9jh/SMLJIIH0197ZmuA/UX0i76I7UM=)
                          2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: svfCZY/4ijPFg+GD8JzFGuMZM/fHEdmUD+EacNaNCNg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl
                          rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
        Validity
            Not Before: May 13 06:08:45 2026 GMT
            Not After : May 20 06:08:45 2026 GMT
        Subject: CN=6a04156d-4f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:6e:47:10:44:bf:a3:7f:98:20:fc:7a:5f:
                    d8:a1:31:9c:40:c4:73:63:b5:cf:eb:63:ce:84:ed:
                    fe:a1:cf:3c:fb:bb:bb:61:57:b4:fc:09:d0:30:67:
                    8e:5f:12:8a:f7:61:df:74:0e:57:b1:08:17:7c:36:
                    49:cf:a3:77:c4:22:d6:52:fc:13:6e:a2:eb:3f:a6:
                    d7:1b:7e:b0:e7:de:5f:16:28:50:85:8b:f9:5c:44:
                    ae:60:f7:a7:01:a0:20:97:4c:33:42:e5:1f:2a:fa:
                    8e:6e:9e:42:e3:46:6b:8b:ee:0a:05:49:93:f6:25:
                    43:5d:e8:77:b7:69:86:cc:01:66:8a:b7:71:be:49:
                    6d:d2:6c:ad:e4:a6:f8:c2:e1:d1:e2:11:01:18:10:
                    fc:0e:4b:de:ea:a4:db:63:6f:49:15:14:47:c5:0d:
                    50:61:0a:db:a3:22:4a:9b:e7:ff:6b:2a:89:70:67:
                    35:39:8c:02:9d:8f:99:26:2b:c5:94:be:3f:7f:2a:
                    1c:a3:af:1e:8f:0c:fb:ca:08:51:27:b3:7e:4e:a5:
                    9d:9f:f4:7e:2a:b6:0e:64:0e:2d:00:5f:61:c5:8e:
                    5b:90:71:0e:0a:db:35:e8:6d:b4:11:92:12:e8:80:
                    8a:39:18:fc:73:e5:6f:bb:b7:14:34:e0:d4:ef:93:
                    0c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CE:D5:5E:CE:A3:3A:55:DF:33:58:FA:B9:F7:07:42:6A:5A:72:33
            X509v3 Authority Key Identifier:
                keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:cc:db:23:0a:b8:66:be:c6:9e:91:fa:72:ab:36:b6:6f:c4:
         fb:55:65:b9:21:1b:84:c7:94:32:a5:20:e9:9c:95:e8:c6:27:
         10:30:73:c0:75:ee:c3:92:8d:e1:41:a3:c6:fb:3e:66:35:b7:
         90:90:5e:85:af:98:d5:59:d3:87:2e:77:bb:89:76:6c:fe:15:
         86:34:db:d6:3f:6a:e9:ee:0e:41:73:0c:fe:68:4b:d6:6b:c0:
         bb:c3:9d:6d:89:57:b5:43:4a:0d:b9:d2:7c:9b:7d:b9:2f:6c:
         1b:5b:f8:01:b4:52:f1:e9:a6:f7:e9:49:29:e8:3b:d9:d2:c0:
         ba:2d:47:4a:45:9c:0a:45:02:c1:c3:42:8f:9d:2b:e0:ce:6c:
         fe:ba:e6:d3:e0:f4:c9:1e:d8:e4:7b:fc:77:67:31:da:b7:da:
         3a:8d:91:6a:62:1e:9f:81:23:d8:58:38:05:6c:c9:27:14:ff:
         ca:9c:10:84:b7:29:cd:e9:d1:b2:8c:a1:e3:62:68:a6:db:07:
         11:e4:90:61:24:1d:42:20:a4:72:b0:08:62:b5:82:c8:9c:6d:
         ea:2e:86:18:05:19:60:40:b2:ac:05:b2:5a:d6:f2:a1:96:2f:
         db:86:ff:bc:62:ef:a1:cc:e3:80:a3:63:a7:3b:68:a5:8f:4a:
         8a:86:2e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:36:07 2026 by rpki-client