Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
File:                     zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json)
Hash identifier:          WLTorV35iS+0WJBiyzM3/1GvQ2XQITq9/p7lSAIlFNU=
Subject key identifier:   66:7B:CD:2E:B5:11:7B:43:7F:4E:2A:3C:30:34:C0:EA:61:C8:6C:99
Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49
Certificate issuer:       /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
Manifest number:          E1
Signing time:             Wed 13 May 2026 06:43:01 +0000
Manifest this update:     Wed 13 May 2026 06:43:01 +0000
Manifest next update:     Wed 20 May 2026 06:43:01 +0000
Files and hashes:         1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: BUQD+5KUuMoDBLYQSt83625vsLMxaMV3neAh9Z+queU=)
                          2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: R0DPi+gCEM4E0p+D/Qj5W33hKErsLZCVNvWPk/SawTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl
                          rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
        Validity
            Not Before: May 13 06:43:01 2026 GMT
            Not After : May 20 06:43:01 2026 GMT
        Subject: CN=6a041d75-ac96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ba:64:a5:10:89:86:25:39:b8:c7:eb:3d:c9:
                    48:47:b3:e4:42:06:b2:64:82:0a:75:45:07:8e:07:
                    f8:06:7a:e3:dc:63:8c:04:1b:30:01:27:c6:b1:ec:
                    e0:52:8c:30:8f:27:7b:ec:76:f5:bd:4c:14:1e:6b:
                    58:ae:55:90:09:aa:30:cc:dc:6e:78:7d:52:c2:3a:
                    96:38:29:80:6a:92:30:94:d7:36:94:e5:d7:e4:fa:
                    9a:20:83:fc:a7:63:8c:a6:a4:39:53:91:86:92:67:
                    61:63:11:bf:3e:34:74:75:38:06:44:d3:a8:73:c9:
                    d6:b0:89:55:e0:0a:61:e9:c9:85:89:93:a5:2e:bb:
                    15:d3:7f:48:39:9a:9f:c6:27:c8:dc:3c:a1:d5:af:
                    76:71:23:9e:1a:4a:06:6c:fc:e2:8f:2c:df:5a:d4:
                    89:71:06:00:ad:dd:ac:3e:85:da:78:34:c8:64:61:
                    4a:a6:ad:67:e0:7c:ed:94:4b:f7:af:e8:a0:b3:ce:
                    2b:23:1b:97:69:ad:26:c9:86:ae:92:c5:97:72:6d:
                    de:11:a0:d8:bb:c8:eb:06:39:4f:2d:fd:21:db:4e:
                    70:45:60:5c:83:ee:2a:0f:f1:4f:a0:87:ed:cd:34:
                    7c:88:90:14:d4:7f:35:d1:a8:2d:a5:4b:87:06:c8:
                    59:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7B:CD:2E:B5:11:7B:43:7F:4E:2A:3C:30:34:C0:EA:61:C8:6C:99
            X509v3 Authority Key Identifier:
                keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c4:57:49:ed:f9:47:42:1c:75:b7:3e:69:2d:4a:d6:08:9d:
         ab:f4:10:b6:a0:2e:ba:b2:69:19:ca:1f:44:ca:09:74:4f:81:
         1a:bb:ec:6a:96:5c:cb:66:43:1b:6b:a0:32:ea:c1:36:4d:80:
         ec:b3:9e:82:aa:6f:be:14:80:3a:c1:7e:d3:0e:1e:0b:d7:08:
         f7:cd:c0:25:ed:3a:9a:48:cd:2c:bb:a0:c6:14:5d:04:da:a2:
         ff:01:58:3a:10:ee:c9:e6:7c:ed:0e:49:7e:59:ba:2c:0f:f7:
         09:81:8f:97:5a:1f:c0:0b:c6:19:e5:8d:9a:ab:07:49:f7:be:
         6a:43:2d:f0:3b:74:38:c3:d8:6f:45:7a:63:c1:da:71:94:38:
         d9:fd:88:19:16:4f:bc:37:52:cb:da:da:f2:b6:18:24:aa:11:
         7f:9b:d4:7b:d6:f6:ce:8c:37:2a:a1:31:91:3d:5d:0d:b7:68:
         ae:8e:2e:f5:ac:2d:63:fe:3c:03:14:1b:3c:0a:18:35:ad:9b:
         59:96:6a:0d:ff:1a:99:07:e5:d9:bf:76:39:b7:2c:f2:02:17:
         eb:01:a0:43:ab:15:01:b7:2f:e5:c3:f7:c5:e4:aa:dd:8d:c2:
         30:eb:2c:e1:b0:da:88:43:b4:6b:38:7c:04:88:80:02:fb:40:
         b7:08:ac:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:45:35 2026 by rpki-client