Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
File:                     zPWB9MM8pEQeGAfjlsXv51-oLdA.mft (raw, json)
Hash identifier:          2/2iDcQI7Xfdi4vcD7XkMly5zRq20IAGY2s8gXwShZY=
Subject key identifier:   3E:20:DA:16:8E:68:A3:57:F4:A5:A8:45:6E:3D:D5:4E:40:2D:17:F5
Authority key identifier: CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0
Certificate issuer:       /CN=A9111A27/serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0
Certificate serial:       0B03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
Manifest number:          0AF4
Signing time:             Fri 12 Jun 2026 19:24:47 +0000
Manifest this update:     Fri 12 Jun 2026 19:24:47 +0000
Manifest next update:     Fri 19 Jun 2026 19:24:47 +0000
Files and hashes:         1: zPWB9MM8pEQeGAfjlsXv51-oLdA.crl (hash: Pekq5tzF1Ha0ZgDt0h539cuIZ+f0A9+DsaaOXkWwn9U=)
                          2: EECBCEBE6E3511EABDE26D73C4F9AE02.roa (hash: r1pD0Q+gqTEwuW8+FxM3DxEOTWIuAGXXddrFG01zuI0=)
                          3: 4A644958BA0311F084B11F0DC4F9AE02.roa (hash: jYg6q/W/0HVfh05DuMfHV7pRX1CgQotQsytTOYFkR4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl
                          rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2819 (0xb03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111A27, serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0
        Validity
            Not Before: Jun 12 19:24:47 2026 GMT
            Not After : Jun 19 19:24:47 2026 GMT
        Subject: CN=6a2c5cff-07f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bb:fb:7d:3d:6b:ac:a2:27:a5:df:71:10:88:
                    72:f4:7a:db:82:ac:ac:03:ad:62:a9:ea:42:0f:89:
                    ca:96:5d:f6:e4:14:6c:4c:00:89:2d:62:95:e6:09:
                    92:97:8b:f4:28:54:97:7b:b4:d9:ff:6f:f4:0c:2d:
                    37:3c:73:a5:32:11:d6:d0:c5:7a:3d:3f:33:e6:41:
                    03:05:81:dc:74:2a:82:f8:dd:45:a6:06:c1:10:33:
                    97:a7:3c:c8:6f:e1:32:4a:51:28:c3:e5:a9:2f:70:
                    a7:75:f9:48:27:3a:6c:0e:89:6e:02:a8:eb:38:f5:
                    2b:67:45:09:e8:9a:3c:6f:0e:47:ea:a1:89:f4:43:
                    43:f8:00:cd:9b:e3:10:87:14:f6:4e:57:61:2f:d3:
                    f4:b8:b3:9d:55:dd:dc:9f:ce:58:5e:01:12:c7:18:
                    2f:fa:7d:f9:5d:99:f9:04:b4:ae:4d:1b:57:b5:00:
                    9b:b9:2a:e8:3b:56:cc:79:1a:83:73:6a:a7:2f:42:
                    9d:db:64:76:36:3f:f9:9f:bd:dc:68:43:05:31:fe:
                    24:af:d6:bb:79:31:58:7b:35:34:10:d1:07:2d:0e:
                    46:83:53:d6:37:d2:f3:d9:89:69:97:2e:4d:cb:0a:
                    37:73:a9:96:64:d1:6e:78:1e:b1:e1:07:b7:79:bf:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:20:DA:16:8E:68:A3:57:F4:A5:A8:45:6E:3D:D5:4E:40:2D:17:F5
            X509v3 Authority Key Identifier:
                keyid:CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:11:80:cc:88:19:8a:50:31:60:fe:5e:58:c5:e7:36:26:b1:
         6b:9f:27:6a:b8:ed:3c:f0:96:8a:04:4c:fc:cc:18:fa:f8:c5:
         7b:79:77:3e:ad:f3:19:ff:a1:c2:7f:0d:5a:19:7f:83:5e:90:
         21:e5:76:35:a3:dc:e1:f6:36:13:e9:86:b8:3e:bd:69:b5:ff:
         92:ef:77:3d:6e:41:03:7a:ec:da:33:dd:4c:8d:68:4d:40:1f:
         35:bc:e3:95:b5:d4:83:a1:01:65:ae:8c:42:34:0b:56:1a:03:
         3b:f2:19:27:e3:49:20:f7:1c:a8:91:9d:b8:52:63:53:65:c6:
         aa:8e:e7:29:52:c3:e6:d5:46:58:d7:f3:9f:85:ea:f1:21:fb:
         5f:b7:4d:59:c7:2b:32:e3:82:5e:3e:82:98:13:61:13:ae:0e:
         51:20:5a:08:38:d0:41:6f:24:5b:3d:73:4f:0c:9e:41:80:25:
         7f:2c:71:5b:6f:ba:59:9a:04:06:6d:27:52:7b:9f:69:e2:75:
         1e:77:f1:9a:0b:20:8d:f8:67:9b:7c:2f:5d:7c:da:c5:f8:e2:
         e4:da:72:fd:31:5a:2f:2f:77:73:11:dc:1f:1c:c3:db:d0:f1:
         ef:e9:b6:ed:bb:bd:c8:95:12:7b:15:ba:45:cf:07:d4:99:7e:
         52:d4:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:00:05 2026 by rpki-client