Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
File:                     Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json)
Hash identifier:          m8GON0lgBzhqPtB3i4YqxxI4cYCpjfn8vp5vnDrJIi0=
Subject key identifier:   3B:17:2A:93:DE:A2:F8:9E:5D:FE:75:67:E6:A9:6D:48:BE:40:8F:BA
Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
Certificate issuer:       /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Certificate serial:       0421
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
Manifest number:          0421
Signing time:             Fri 12 Jun 2026 20:32:15 +0000
Manifest this update:     Fri 12 Jun 2026 20:32:15 +0000
Manifest next update:     Fri 19 Jun 2026 20:32:15 +0000
Files and hashes:         1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: rZZqjIyVb+yjoIitpXTPlnEdCHkvaUE6Aa5As0lW0/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
        Validity
            Not Before: Jun 12 20:32:15 2026 GMT
            Not After : Jun 19 20:32:15 2026 GMT
        Subject: CN=6a2c6ccf-f4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:fc:19:ef:27:36:c2:91:ea:65:a5:32:1e:
                    da:84:f1:09:81:db:a3:fd:10:e7:61:2b:df:25:8d:
                    2f:f1:02:bd:42:20:0b:36:91:f9:2d:4f:6f:69:70:
                    09:68:42:9e:07:14:3b:dc:55:c1:1c:6d:65:32:b3:
                    d1:43:1e:4e:ae:fd:26:33:23:fa:dc:72:82:f4:b5:
                    ad:a3:1a:28:d4:ca:6d:06:2c:25:2e:a8:15:64:73:
                    6b:db:f7:3d:53:57:37:8c:dd:17:a6:da:f7:d9:a1:
                    d9:fd:5c:93:f3:94:a1:85:dd:b8:ca:de:86:0d:18:
                    df:f8:98:cf:32:67:2d:ad:e5:c9:82:2e:9c:92:18:
                    e4:23:72:d0:3f:5d:92:c8:53:5a:05:9f:83:80:67:
                    e8:23:2b:69:92:0f:49:7f:ec:3b:25:12:3f:e5:7b:
                    83:09:a4:d8:b9:97:bb:a1:00:15:5c:1a:1c:a1:43:
                    0b:27:5f:22:2c:10:31:6b:b6:8f:0f:79:ec:36:6f:
                    b8:d5:f0:05:3f:84:2a:d1:13:0c:36:5f:97:9f:34:
                    d0:08:bf:14:22:1c:37:b7:1c:9f:67:b7:75:0e:d3:
                    f6:92:da:7b:8a:c9:b3:c6:76:aa:8b:a7:5b:b2:0f:
                    dd:a6:ff:a3:d6:42:53:b0:3c:92:90:45:a7:08:07:
                    7f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:17:2A:93:DE:A2:F8:9E:5D:FE:75:67:E6:A9:6D:48:BE:40:8F:BA
            X509v3 Authority Key Identifier:
                keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:6f:6c:33:be:49:c4:3b:44:e0:7d:ba:db:c7:84:64:e2:84:
         69:48:5c:5e:7e:68:5e:8d:41:2f:e1:af:e5:e1:97:60:93:65:
         d9:f3:ae:af:ad:0b:f8:1d:f0:b7:6a:32:51:88:00:2c:66:ed:
         20:03:05:7b:d2:07:92:5e:01:b8:8d:fc:d9:06:1b:a7:b0:2b:
         6e:18:1b:19:22:99:1a:43:6c:f8:cf:45:a6:8b:ff:9e:5d:92:
         41:74:69:67:83:de:d2:f3:c1:31:8f:a9:41:8b:8f:da:87:9f:
         b8:72:6a:5c:e6:33:78:63:79:10:51:af:36:2a:15:1a:be:59:
         22:5b:dc:72:78:62:da:03:1a:07:18:d9:0d:34:6d:62:e6:00:
         f8:ec:d6:34:f3:4a:61:22:03:bf:de:d3:10:d5:f8:5e:99:52:
         96:5e:ec:74:e4:d4:3b:58:94:f7:52:8a:92:70:97:5e:0d:21:
         14:32:cd:5f:15:72:b4:f3:cd:b2:da:62:b4:ec:d7:60:a8:a7:
         24:2e:42:1f:4e:d8:7c:2b:f2:52:c1:66:c0:7e:51:ed:63:4a:
         49:52:24:e0:8b:64:e5:99:32:d6:f7:f5:d4:cb:d8:40:f5:06:
         f7:b6:4f:e0:9d:4d:85:5c:9a:4a:79:59:f9:7e:1a:cd:92:e5:
         3b:7a:5f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:36 2026 by rpki-client