Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
File:                     ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json)
Hash identifier:          /YF7oECUjj7q1bDHLG+18oAKRjoI6v0uAFvi8pw5iCs=
Subject key identifier:   71:75:6C:61:1F:85:95:B3:66:26:C8:4D:D6:C9:0A:AF:A1:FA:17:D0
Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
Certificate issuer:       /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
Manifest number:          0180
Signing time:             Sat 13 Jun 2026 04:35:45 +0000
Manifest this update:     Sat 13 Jun 2026 04:35:45 +0000
Manifest next update:     Sat 20 Jun 2026 04:35:45 +0000
Files and hashes:         1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: nDAXFFgFU9uersp/xLm48zY3JhboHhbRVz/3+avcEHU=)
                          2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: Xp2kZwTI/Ulm1FSMvB8uIy/q/Twdd9bs92yBpmukUiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
                          rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
        Validity
            Not Before: Jun 13 04:35:45 2026 GMT
            Not After : Jun 20 04:35:45 2026 GMT
        Subject: CN=6a2cde21-67b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1d:d3:f7:88:2b:9b:94:b0:30:10:77:bc:62:
                    a6:48:14:8f:09:bd:c6:07:66:79:c0:65:da:69:41:
                    d7:d4:78:5e:8e:3b:7d:46:a8:76:67:75:5e:1e:c3:
                    ae:14:d8:29:76:15:6c:f7:84:4e:68:ec:df:05:21:
                    a2:09:75:6f:89:21:f2:7f:e4:c9:96:9d:7f:d4:b4:
                    d6:2a:67:d0:5c:30:83:4d:a8:66:9d:b6:d2:1a:94:
                    bb:4e:81:7f:9f:cf:81:50:f2:db:34:5c:3b:bf:70:
                    ee:32:f4:34:3f:5b:90:38:a5:6a:27:a6:50:f9:a6:
                    d9:11:69:ee:fe:c2:10:03:8d:5b:e3:59:9b:cc:ad:
                    dd:29:e9:b8:53:b3:88:d2:45:b6:d7:7d:de:f5:fc:
                    d7:db:34:f0:45:08:95:08:8d:d2:09:d8:c0:5b:0d:
                    ea:4f:d3:d5:6f:d0:db:b8:5b:67:b7:20:36:78:9f:
                    2c:2c:c8:a3:91:c0:94:c6:fd:e7:6c:ca:6c:a6:46:
                    2c:39:22:fd:db:be:ae:9c:1e:3f:d4:33:53:8a:64:
                    a6:81:b9:4e:3a:3a:e0:00:85:3c:ab:3d:fc:26:a7:
                    d7:43:c2:d8:59:da:2c:28:60:7b:a6:7b:7e:12:a1:
                    88:c4:f0:a4:f1:21:36:62:29:ae:d0:dc:0e:38:c9:
                    68:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:75:6C:61:1F:85:95:B3:66:26:C8:4D:D6:C9:0A:AF:A1:FA:17:D0
            X509v3 Authority Key Identifier:
                keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e4:2a:da:1a:cf:40:5e:68:45:d6:0f:51:c9:44:d8:25:3e:
         58:9e:39:84:ff:3b:1e:ca:83:96:4a:5b:b5:82:38:48:4c:b3:
         41:5a:7d:cc:2f:d7:30:7b:7e:81:42:1f:70:fd:9c:88:8e:7f:
         ce:a9:a4:4b:88:f7:62:22:30:ad:d3:76:af:68:b7:4c:c2:4a:
         b5:8d:ce:df:e7:97:4d:af:50:5d:17:4c:64:76:ce:bd:49:81:
         37:57:e2:1c:d3:34:a5:e0:df:62:cb:84:58:f8:60:81:c2:82:
         13:e6:80:30:54:8d:dd:17:09:8d:e1:5f:8b:25:fc:a1:dd:3a:
         07:d4:12:5d:3e:b5:04:6f:7d:db:cb:19:20:c9:ee:a8:03:02:
         5c:56:19:0f:44:e2:4c:32:62:04:15:2f:e3:1d:e5:fc:65:c8:
         35:cb:87:03:86:80:79:5d:3d:eb:01:27:a5:8d:5b:89:f8:3f:
         a4:4d:24:db:82:54:ab:40:d4:0a:1a:8a:dd:34:7d:53:1e:7d:
         1c:76:90:f3:96:68:cd:b5:db:ec:73:fe:79:94:24:17:37:b7:
         e5:55:32:2b:2e:3e:71:77:66:aa:b9:14:d6:cf:ba:23:46:37:
         21:a8:75:d5:eb:68:67:11:44:3a:d0:24:0b:cd:e1:c6:3f:b8:
         e2:e9:3b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:45 2026 by rpki-client