Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
File:                     ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft (raw, json)
Hash identifier:          fugcV/CQnfbSy7m7ztgpWV9k0SOHR/8zkNoOOhdqS8M=
Subject key identifier:   53:0D:CF:15:0C:AD:D6:CA:AF:1C:88:F3:4E:33:58:A3:8A:53:40:CD
Authority key identifier: 66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4
Certificate issuer:       /CN=A912519D/serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
Certificate serial:       0680
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
Manifest number:          0679
Signing time:             Fri 12 Jun 2026 22:36:01 +0000
Manifest this update:     Fri 12 Jun 2026 22:36:00 +0000
Manifest next update:     Fri 19 Jun 2026 22:36:00 +0000
Files and hashes:         1: ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl (hash: 8uy2qpKI1TCNRgrBmNXCn1kfzrNMAStV5lQhtHRKuM0=)
                          2: 10581DEAC75D11EBB00EBD1AC4F9AE02.roa (hash: 5sKr5Je6hbpFf2Q5JDk7nrFaAZ90rKYQRnu0lj3etl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl
                          rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664 (0x680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912519D, serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
        Validity
            Not Before: Jun 12 22:36:00 2026 GMT
            Not After : Jun 19 22:36:00 2026 GMT
        Subject: CN=6a2c89d1-da75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:db:4f:d1:b8:0f:02:3f:42:71:e1:2a:98:60:
                    bf:2e:ef:3b:dc:54:db:53:b3:54:21:fc:50:ba:f2:
                    29:7d:1b:1f:60:31:0c:38:1c:a2:d8:f2:71:75:36:
                    5f:9d:40:59:34:08:5a:e7:2e:1e:4c:2e:d4:ae:a0:
                    f9:0c:a4:09:c1:3c:d4:16:4f:9c:d8:66:ca:db:f5:
                    9e:73:af:c5:f3:a3:08:f7:d5:9e:87:cf:5a:9b:dc:
                    27:00:a9:46:dc:27:c0:13:5d:c2:4c:0d:ef:ab:a3:
                    ef:17:3d:d3:06:20:19:0d:30:47:3a:5f:1d:9a:dd:
                    26:52:fa:7a:58:57:d5:68:c5:9e:38:1c:6a:fb:a0:
                    64:c0:1e:f8:c0:2d:85:85:63:2f:7d:fb:b6:e5:51:
                    56:09:f1:86:c7:f8:a9:d2:d7:48:1d:81:82:83:1d:
                    11:7d:9e:68:25:68:f6:94:21:5c:b7:cf:19:d9:ac:
                    76:0f:7c:68:f6:7e:dc:e6:25:a2:a1:9d:c6:7d:33:
                    52:ab:03:5c:0b:e7:c1:20:e9:9c:f2:2b:c3:7b:e1:
                    d3:76:3a:d9:96:77:a6:53:80:7d:20:8e:e7:d1:00:
                    1c:d1:ea:2f:17:a1:ce:a1:c4:c2:87:e5:64:28:9c:
                    3a:fe:59:3d:9c:49:24:71:06:4b:28:ac:fb:49:8b:
                    15:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0D:CF:15:0C:AD:D6:CA:AF:1C:88:F3:4E:33:58:A3:8A:53:40:CD
            X509v3 Authority Key Identifier:
                keyid:66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:42:50:31:0c:43:92:a1:ff:8b:c2:22:e2:4e:35:32:7e:ea:
         35:a5:5d:76:92:87:25:77:85:34:1b:ba:41:93:23:7d:ee:a3:
         2b:d5:7f:69:37:5b:99:ef:74:29:a6:bc:d1:58:81:4b:6b:06:
         10:d1:3a:28:73:0c:d0:5b:bd:73:bb:66:c0:f2:3d:34:56:8c:
         fc:c9:c5:0c:86:20:21:ea:54:12:0c:1a:63:63:50:8f:c9:0c:
         de:7b:bc:3f:0e:b5:9c:73:5e:10:9d:ab:65:ac:f4:92:17:7c:
         4c:f8:62:08:fb:17:67:7a:b6:d2:3a:2f:cb:e0:e7:9c:94:14:
         f5:77:b1:d4:73:1a:61:26:c4:25:a8:dc:f5:cd:87:0a:69:27:
         4d:98:ef:95:8b:20:81:25:10:bb:97:29:4b:47:da:f1:fc:31:
         03:2e:87:1e:c5:a0:cd:88:8c:ee:1e:71:9a:d4:7d:8e:ad:e2:
         a8:b8:84:25:db:ef:df:7c:b7:9e:52:19:b1:ea:11:c6:cd:5a:
         71:fd:49:39:6a:e3:f4:51:d1:67:fd:de:07:54:c9:92:56:43:
         82:5b:0f:b0:77:9a:e5:cb:c4:f6:ea:bd:31:b5:85:94:db:ae:
         75:38:2f:19:78:d0:42:9f:0e:4c:ee:0c:5e:b0:16:0d:3f:33:
         9b:14:e7:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUxOUQxMTAvBgNVBAUTKDY2QjlEODRGNDMzNkE4OUQ4NEQxRTAyRTgyMEE3OTY4
NkUxRTUyQzQwHhcNMjYwNjEyMjIzNjAwWhcNMjYwNjE5MjIzNjAwWjAYMRYwFAYD
VQQDEw02YTJjODlkMS1kYTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApttP0bgPAj9CceEqmGC/Lu873FTbU7NUIfxQuvIpfRsfYDEMOByi2PJxdTZf
nUBZNAha5y4eTC7UrqD5DKQJwTzUFk+c2GbK2/Wec6/F86MI99Weh89am9wnAKlG
3CfAE13CTA3vq6PvFz3TBiAZDTBHOl8dmt0mUvp6WFfVaMWeOBxq+6BkwB74wC2F
hWMvffu25VFWCfGGx/ip0tdIHYGCgx0RfZ5oJWj2lCFct88Z2ax2D3xo9n7c5iWi
oZ3GfTNSqwNcC+fBIOmc8ivDe+HTdjrZlnemU4B9II7n0QAc0eovF6HOocTCh+Vk
KJw6/lk9nEkkcQZLKKz7SYsVBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMNzxUM
rdbKrxyI804zWKOKU0DNMB8GA1UdIwQYMBaAFGa52E9DNqidhNHgLoIKeWhuHlLE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTE5RC9CODI4MDY2NEM3
NUExMUVCODFFOTlFMTlDNEY5QUUwMi9acm5ZVDBNMnFKMkUwZUF1Z2dwNWFHNGVV
c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pybllUME0ycUoyRTBlQXVnZ3A1YUc0ZVVzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTE5RC9CODI4MDY2NEM3NUExMUVCODFFOTlFMTlDNEY5QUUwMi9acm5ZVDBNMnFK
MkUwZUF1Z2dwNWFHNGVVc1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmUJQMQxDkqH/i8Ii4k41Mn7qNaVddpKHJXeFNBu6QZMjfe6jK9V/aTdbme90
Kaa80ViBS2sGENE6KHMM0Fu9c7tmwPI9NFaM/MnFDIYgIepUEgwaY2NQj8kM3nu8
Pw61nHNeEJ2rZaz0khd8TPhiCPsXZ3q20jovy+DnnJQU9Xex1HMaYSbEJajc9c2H
CmknTZjvlYsggSUQu5cpS0fa8fwxAy6HHsWgzYiM7h5xmtR9jq3iqLiEJdvv33y3
nlIZseoRxs1acf1JOWrj9FHRZ/3eB1TJklZDglsPsHea5cvE9uq9MbWFlNuudTgv
GXjQQp8OTO4MXrAWDT8zmxTn4w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:21:26 2026 by rpki-client