Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
File:                     z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json)
Hash identifier:          Oz9hSSr807Zo7gRWbSdXsMDNhPxwx3FUJdSjTkDidlM=
Subject key identifier:   6F:25:A5:2F:BB:13:77:B9:5B:2F:AC:47:F7:3F:CA:A3:17:C4:C9:EA
Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98
Certificate issuer:       /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
Manifest number:          01B9
Signing time:             Sat 13 Jun 2026 03:56:44 +0000
Manifest this update:     Sat 13 Jun 2026 03:56:44 +0000
Manifest next update:     Sat 20 Jun 2026 03:56:44 +0000
Files and hashes:         1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: TTFRlEs+TOPYDsyXQDFzYE9uIPlLQMFlY42pnYboq54=)
                          2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: GLrzVbO/eZPffRoT3cGz+iLpJergigCKe+VSGEBiwVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl
                          rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
        Validity
            Not Before: Jun 13 03:56:44 2026 GMT
            Not After : Jun 20 03:56:44 2026 GMT
        Subject: CN=6a2cd4fc-4c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:e9:fc:72:8c:c6:7c:c1:1e:d5:4e:4f:9e:
                    e7:22:6d:ca:d5:4a:4c:5e:ce:2a:f7:ab:b7:4f:bb:
                    fe:c8:62:2f:54:26:95:c0:69:a9:dd:b0:a1:04:0f:
                    c4:5d:6e:00:9a:71:6e:64:54:05:08:9c:cc:fa:68:
                    d5:68:bb:65:30:11:1f:f7:77:82:87:74:eb:29:60:
                    2f:7d:ad:e5:98:ff:bf:54:4f:29:8e:54:7e:0b:e7:
                    94:ce:20:98:02:e2:74:37:6d:e6:0c:d9:ce:2f:b9:
                    11:7a:95:57:12:23:57:56:0c:13:57:0d:e2:07:6e:
                    30:d2:f1:ab:23:bd:2a:56:48:72:f9:f1:27:79:34:
                    f8:dc:8f:58:1f:3f:97:d3:56:6f:54:42:ef:71:4d:
                    03:b2:ac:27:b1:9b:8f:65:55:61:d0:e7:fa:9a:dd:
                    ec:ff:c3:55:90:90:48:ad:94:a6:15:c7:ec:2b:e0:
                    80:24:27:9b:54:ef:35:42:af:29:1b:ed:60:99:6c:
                    b1:70:84:9d:de:a0:c0:26:b4:33:90:8b:82:1f:6a:
                    75:84:f3:bf:74:ac:aa:54:83:d2:c0:8d:99:a3:35:
                    24:82:78:0e:cd:83:91:ee:66:43:24:23:41:1a:2f:
                    3a:67:d0:5c:58:10:34:c9:03:a3:6c:bd:41:5c:94:
                    ce:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:25:A5:2F:BB:13:77:B9:5B:2F:AC:47:F7:3F:CA:A3:17:C4:C9:EA
            X509v3 Authority Key Identifier:
                keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d7:c7:28:e0:bb:f8:5b:d3:ca:2e:25:76:dc:dd:b8:6a:b0:
         5e:c4:96:b7:8c:42:42:26:e5:ab:45:03:ea:8d:e4:9b:0f:46:
         78:34:28:34:64:68:92:04:7a:f1:e3:03:c1:92:b2:f7:d8:78:
         47:2b:41:90:77:a2:0d:d6:62:4a:e8:26:a2:76:be:fe:9c:52:
         6c:f6:b1:48:14:01:07:f9:c9:d3:02:f9:f5:23:55:27:bc:33:
         f5:6f:ac:3d:f4:22:18:64:07:fe:96:17:29:e9:c1:7d:8f:35:
         c1:50:27:19:85:9c:c5:0f:e0:73:2c:82:2d:ad:79:12:d5:7b:
         b3:34:59:25:96:21:d0:55:04:71:2f:75:c5:b0:50:48:ba:15:
         2e:4b:fa:bf:a4:07:00:8b:9b:da:d5:ec:15:5a:d9:b7:f4:49:
         89:6d:c0:0f:36:67:2a:5b:f1:9b:51:2a:41:d2:b0:2c:db:2a:
         c2:38:fb:c7:02:97:78:a1:9a:45:2c:eb:d3:97:a5:13:05:b5:
         d4:c6:89:8f:82:e7:5a:68:39:53:64:b3:8e:57:89:8e:98:d4:
         fb:9b:2e:6e:3a:85:b5:a1:47:7e:45:2d:44:80:d5:8d:bb:56:
         d5:7f:a8:84:3b:5e:b5:96:cd:f3:d7:da:5b:6b:49:71:8b:37:
         36:ae:62:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IwMTgxMTAvBgNVBAUTKENGNkI1NTBBMkYwQzY0MkJEQ0Q0RDhCRUE1MDM4NDlC
MkQ0NTBGOTgwHhcNMjYwNjEzMDM1NjQ0WhcNMjYwNjIwMDM1NjQ0WjAYMRYwFAYD
VQQDEw02YTJjZDRmYy00YzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArsbp/HKMxnzBHtVOT57nIm3K1UpMXs4q96u3T7v+yGIvVCaVwGmp3bChBA/E
XW4AmnFuZFQFCJzM+mjVaLtlMBEf93eCh3TrKWAvfa3lmP+/VE8pjlR+C+eUziCY
AuJ0N23mDNnOL7kRepVXEiNXVgwTVw3iB24w0vGrI70qVkhy+fEneTT43I9YHz+X
01ZvVELvcU0DsqwnsZuPZVVh0Of6mt3s/8NVkJBIrZSmFcfsK+CAJCebVO81Qq8p
G+1gmWyxcISd3qDAJrQzkIuCH2p1hPO/dKyqVIPSwI2ZozUkgngOzYOR7mZDJCNB
Gi86Z9BcWBA0yQOjbL1BXJTOKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG8lpS+7
E3e5Wy+sR/c/yqMXxMnqMB8GA1UdIwQYMBaAFM9rVQovDGQr3NTYvqUDhJstRQ+Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zOUI0N0Y0QUM1
RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpDdmMxTmktcFFPRW15MUZE
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3oydFZDaThNWkN2YzFOaS1wUU9FbXkxRkQ1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjAxOC8zOUI0N0Y0QUM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpD
dmMxTmktcFFPRW15MUZENWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPdfHKOC7+FvTyi4ldtzduGqwXsSWt4xCQiblq0UD6o3kmw9GeDQoNGRokgR6
8eMDwZKy99h4RytBkHeiDdZiSugmona+/pxSbPaxSBQBB/nJ0wL59SNVJ7wz9W+s
PfQiGGQH/pYXKenBfY81wVAnGYWcxQ/gcyyCLa15EtV7szRZJZYh0FUEcS91xbBQ
SLoVLkv6v6QHAIub2tXsFVrZt/RJiW3ADzZnKlvxm1EqQdKwLNsqwjj7xwKXeKGa
RSzr05elEwW11MaJj4LnWmg5U2SzjleJjpjU+5subjqFtaFHfkUtRIDVjbtW1X+o
hDtetZbN89faW2tJcYs3Nq5izQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:43:25 2026 by rpki-client