Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
File:                     sZKtRE3h8t51vroe79Ei7s99d8w.mft (raw, json)
Hash identifier:          +dvq6us5Yr5JLKkaB617Rt4Mxq68KMVumjv2+GUnQn4=
Subject key identifier:   19:1E:13:30:34:D6:AE:7F:6E:D0:97:74:24:8E:F0:5A:A8:21:A7:17
Authority key identifier: B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC
Certificate issuer:       /CN=A913DEDF/serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
Manifest number:          0206
Signing time:             Fri 17 Apr 2026 02:48:57 +0000
Manifest this update:     Fri 17 Apr 2026 02:48:57 +0000
Manifest next update:     Fri 24 Apr 2026 02:48:57 +0000
Files and hashes:         1: sZKtRE3h8t51vroe79Ei7s99d8w.crl (hash: Nwd0VRwQWAkdVk747JIvsDUvDn7b3YYjdMu01eLMgx4=)
                          2: DC5F1826D1BD11EF8CC80268C4F9AE02.roa (hash: 5ciRZnMNFhIo0Wo7M5ePcfg4YNpNsIJV7sTdX3rIjqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl
                          rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DEDF, serialNumber=B192AD444DE1F2DE75BEBA1EEFD122EECF7D77CC
        Validity
            Not Before: Apr 17 02:48:57 2026 GMT
            Not After : Apr 24 02:48:57 2026 GMT
        Subject: CN=69e19f99-94a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b9:01:b1:7c:34:a7:e2:f8:b9:b1:5c:00:89:
                    d3:7d:32:ff:c9:c7:db:22:c4:72:cf:71:51:30:ed:
                    70:25:f8:48:23:56:82:41:b0:b2:81:18:c6:e0:52:
                    43:f0:9b:08:20:aa:2a:20:8d:27:17:95:a4:9c:14:
                    55:ed:4c:c4:c1:db:c6:70:5a:aa:92:e1:69:4f:4e:
                    de:9a:e7:a6:35:1d:5a:58:e1:e4:b4:4a:48:44:82:
                    a5:41:ea:d5:7c:08:34:3c:b4:c5:fc:28:bf:17:1e:
                    2a:17:4b:40:2b:79:7d:1e:7e:7a:4c:1b:62:ab:f0:
                    ad:2d:60:e2:9a:bd:5c:87:72:29:f4:0f:c9:cf:5f:
                    6f:a2:a0:14:7c:3a:65:16:5d:ab:e9:aa:59:04:ea:
                    6e:18:59:ea:35:87:7b:74:17:95:6f:67:29:f1:28:
                    0c:ec:e4:16:81:1c:93:dc:c9:fd:70:00:d9:01:02:
                    f3:a1:16:fc:36:b6:e8:df:f8:14:00:e1:22:85:2d:
                    14:e3:a7:65:77:9d:82:32:50:3f:15:15:b1:fc:52:
                    e0:8c:63:5c:2a:dd:e2:12:ab:0d:f5:61:81:50:4b:
                    49:85:5d:e4:49:fc:13:16:28:f7:a8:2a:57:3a:90:
                    20:1b:06:9d:c8:0f:d9:48:21:c4:44:e3:2b:d7:de:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1E:13:30:34:D6:AE:7F:6E:D0:97:74:24:8E:F0:5A:A8:21:A7:17
            X509v3 Authority Key Identifier:
                keyid:B1:92:AD:44:4D:E1:F2:DE:75:BE:BA:1E:EF:D1:22:EE:CF:7D:77:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZKtRE3h8t51vroe79Ei7s99d8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DEDF/B2D6099E2B2711EE942ED240C4F9AE02/sZKtRE3h8t51vroe79Ei7s99d8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:40:ad:87:f0:a4:3f:82:53:5d:1f:47:45:35:0b:c7:57:5d:
         8b:35:3c:98:4e:d9:40:69:30:7a:5c:95:e6:c1:b3:39:9e:69:
         ff:b7:3e:80:6c:74:4f:56:e6:11:be:24:16:47:fb:cc:32:6c:
         8c:b9:7a:1e:b7:e6:77:ee:5c:d3:36:0d:58:c6:b2:3b:b5:a3:
         3a:7e:41:80:50:dc:fe:d0:99:69:6b:a0:b6:37:09:23:d9:10:
         5d:60:84:a7:6a:1e:ad:e0:ca:30:6a:8b:c0:fd:dd:40:98:08:
         58:b9:ab:3c:f7:8f:d0:18:c1:c4:63:11:bb:cb:00:4f:49:63:
         10:cf:72:ce:78:d7:ee:f8:25:c2:82:d8:ba:cd:29:d2:72:6d:
         e6:5a:13:0e:1d:85:81:05:33:95:de:85:e7:5c:6a:bb:9c:52:
         3c:b0:c1:a1:7e:3e:62:13:f0:30:d7:8f:16:a7:1f:c9:54:ee:
         5b:4c:bc:7c:58:03:da:7b:7b:80:d8:3a:73:bd:e6:8a:d7:b9:
         9a:f0:e0:bc:2e:58:f9:ac:ac:53:d3:63:03:c5:3b:0f:ec:86:
         09:3d:89:e0:08:b8:96:01:d5:02:ce:e8:7d:9b:a9:4c:89:e4:
         7d:5a:5b:98:a0:b7:6d:3f:f4:5e:4a:35:34:b6:59:31:d7:09:
         0b:00:a7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:54 2026 by rpki-client