Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
File:                     ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft (raw, json)
Hash identifier:          miSNGzM0atp0XhACGtZC1Y4EBTz3riJ85f1Xcw4u8y8=
Subject key identifier:   40:95:7A:23:D4:A7:21:8F:95:36:85:2C:9A:F1:03:0E:0F:65:03:E9
Authority key identifier: 66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD
Certificate issuer:       /CN=A914DA9E/serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
Manifest number:          D8
Signing time:             Sat 13 Jun 2026 06:45:53 +0000
Manifest this update:     Sat 13 Jun 2026 06:45:53 +0000
Manifest next update:     Sat 20 Jun 2026 06:45:53 +0000
Files and hashes:         1: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl (hash: DRI9utYQSYNKjbHzH52AzrgPc8LQxKaEdTKk1edWEjw=)
                          2: 7E10232C1F3411F0BFBD616EC4F9AE02.roa (hash: nKzM70QPhUVpp0u2YyPA0zkA9ybuWJok66S7cxRVoIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl
                          rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA9E, serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD
        Validity
            Not Before: Jun 13 06:45:53 2026 GMT
            Not After : Jun 20 06:45:53 2026 GMT
        Subject: CN=6a2cfca1-37ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:25:88:d6:28:a2:5f:77:c0:11:01:2f:4c:
                    3f:8e:62:e6:e0:d0:bd:d9:53:5f:cb:f3:e2:48:23:
                    7c:2a:ab:66:ef:81:6e:23:57:81:a9:85:d9:5d:fc:
                    49:b1:b7:83:17:db:12:fc:bf:bb:34:08:0a:3c:82:
                    12:fe:dd:98:7f:32:c4:f0:86:2b:cb:96:b6:e8:08:
                    48:b7:29:90:05:20:83:2c:8f:fe:35:f9:16:fe:b4:
                    f6:3f:5b:5d:70:c8:32:65:f9:8e:20:98:1d:82:5d:
                    b6:71:12:be:e6:6b:45:5b:ed:bf:23:fe:b0:b7:6c:
                    12:78:30:39:55:6a:1e:b1:b5:bf:84:dc:30:2b:ad:
                    bd:b8:f4:e5:b1:85:cb:d2:73:46:54:a4:74:92:a4:
                    ab:d2:59:69:00:40:0a:29:cf:21:8b:6a:cd:6c:b4:
                    8b:85:d3:d5:2a:66:17:64:50:b9:8e:8f:05:1e:3c:
                    61:3c:c6:f9:cd:be:d1:27:75:e8:1f:6d:9c:75:e8:
                    43:35:da:31:ac:94:87:4f:5e:c7:16:59:66:19:f4:
                    9f:cd:a9:f6:a9:02:d5:97:39:f9:f5:1e:a6:14:6a:
                    12:40:8e:69:13:48:aa:13:3e:21:1d:80:06:a7:4d:
                    c4:1d:a6:57:8c:88:c3:9d:1a:ce:e8:9d:fe:95:19:
                    4e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:95:7A:23:D4:A7:21:8F:95:36:85:2C:9A:F1:03:0E:0F:65:03:E9
            X509v3 Authority Key Identifier:
                keyid:66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6f:b1:a9:1b:0b:16:88:22:1d:e3:4f:9f:fa:4a:3e:32:f6:
         40:ae:a7:3f:82:50:33:41:f5:aa:eb:c5:48:5a:2d:60:04:d3:
         74:bf:dd:b1:8d:00:2d:77:58:8d:5d:68:1c:bb:0e:5f:a9:14:
         b0:f0:91:05:42:74:45:39:42:78:12:9e:83:b3:fd:fb:42:0f:
         44:ef:69:12:7c:3a:5a:38:d6:a6:e3:b9:ce:98:25:1f:e4:d2:
         1c:8a:68:60:02:ba:2b:76:ed:65:a3:2a:a9:99:0d:c8:ec:cc:
         b9:ad:1e:0c:e3:21:a4:8b:8b:dc:7d:ce:a5:29:70:da:60:f7:
         4f:07:e9:4a:fe:35:c4:5a:3c:07:0c:89:62:46:ef:ac:18:a7:
         26:03:2d:1b:8c:8e:d2:ed:c1:3b:b7:39:a6:55:f6:5f:bf:70:
         a9:87:1b:67:94:ef:46:eb:c6:65:e4:2e:80:ba:84:a7:d5:88:
         30:d2:a6:49:99:c6:ae:b5:ea:d4:d1:f4:13:66:f7:fb:0f:94:
         db:45:21:08:8f:15:a7:54:38:71:62:12:8a:50:70:e0:fa:0f:
         98:41:ce:d6:ee:c7:1a:e3:7e:2b:fc:69:aa:62:68:a8:07:83:
         a9:99:ce:cf:d5:15:e8:b9:78:e2:64:50:94:fd:ea:cf:0a:88:
         75:19:fe:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERBOUUxMTAvBgNVBAUTKDY2QzMwNkQyM0Y4QkZFQUFBNDRDQ0NDNTU3Mzk2OTUx
Rjk4NkM2QkQwHhcNMjYwNjEzMDY0NTUzWhcNMjYwNjIwMDY0NTUzWjAYMRYwFAYD
VQQDEw02YTJjZmNhMS0zN2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlM8liNYool93wBEBL0w/jmLm4NC92VNfy/PiSCN8Kqtm74FuI1eBqYXZXfxJ
sbeDF9sS/L+7NAgKPIIS/t2YfzLE8IYry5a26AhItymQBSCDLI/+NfkW/rT2P1td
cMgyZfmOIJgdgl22cRK+5mtFW+2/I/6wt2wSeDA5VWoesbW/hNwwK629uPTlsYXL
0nNGVKR0kqSr0llpAEAKKc8hi2rNbLSLhdPVKmYXZFC5jo8FHjxhPMb5zb7RJ3Xo
H22cdehDNdoxrJSHT17HFllmGfSfzan2qQLVlzn59R6mFGoSQI5pE0iqEz4hHYAG
p03EHaZXjIjDnRrO6J3+lRlOIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECVeiPU
pyGPlTaFLJrxAw4PZQPpMB8GA1UdIwQYMBaAFGbDBtI/i/6qpEzMxVc5aVH5hsa9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REE5RS9EMUJFODA5QzFG
MzIxMUYwQkQyMkJBNjhDNEY5QUUwMi9ac01HMGotTF9xcWtUTXpGVnpscFVmbUd4
cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pzTUcwai1MX3Fxa1RNekZWemxwVWZtR3hyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
REE5RS9EMUJFODA5QzFGMzIxMUYwQkQyMkJBNjhDNEY5QUUwMi9ac01HMGotTF9x
cWtUTXpGVnpscFVmbUd4cjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkG+xqRsLFogiHeNPn/pKPjL2QK6nP4JQM0H1quvFSFotYATTdL/dsY0ALXdY
jV1oHLsOX6kUsPCRBUJ0RTlCeBKeg7P9+0IPRO9pEnw6WjjWpuO5zpglH+TSHIpo
YAK6K3btZaMqqZkNyOzMua0eDOMhpIuL3H3OpSlw2mD3TwfpSv41xFo8BwyJYkbv
rBinJgMtG4yO0u3BO7c5plX2X79wqYcbZ5TvRuvGZeQugLqEp9WIMNKmSZnGrrXq
1NH0E2b3+w+U20UhCI8Vp1Q4cWISilBw4PoPmEHO1u7HGuN+K/xpqmJoqAeDqZnO
z9UV6Ll44mRQlP3qzwqIdRn+9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:32:52 2026 by rpki-client