Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft
File:                     ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft (raw, json)
Hash identifier:          TFLd5lrix0fOhgrKDs/E2Oe+2ElC1g4JObQiAkG0l9A=
Subject key identifier:   7D:9F:00:AF:05:7E:52:6D:93:F2:C6:9A:82:A0:8B:BA:89:06:C5:E5
Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF
Certificate issuer:       /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft
Manifest number:          015B
Signing time:             Sat 13 Jun 2026 04:58:37 +0000
Manifest this update:     Sat 13 Jun 2026 04:58:37 +0000
Manifest next update:     Sat 20 Jun 2026 04:58:37 +0000
Files and hashes:         1: ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl (hash: T6EhawYQGXt857L2nXLwIH8cDeV/GVg4bwJ9fdG2yrU=)
                          2: 59B897AE59EE11EFB2872947C4F9AE02.roa (hash: KClykHKChBZ5Bx9B5+rZuGfT1EY+y0O+dL2jNFzbRSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl
                          rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AFF4, serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF
        Validity
            Not Before: Jun 13 04:58:37 2026 GMT
            Not After : Jun 20 04:58:37 2026 GMT
        Subject: CN=6a2ce37d-0b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a6:d9:50:ed:42:da:69:f6:c8:8d:e1:ac:43:
                    ec:e9:7f:3f:4d:90:5e:04:14:97:54:7b:90:99:9b:
                    c5:1c:0c:77:00:53:26:82:bf:4d:5c:d8:80:52:87:
                    b2:63:9a:78:52:8a:c1:b6:3f:51:55:1f:fb:db:f4:
                    ab:0b:fd:38:c5:ce:9e:e8:72:ce:5e:d7:c5:02:ab:
                    6d:a9:a8:29:2f:d2:39:e7:3f:16:a0:b5:8a:fd:ae:
                    5b:3d:d5:fd:01:67:b2:b9:b7:c1:23:1e:3f:c9:a9:
                    77:ef:e1:87:59:1d:35:32:db:6f:2c:d9:61:91:c0:
                    1c:d6:25:0e:ca:a6:bb:bf:68:b3:dc:9a:ac:4e:be:
                    5a:9e:48:e5:08:12:cb:4e:4b:69:65:3b:5b:e6:89:
                    bb:1d:c5:b7:66:05:e1:38:51:3a:e6:c6:e6:0d:ed:
                    e3:bd:50:07:e6:ff:a5:65:6b:51:47:e9:e1:92:cf:
                    30:63:7b:fa:a6:70:1d:8f:e6:51:f0:77:9c:1b:c4:
                    9d:83:d7:64:d6:9d:9c:67:e0:eb:4c:dd:1c:08:5c:
                    47:ba:a6:b0:31:bf:16:55:de:07:b8:fb:7c:5a:35:
                    2d:2a:d3:36:85:da:06:ab:d0:6e:c5:b6:96:27:7b:
                    e7:9c:5c:ae:b5:bf:38:4a:b7:55:f3:46:f4:b6:1b:
                    ee:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9F:00:AF:05:7E:52:6D:93:F2:C6:9A:82:A0:8B:BA:89:06:C5:E5
            X509v3 Authority Key Identifier:
                keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5c:f9:6a:3c:30:ea:20:1b:89:8a:57:16:65:32:b3:b4:f3:
         b7:c0:80:89:75:af:b5:2a:8f:89:a6:ae:4b:0c:79:ae:f0:fb:
         22:5f:f7:73:7d:b9:cf:8b:f4:0a:4e:02:4a:0e:a2:f0:be:9e:
         fa:53:ef:87:c3:69:bf:68:62:2e:0c:4e:09:15:e5:c8:f1:15:
         86:c3:4a:24:96:b6:43:30:85:76:14:4b:7e:ce:05:96:f9:c2:
         e6:4d:56:87:e7:4e:06:45:0e:bb:e0:aa:83:cc:1b:89:be:7f:
         12:f0:99:dd:e6:a1:6e:a2:18:28:a4:8e:10:d0:f5:41:e3:a8:
         a3:91:cc:2e:49:41:59:6e:9e:21:52:e0:d2:0e:0c:f8:3f:50:
         11:72:30:58:43:58:20:ab:f8:07:f5:70:63:6e:b3:d0:f6:bb:
         81:ee:0b:d6:85:ce:7d:9c:42:f0:a6:79:4b:8b:8f:ca:1c:93:
         5d:49:a7:e8:6b:26:dd:78:38:ab:a0:93:63:0f:04:50:af:b3:
         f3:02:1f:f9:5d:5c:22:e7:05:74:f6:de:3c:92:2e:fc:eb:02:
         36:07:1c:a3:cf:67:d7:d4:03:1d:b9:a3:df:1d:dd:ce:df:d4:
         20:cf:50:d2:5e:f1:31:c5:5a:1a:17:eb:9d:02:cb:f1:f2:ec:
         57:d0:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:20:59 2026 by rpki-client