Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
File:                     zURUsk4_99x1y76Rm92nnEe5Xqc.mft (raw, json)
Hash identifier:          2VAiPOFnL/fDq9w22SMuzNJISD4GU3Ru4h1mHQ5pBlE=
Subject key identifier:   7D:CE:4B:EE:2A:A0:9D:B4:A6:FD:D2:56:1B:15:F4:06:6D:F6:2F:CA
Authority key identifier: CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7
Certificate issuer:       /CN=A9172999/serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
Manifest number:          14
Signing time:             Sat 13 Jun 2026 00:56:52 +0000
Manifest this update:     Sat 13 Jun 2026 00:56:52 +0000
Manifest next update:     Sat 20 Jun 2026 00:56:52 +0000
Files and hashes:         1: zURUsk4_99x1y76Rm92nnEe5Xqc.crl (hash: 6Q/Jzai6BL2fvVROoCxCff8mWRb1eWJiptq7FQSIUiY=)
                          2: A53F1E96647311F1BC2A35D47947A888.roa (hash: aWkLi47uIb9GIJOKXHkRTH7Cyo2StRxOnkwZBq2MqlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl
                          rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172999, serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
        Validity
            Not Before: Jun 13 00:56:52 2026 GMT
            Not After : Jun 20 00:56:52 2026 GMT
        Subject: CN=6a2caad4-02a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f6:f3:a4:77:f5:25:47:cc:f9:d0:9c:bc:99:
                    92:91:f3:12:81:1e:8b:2f:c0:30:56:b1:0a:e4:18:
                    08:d2:22:87:5b:02:fa:ab:01:1a:c3:ad:ac:95:71:
                    a8:23:4e:9c:c6:22:61:52:69:e0:02:e5:1d:c2:57:
                    e4:bf:6d:a1:09:c6:cf:e7:9c:51:f0:92:2a:a3:91:
                    34:b9:ac:7d:19:43:e2:26:b5:e8:47:88:64:d9:7a:
                    f6:c6:7d:9a:2b:a7:dc:5f:5c:cf:89:fe:26:8c:c1:
                    ea:b5:03:fb:c8:bc:10:6a:7c:02:97:fb:d4:5e:13:
                    75:cd:02:07:de:9e:5d:e7:8e:23:c3:3c:0c:68:a9:
                    27:87:5c:c6:fc:92:4e:8c:f4:e5:eb:cf:a6:7b:84:
                    18:27:4d:65:56:c3:69:f1:b4:ed:25:44:c3:3a:ae:
                    28:9a:43:05:38:25:81:d6:40:a5:0b:d5:36:e1:55:
                    38:72:e1:14:7c:aa:05:0a:f7:05:f2:4b:10:96:db:
                    5f:5c:f0:96:c0:c0:eb:2a:d4:42:56:c9:92:04:ed:
                    f4:b7:51:9b:e1:a1:54:44:1c:7e:0b:25:03:a2:ff:
                    cf:91:4d:e7:2c:d9:f3:e5:99:fc:51:58:67:6d:50:
                    b2:c9:58:1b:33:ca:9c:61:fd:71:f7:c3:05:e7:9c:
                    b3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CE:4B:EE:2A:A0:9D:B4:A6:FD:D2:56:1B:15:F4:06:6D:F6:2F:CA
            X509v3 Authority Key Identifier:
                keyid:CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e9:0c:c6:28:f6:b5:dc:45:de:81:35:e9:3c:fc:c2:fe:ba:
         df:b1:f3:1a:d9:10:74:4a:76:dc:6b:fa:63:37:86:0d:0c:5c:
         c7:a6:c7:e0:01:1f:92:7d:78:a0:6c:e9:db:fd:6d:ab:1c:62:
         2f:93:22:6e:7c:ac:bd:6f:1d:1d:71:6b:c7:2f:7a:51:b2:c5:
         06:d2:e2:f7:00:b1:57:f6:33:9d:e1:50:1d:60:75:a8:e2:22:
         0e:e6:c7:21:a3:51:6f:db:97:53:00:9d:38:9b:92:43:4c:15:
         9b:0c:ed:cc:42:21:c7:28:51:8a:d4:50:49:fb:83:dc:60:47:
         ea:48:36:c5:c0:7a:fc:b0:48:50:88:bd:35:2f:6d:71:f4:0f:
         fd:82:40:91:d2:54:21:15:7d:a9:5c:81:65:1b:28:cf:61:98:
         c1:c8:d3:57:f3:b4:fb:cd:9a:9f:99:55:fb:fb:85:22:09:5f:
         7e:99:66:cc:af:5d:0c:13:29:4f:83:c4:eb:93:36:9a:55:ff:
         f7:83:af:9d:e4:66:75:1d:7b:27:9d:a7:e8:65:ce:41:29:e8:
         01:09:4a:be:12:61:ab:d6:2d:31:a3:49:0b:00:18:43:b0:2c:
         50:d5:22:39:d0:53:84:59:9f:cc:3b:fa:82:c6:c2:ba:3b:5f:
         2d:73:60:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:56:25 2026 by rpki-client