Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
File:                     ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json)
Hash identifier:          YVcdgDWCafIV25eCRVsctdTS16h3KiQJY9K0jZ+IwR0=
Subject key identifier:   33:09:96:0C:C4:1E:76:CB:64:54:74:91:02:86:1C:12:DA:75:42:2B
Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71
Certificate issuer:       /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
Certificate serial:       01DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
Manifest number:          01D5
Signing time:             Sat 13 Jun 2026 03:39:59 +0000
Manifest this update:     Sat 13 Jun 2026 03:39:59 +0000
Manifest next update:     Sat 20 Jun 2026 03:39:59 +0000
Files and hashes:         1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: 6gTXPtopsewrKnu2+PfdLtfNyz2RjDJ12ASalCyzFmE=)
                          2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: J9Q0fospq9ZatXjfck0bQd1+CpXH2kLag8vk4D7Q214=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl
                          rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
        Validity
            Not Before: Jun 13 03:39:59 2026 GMT
            Not After : Jun 20 03:39:59 2026 GMT
        Subject: CN=6a2cd10f-0ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:53:f7:a5:69:eb:94:f8:82:04:b8:c3:36:6e:
                    b6:fb:30:1c:39:e0:c0:d1:20:19:0d:34:cd:dd:2c:
                    b3:8f:ae:4e:47:97:f3:e9:89:e1:9c:cd:f9:71:28:
                    d5:17:fe:2c:15:21:87:b7:5c:92:bd:8a:c4:74:10:
                    4f:cd:2b:2d:12:5c:84:d4:ff:e4:c6:2f:96:19:07:
                    f2:e2:7c:db:1e:9f:88:04:eb:43:5c:5e:1e:a9:c2:
                    61:39:b8:35:85:5d:6e:26:d0:e7:ba:18:01:32:38:
                    90:68:77:58:7c:7f:d1:26:4c:85:69:c9:62:4a:ee:
                    66:e9:fb:1b:1d:58:38:84:04:9e:98:b6:63:1c:25:
                    60:b3:bd:2b:d9:03:3c:86:7b:69:98:58:e9:da:ab:
                    32:0d:95:d1:c1:20:86:af:c4:15:64:35:a8:d5:7a:
                    80:36:11:7e:28:02:61:93:7c:7e:78:db:29:36:10:
                    d7:fa:32:a6:60:2e:e1:8b:e0:7f:d7:9b:57:ca:e2:
                    e6:f6:60:6e:a4:4d:a8:15:03:79:9a:f9:03:74:cb:
                    40:d4:3c:5c:d0:20:ee:18:af:89:e2:98:dd:52:6e:
                    8d:06:90:21:5b:01:a8:40:cb:6e:3f:2c:8b:b5:1d:
                    d0:02:7a:09:b0:82:1a:1a:25:5f:03:5e:b0:23:a4:
                    63:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:09:96:0C:C4:1E:76:CB:64:54:74:91:02:86:1C:12:DA:75:42:2B
            X509v3 Authority Key Identifier:
                keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:58:78:c1:7b:ff:7e:03:88:d3:14:b8:88:ac:75:43:2b:6b:
         a1:30:c6:2f:92:ec:28:87:48:50:6c:48:07:bf:c2:6f:51:4b:
         64:96:9b:ea:7a:96:d2:24:24:e3:43:30:02:f1:ac:4f:53:e5:
         26:83:6c:29:25:cf:b8:a0:0f:c1:99:13:d9:1d:a4:fd:1e:87:
         b0:38:b0:82:7e:6e:34:39:54:c0:54:61:2f:f3:66:b7:bc:22:
         82:83:33:6e:c3:60:d8:9f:ee:8b:1f:75:01:f9:ff:9c:7a:70:
         ad:ee:63:3b:4e:72:92:81:45:d0:fc:d7:ff:ad:01:c8:4c:d4:
         1e:b2:33:e9:cc:3b:ce:ae:84:03:e4:94:29:d3:e6:3b:84:5b:
         ce:bc:b7:b1:09:1b:f8:6b:fb:5c:7d:b2:8d:9a:ef:f6:52:2d:
         66:21:e9:5e:53:cd:b8:6f:20:67:01:22:0f:5d:8c:11:ec:7c:
         bf:fd:3a:02:a3:9c:82:64:81:90:23:8e:04:aa:51:f5:44:f2:
         bd:76:f3:07:95:aa:75:d3:72:45:11:82:e4:52:80:5d:bb:90:
         cf:c1:9c:bd:44:b6:a6:2f:43:87:9b:9a:0a:c4:8d:80:00:4f:
         94:80:79:43:a6:ee:fd:32:9c:d0:0a:ae:9d:8e:6c:95:e0:a6:
         21:26:f4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:39:12 2026 by rpki-client