Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
File:                     Z-1VajxcS_wnyhWKWXdWTDIHzso.mft (raw, json)
Hash identifier:          6/Zomo3qmjXk2LwtO2lZR5l6Me86Cp04VZYtrA6T0JI=
Subject key identifier:   65:87:21:44:29:E2:3E:D7:E6:55:02:8D:9A:2E:5B:ED:6D:76:93:46
Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA
Certificate issuer:       /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
Certificate serial:       310A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
Manifest number:          30F9
Signing time:             Fri 12 Jun 2026 15:25:33 +0000
Manifest this update:     Fri 12 Jun 2026 15:25:32 +0000
Manifest next update:     Fri 19 Jun 2026 15:25:32 +0000
Files and hashes:         1: Z-1VajxcS_wnyhWKWXdWTDIHzso.crl (hash: i3V2+bnQ1oDf8suVSNv7Mpzp9cAVNkQTTKp5/yOc/Hc=)
                          2: 22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (hash: GIOvMbMD5vyLLmNcLyolZjNKiuNk0ohZ2lFl3desGOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl
                          rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12554 (0x310a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
        Validity
            Not Before: Jun 12 15:25:32 2026 GMT
            Not After : Jun 19 15:25:32 2026 GMT
        Subject: CN=6a2c24ec-ed66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:0f:d7:a6:2d:c2:6d:61:cf:51:70:f2:53:
                    7f:60:ee:1a:e3:a3:8e:d0:b0:e0:f1:39:6e:de:62:
                    7e:5e:d5:8e:b1:c3:87:94:43:0b:f7:9b:fb:5b:5e:
                    bc:c3:13:f6:5a:6c:c2:59:f4:25:5c:94:5e:fa:9f:
                    4f:72:83:e1:04:97:47:0c:86:ab:5b:77:71:f4:0a:
                    42:33:c0:4b:ce:8c:0e:df:26:5a:c5:e0:1c:70:43:
                    b3:ce:53:78:a7:eb:f6:1c:17:40:03:9c:14:c6:f4:
                    73:a1:ab:17:49:46:d3:29:29:55:34:c4:3d:15:ce:
                    12:91:bb:2e:1b:fc:2e:c3:3c:c9:3a:7a:c3:7f:da:
                    e4:1a:ac:c5:e0:a0:0b:7d:62:53:fb:e8:bc:cb:d7:
                    f8:f1:a6:a7:64:1e:48:08:2e:e8:29:18:aa:b1:30:
                    84:a7:49:89:4a:d8:52:2c:5a:67:09:3d:31:4c:46:
                    c5:b9:61:10:1f:0a:5e:5c:61:a6:c2:43:f6:fd:f0:
                    13:59:46:f0:68:d2:08:5b:21:50:1d:61:e3:01:60:
                    c6:ba:f7:93:29:e6:e2:5b:de:8e:28:24:44:16:17:
                    f4:1f:21:e9:cc:7d:b8:59:90:3c:1b:91:05:84:34:
                    ae:83:0e:c9:b3:a6:f4:b3:ec:65:5b:bc:e6:d3:ba:
                    92:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:87:21:44:29:E2:3E:D7:E6:55:02:8D:9A:2E:5B:ED:6D:76:93:46
            X509v3 Authority Key Identifier:
                keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ab:a6:57:c1:b9:dc:67:7d:5a:17:1e:66:a1:4b:db:1f:48:
         a0:14:0a:1c:3f:ab:a0:89:04:d8:ad:a0:95:07:13:5c:76:0d:
         3b:16:73:7b:e5:96:51:27:f4:9e:2e:18:e2:3c:b5:20:6b:5f:
         41:6e:05:81:d4:2b:fd:c2:f2:80:c3:41:8e:69:55:84:25:37:
         0a:8c:7e:2d:9d:87:68:12:10:f3:f5:ee:4d:64:22:0d:55:79:
         e4:6a:4c:20:b7:8e:d1:7e:27:ea:f5:b8:c9:91:ae:e8:97:ba:
         64:38:d1:8b:51:d8:40:75:01:57:66:87:85:a2:42:35:70:85:
         26:75:d0:5f:31:5c:a9:8c:94:2c:5a:54:ce:1e:9c:7b:a3:1d:
         ed:6d:ce:ad:bd:ff:67:03:9d:22:0e:94:e0:f7:d9:68:44:38:
         96:ef:6b:44:5a:a5:8b:2a:b3:9d:df:c0:f2:f7:87:6a:99:a4:
         59:de:74:68:35:f5:0b:63:bc:c1:f6:6d:d0:dd:60:0f:f2:51:
         6f:d4:2d:65:ef:5a:cd:03:33:fa:14:63:37:7a:d2:b2:a5:19:
         ee:21:77:f6:09:f5:56:b0:5f:ff:1c:99:09:a7:7c:27:ad:a7:
         d5:66:10:a1:da:3a:ac:a1:fc:ef:73:38:ec:f6:d9:52:99:9b:
         ff:c7:a5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:01 2026 by rpki-client