Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
File:                     Zi7Jore2zkLSOlI4U0xldiIyU3I.mft (raw, json)
Hash identifier:          /rCMbi1h7GLjvG8flQukQbDOCoGiDiScHqTkA6jPEqE=
Subject key identifier:   95:AD:EE:3B:A4:79:6A:BB:62:34:03:F2:5A:BD:8F:F6:A1:4F:FC:4A
Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72
Certificate issuer:       /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
Manifest number:          5A
Signing time:             Sat 13 Jun 2026 08:16:44 +0000
Manifest this update:     Sat 13 Jun 2026 08:16:44 +0000
Manifest next update:     Sat 20 Jun 2026 08:16:44 +0000
Files and hashes:         1: Zi7Jore2zkLSOlI4U0xldiIyU3I.crl (hash: Q2rsiu8PLIM74Jb0NSLGKSLzFsjXM5aWWimECenLBCc=)
                          2: 41527E061CFB11F1BAE9C5A3413D8C67.roa (hash: AA4gBjxlDFvAHeJBtHXm9algpg/YYgqK825E6bjNQcI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl
                          rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372
        Validity
            Not Before: Jun 13 08:16:44 2026 GMT
            Not After : Jun 20 08:16:44 2026 GMT
        Subject: CN=6a2d11ec-b2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a8:cc:a8:36:4e:dd:34:d6:65:6a:c7:fa:43:
                    33:c7:f5:d0:9d:8b:14:fc:f1:70:2f:c4:e9:62:6f:
                    b6:0e:1b:a3:74:62:da:e8:c9:c7:11:7d:76:8f:c8:
                    cf:33:4a:4b:f3:76:12:c1:89:92:dc:6b:19:57:0f:
                    2a:b0:15:62:99:6b:d5:bb:d8:68:b9:da:24:d4:7e:
                    ef:61:2c:47:f9:e7:d8:05:05:08:24:0f:b3:fc:72:
                    93:38:62:fb:a3:f5:ce:56:20:b9:fd:2b:79:70:60:
                    4f:f3:96:ef:26:be:b2:ef:de:a7:c7:b0:11:af:b8:
                    4a:77:19:9e:b6:f1:c1:82:6e:6e:d9:31:c2:72:37:
                    0d:40:8a:30:b3:81:15:0e:4a:c4:b2:27:5c:b6:5c:
                    0f:49:b3:9b:4f:42:f0:37:b5:2e:47:64:81:34:f5:
                    12:f8:8c:c3:c0:57:39:cf:cb:ea:84:e3:2f:8f:0f:
                    1a:9c:4e:1c:c8:c5:e5:49:bc:56:7d:48:62:4a:8e:
                    36:81:b3:77:a9:d3:c4:53:c9:97:da:86:cf:77:53:
                    a7:03:cb:eb:e4:33:b2:55:4f:7c:d8:f0:c3:8b:69:
                    0a:46:c3:cc:bd:0b:8e:b1:4f:4f:04:5a:88:65:ca:
                    db:36:32:3c:54:c0:1d:b9:65:81:cb:b1:c3:cc:30:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AD:EE:3B:A4:79:6A:BB:62:34:03:F2:5A:BD:8F:F6:A1:4F:FC:4A
            X509v3 Authority Key Identifier:
                keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a7:5e:f3:00:04:49:fc:f1:71:53:10:83:50:55:2c:98:f2:
         92:a7:81:91:2f:dc:20:ea:a3:55:f0:4a:f2:1d:5c:73:7a:a5:
         19:b8:01:53:30:6e:b3:db:98:a3:a3:52:10:57:4d:dd:8b:99:
         52:a5:47:0d:84:ed:5d:cb:cb:02:74:73:f3:0f:fd:d6:d0:2a:
         a4:cd:b6:d9:b9:97:bb:b8:d5:33:a5:28:65:d6:0a:fa:b1:6d:
         4b:63:11:4d:52:04:7b:5c:0a:03:95:b6:17:eb:ab:88:77:81:
         a1:90:c2:7e:46:d4:be:96:b6:8c:5d:a2:41:e2:3c:a0:9f:74:
         8d:4f:dc:a8:85:83:8e:54:d6:b8:85:30:1a:d0:b2:0a:64:b4:
         d0:02:a8:fa:7e:7e:5e:c1:ec:56:82:cd:f9:f6:b6:86:7b:17:
         99:d7:6e:8b:10:24:4e:c8:54:d0:ea:fd:2b:a2:fc:0f:54:f4:
         e5:40:ed:2d:0a:93:12:c3:fd:c3:ed:8e:88:f1:90:ed:8b:1a:
         6b:f0:1f:3a:58:e1:9e:da:58:ba:fb:b3:2f:c0:5c:2f:4d:9c:
         50:87:b9:68:b1:93:50:b9:88:87:97:30:11:3c:54:8b:88:35:
         ef:cd:7e:36:e4:e0:ff:b9:6b:35:73:90:3b:9c:06:2c:7d:f3:
         48:62:aa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:29:53 2026 by rpki-client