Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
File:                     pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft (raw, json)
Hash identifier:          VNSTBtPEPyvuFtEYC5aK5+UnBPHWzkpDBPbfPWJSn3k=
Subject key identifier:   03:20:CA:7A:D1:B4:A4:16:1A:2C:C6:F4:1E:54:B0:E7:1F:A0:07:A3
Authority key identifier: A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
Certificate issuer:       /CN=A91A3AD9/serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
Manifest number:          51
Signing time:             Thu 11 Jun 2026 10:40:54 +0000
Manifest this update:     Thu 11 Jun 2026 10:40:53 +0000
Manifest next update:     Thu 18 Jun 2026 10:40:53 +0000
Files and hashes:         1: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl (hash: HNYZz5Gjg7zFl5BuSM1MkhjAVnRla1qehcmO++0Ko7A=)
                          2: 8B10B888061111F18D858310203D8C67.roa (hash: qh+VyOJbj+ug4XtQyEZqsUr8GU3LhsaDi56G0+/mtA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 10:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
        Validity
            Not Before: Jun 11 10:40:53 2026 GMT
            Not After : Jun 18 10:40:53 2026 GMT
        Subject: CN=6a2a90b5-9a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bb:24:40:da:3e:bb:84:e2:bf:43:45:35:84:
                    9c:82:7f:ee:b2:ed:29:c5:ef:23:f0:43:fc:1e:d4:
                    90:29:bf:40:29:45:b3:25:ef:6a:bd:0b:ce:d5:52:
                    d7:0c:11:da:cd:e7:6f:85:d2:7a:96:84:d5:c1:a5:
                    f5:68:eb:98:e2:ed:af:69:f8:a0:56:ba:38:36:75:
                    14:e7:a6:a4:fb:26:81:6b:47:d7:3a:e3:d2:cd:dc:
                    a0:46:fe:0b:5d:f5:61:97:be:16:ce:df:e9:8b:1f:
                    e3:aa:a1:13:d3:72:86:1f:3a:a2:e2:9c:8b:9a:30:
                    19:a6:cd:4a:50:0e:83:10:89:d8:21:0b:1b:b7:01:
                    71:2b:56:b6:6e:7f:e1:d2:1f:8d:32:1c:30:97:d0:
                    d9:08:1d:b8:66:e8:f4:b3:db:32:50:0c:bb:2a:98:
                    32:e6:4f:a7:0a:ee:20:9e:fb:48:2e:a1:0c:2e:14:
                    3c:ff:9e:b0:44:45:79:51:48:c7:ab:3d:0c:df:6e:
                    1c:41:4c:76:89:c0:1f:16:40:d3:1c:63:8e:3d:d7:
                    77:7d:9b:85:cc:85:bd:fd:75:94:55:64:9a:14:ba:
                    e9:e5:94:52:a1:57:fc:80:7c:0a:f3:71:99:45:bd:
                    6c:29:06:45:4a:a4:45:ca:ee:cc:7e:7e:0f:3f:47:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:20:CA:7A:D1:B4:A4:16:1A:2C:C6:F4:1E:54:B0:E7:1F:A0:07:A3
            X509v3 Authority Key Identifier:
                keyid:A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:40:c0:16:34:1a:71:98:23:dd:58:60:a4:87:54:c7:e0:9d:
         49:b4:1c:70:cc:83:a2:ab:16:bb:ed:82:03:ba:f4:a2:4b:1f:
         fa:be:c4:b9:bf:60:0e:47:af:b8:3a:e4:00:db:aa:28:f2:02:
         e0:c8:8c:8b:5d:b0:6a:8f:5f:bf:b4:b7:81:03:f5:0b:d4:0e:
         36:c0:f3:16:f1:dc:65:08:13:c5:5b:a4:a4:06:7c:27:6a:03:
         58:7c:52:36:69:d9:80:f2:84:e0:a5:a3:d0:4a:27:5d:82:3d:
         9b:64:94:a2:f5:5f:01:6c:6f:95:9b:84:11:2a:77:1c:33:48:
         52:91:3f:03:d2:53:50:72:2f:ea:73:12:dd:31:ad:4e:6c:d0:
         be:35:11:74:b3:a1:2a:b0:9a:85:36:1b:6b:a4:e1:eb:26:20:
         f2:0c:32:9a:c2:9e:d9:b1:5b:77:17:ed:8a:2d:07:26:d3:4a:
         7a:57:83:20:81:ca:0b:f9:b4:8a:93:78:35:7c:9c:f0:ce:eb:
         6a:8b:68:d1:df:15:75:1b:6e:79:a5:7c:cf:f2:05:77:ea:43:
         88:91:38:a2:d8:ce:b7:02:a9:fb:ce:96:5b:71:f7:18:38:46:
         be:7e:f5:2d:31:fb:dd:fc:54:36:92:2a:ea:70:fc:b4:3b:e9:
         8b:42:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:52 2026 by rpki-client