Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
File:                     zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json)
Hash identifier:          CCT/yPp5afDPmp/j28CtQyut4IDwT7ga1kYk+W5qRyw=
Subject key identifier:   7C:72:CC:2D:40:DB:FF:A0:AA:5A:9A:E6:75:24:C4:D0:20:73:F5:7A
Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
Certificate issuer:       /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
Manifest number:          0153
Signing time:             Sat 13 Jun 2026 05:07:08 +0000
Manifest this update:     Sat 13 Jun 2026 05:07:07 +0000
Manifest next update:     Sat 20 Jun 2026 05:07:07 +0000
Files and hashes:         1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: ZJtz7EECtdr0XcjY581UPpZI0OxzhVbEgNubetUBjq8=)
                          2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: CXpCRLt60Gekc/Mc5tcE7Fr8HBob962lZTc++9cwTzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl
                          rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4C1B, serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
        Validity
            Not Before: Jun 13 05:07:07 2026 GMT
            Not After : Jun 20 05:07:07 2026 GMT
        Subject: CN=6a2ce57c-aee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:31:c6:d9:5c:58:27:99:fa:4b:db:1d:7d:3d:
                    be:21:81:79:2a:0b:ef:9b:c0:95:e5:d4:cd:1d:ce:
                    79:48:3c:1c:70:db:ae:57:3d:28:4c:16:f1:0a:c3:
                    52:d9:85:87:59:e8:bd:96:13:a7:0e:87:fb:a1:d4:
                    f8:45:e3:82:da:d1:d1:13:af:27:38:95:92:34:19:
                    1c:ea:44:32:9f:a0:e5:c0:4b:28:dc:bd:54:45:66:
                    7f:a8:59:4c:4d:42:f8:0c:c0:b6:8f:c7:42:f1:3e:
                    48:ba:0e:32:76:60:00:c1:ee:c8:5e:3c:9a:1e:9c:
                    d4:d3:18:c5:9a:5e:5b:56:15:65:6d:c8:04:1b:2d:
                    3d:b1:0a:ac:21:c6:ab:5c:d8:d7:e8:27:1d:f5:ce:
                    f2:97:b7:ca:70:d2:e0:35:2e:bf:bd:4d:26:3a:e8:
                    55:e3:9e:38:6a:60:64:ae:7b:61:18:7c:43:73:76:
                    3e:8e:31:2a:32:0a:8c:d4:78:8f:36:16:20:bc:48:
                    db:d6:ef:66:15:b8:a6:da:36:14:64:08:b5:7f:f4:
                    ef:51:c2:c7:e8:04:e7:09:ef:97:29:c1:10:5b:cb:
                    09:bf:5b:db:30:ab:07:7a:90:4c:a7:c5:6d:eb:68:
                    0c:96:13:f9:c0:b5:27:d8:44:53:de:d2:9a:0d:9c:
                    5b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:72:CC:2D:40:DB:FF:A0:AA:5A:9A:E6:75:24:C4:D0:20:73:F5:7A
            X509v3 Authority Key Identifier:
                keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9b:ef:77:8b:fb:5e:8c:c4:6a:aa:60:41:a5:d8:d5:62:2e:
         d1:bf:e6:1c:66:1d:5d:2b:42:1a:ad:05:19:0c:f9:c0:11:bc:
         30:4e:ec:eb:81:9c:0a:59:84:fd:6e:a7:d6:75:27:98:74:b5:
         b4:07:08:da:48:b4:8a:74:04:d1:c0:51:a6:d4:03:8f:44:23:
         dd:8a:a2:8e:8c:0c:c8:e2:54:1a:2c:3d:3a:9e:86:f4:86:a3:
         b6:14:0b:d6:f6:0c:82:dc:fe:c2:42:81:ae:1c:0c:8b:d0:de:
         86:4b:cb:7b:c2:2f:1f:0a:f3:86:c0:74:0f:50:e1:2d:18:b3:
         ad:48:a0:10:56:1e:18:be:d5:ba:af:d7:db:e7:d5:c7:ee:32:
         55:32:5a:d5:d0:0f:d5:b6:22:ff:02:a9:45:d2:45:84:94:21:
         00:a3:ee:fe:a8:65:17:56:33:c6:3e:3f:ec:75:88:1b:51:2c:
         14:7e:cd:92:39:6d:da:3e:a2:d0:88:da:be:69:e1:1f:aa:92:
         8e:fe:7a:33:e2:94:a4:e4:34:ec:0b:1d:27:a0:a9:56:b8:86:
         e1:63:37:b3:4c:fb:a4:c1:51:08:6b:06:33:3d:75:f0:fd:02:
         3d:41:14:1d:29:ed:9f:70:af:63:86:e2:75:4a:bf:58:bc:7c:
         63:a0:c3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:36:22 2026 by rpki-client