Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft
File:                     ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json)
Hash identifier:          31Vs+y7ebhKrGA7vF+64Z4Nm0CgZqnIHhRn6ya/6+qE=
Subject key identifier:   48:05:0B:A7:78:2D:EC:DC:9A:C5:D2:BC:40:FC:8A:C5:C8:A1:9A:AD
Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD
Certificate issuer:       /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft
Manifest number:          023F
Signing time:             Sat 13 Jun 2026 02:37:49 +0000
Manifest this update:     Sat 13 Jun 2026 02:37:49 +0000
Manifest next update:     Sat 20 Jun 2026 02:37:49 +0000
Files and hashes:         1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: q3F018Zjepp30VPTV8RGOBsVhHybbGmYZpS1wA+X97g=)
                          2: 8D04AAF04F7711F18A6088C5CB833773.roa (hash: XjXcCi2v5LhOi6H+CcgSm46oBwz6y5FjSkvJ1fRJvEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl
                          rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD
        Validity
            Not Before: Jun 13 02:37:49 2026 GMT
            Not After : Jun 20 02:37:49 2026 GMT
        Subject: CN=6a2cc27d-007d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1d:84:dd:8f:45:a8:e3:12:5a:27:32:fd:34:
                    5c:2c:94:71:67:b0:72:41:d4:29:5c:2c:9a:66:b2:
                    4b:57:bf:02:2b:b6:d6:9c:a2:b8:5f:ed:78:40:a4:
                    df:ed:1e:87:a7:07:47:9e:74:1c:98:a8:d6:be:38:
                    90:9e:77:5c:b1:ea:f4:f6:c8:9d:f2:a0:e4:a2:7f:
                    6d:6f:3e:15:42:b3:e4:17:17:b6:7e:dd:7d:a9:7c:
                    6c:54:f7:19:d5:5e:32:11:7a:0d:39:a0:62:d2:3d:
                    73:59:12:e1:0a:24:0e:c1:1a:24:3d:5b:30:a1:03:
                    a3:b9:70:82:6e:f2:cb:8d:d2:80:30:96:4b:58:9d:
                    00:00:5b:2a:61:6a:03:dc:e5:bf:4c:a7:67:97:83:
                    ef:9b:a8:0e:7d:37:eb:0b:d3:53:91:cd:dd:c3:ed:
                    83:4d:45:5a:45:3d:34:4d:ad:ea:60:32:6a:e7:09:
                    36:5e:25:dc:cb:46:7e:25:f6:2f:ca:c2:89:b6:12:
                    76:0f:0c:f9:9f:18:4e:b2:1a:13:44:2e:61:2b:be:
                    70:a2:fd:02:ba:7d:98:a1:79:ce:84:c5:48:28:96:
                    0c:d7:bf:68:e2:c5:a4:b1:35:66:44:c5:88:d9:cb:
                    17:14:50:7a:1e:1c:38:c5:09:29:63:7f:c5:0a:a6:
                    4e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:05:0B:A7:78:2D:EC:DC:9A:C5:D2:BC:40:FC:8A:C5:C8:A1:9A:AD
            X509v3 Authority Key Identifier:
                keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d4:af:60:cb:1c:66:dd:af:19:b2:96:16:61:b0:79:f1:ed:
         2b:aa:b8:03:38:a1:04:e6:2c:38:44:d6:be:7d:ad:31:fa:a6:
         36:c8:e6:f3:22:4d:f7:0f:51:14:1a:7c:84:8a:d8:38:68:f4:
         43:e5:63:fc:d3:0b:a3:e1:ea:f2:7f:52:cf:5a:1c:d4:25:8f:
         c5:97:ad:70:ff:07:0b:82:77:12:52:d8:5a:51:e6:b0:bc:71:
         4d:0a:98:dd:1e:7d:e2:29:ee:c9:11:87:1b:b2:05:ce:d2:6f:
         2e:63:94:19:18:7c:d2:5c:58:ac:5d:70:56:78:3d:e0:c5:d8:
         61:13:1f:0d:39:33:82:aa:3a:9d:5f:6d:4e:ff:66:a1:bf:3d:
         17:08:15:9d:00:c1:32:c5:a6:fc:0f:80:0c:5d:3e:ca:07:2f:
         d9:79:46:64:88:34:43:e2:57:52:bc:44:a8:60:30:52:0c:32:
         77:51:52:3e:9a:e9:45:d1:2f:80:5b:87:90:bd:70:f2:77:78:
         65:f8:8d:6f:57:e9:d1:d7:fa:00:6b:9b:ef:ec:cf:8c:e8:ee:
         83:e6:3c:ac:97:71:05:a0:48:45:60:8c:bd:e1:47:71:59:2b:
         37:b7:32:31:30:ab:02:e2:3a:0b:4d:a5:52:bf:41:e0:55:01:
         a2:a1:c1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:48:44 2026 by rpki-client