Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
File:                     ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json)
Hash identifier:          X4HeulRDoowwGbFnAdKwPT1uk6q5JlZq36Hyw6TqAQ8=
Subject key identifier:   70:A7:29:81:B4:85:88:14:50:13:3B:51:A1:44:F8:EC:AF:9C:65:E9
Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
Certificate issuer:       /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
Manifest number:          013B
Signing time:             Sat 13 Jun 2026 05:26:00 +0000
Manifest this update:     Sat 13 Jun 2026 05:26:00 +0000
Manifest next update:     Sat 20 Jun 2026 05:26:00 +0000
Files and hashes:         1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: c7YF+s4eH6WO99JGaPZJ9liX1ISoAfoXqkYiySyTDxs=)
                          2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: A7rSSZVeM5zH7Lu6nq0wtI2MJAwPFWQR7zTSTecfo9k=)
                          3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: XAAQs6VvWW3MlpS05j2NWzqBVUmAKDnHpobUBOoE4/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
                          rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
        Validity
            Not Before: Jun 13 05:26:00 2026 GMT
            Not After : Jun 20 05:26:00 2026 GMT
        Subject: CN=6a2ce9e8-2590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:7b:a4:b8:11:11:12:ba:fd:8b:07:82:16:
                    c0:9c:00:b7:86:bf:b3:04:42:ee:85:fe:86:e5:39:
                    a7:71:e9:d7:5f:9f:f9:48:2a:85:b2:cf:31:08:7e:
                    07:b1:a6:84:c2:80:16:fc:c4:33:a0:75:2b:a6:8a:
                    fb:66:fc:9a:6c:95:2a:08:8e:15:eb:f1:54:5e:70:
                    fe:2e:ef:ba:f6:f3:74:82:24:18:cb:b7:8f:b6:39:
                    61:b4:65:d6:70:d8:a8:1d:da:45:1c:42:19:c2:4e:
                    ae:7e:6c:06:0e:ac:33:e5:98:44:05:56:d4:cb:bb:
                    4f:87:4a:24:8f:cd:33:fa:2e:38:4d:4d:9c:87:11:
                    e5:3a:b8:db:f0:02:53:4a:51:60:29:1f:3b:c0:10:
                    68:3e:36:ab:2d:2f:5f:a2:ba:bd:ed:f9:89:25:6a:
                    d3:a9:86:d7:3a:22:18:d0:6a:e9:a9:d8:f9:d3:4c:
                    f4:82:18:57:0e:45:de:f2:95:76:97:8d:a1:fe:d5:
                    fd:40:f4:dd:f5:7e:08:ff:9d:8b:08:2f:6e:b8:40:
                    31:fe:4d:40:1f:48:22:1f:aa:e0:1d:f6:dd:7c:e2:
                    f4:d0:6d:13:95:5b:4b:74:24:97:fa:b8:17:bf:41:
                    9d:85:71:68:00:47:46:18:83:60:32:bf:ed:1e:22:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A7:29:81:B4:85:88:14:50:13:3B:51:A1:44:F8:EC:AF:9C:65:E9
            X509v3 Authority Key Identifier:
                keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0c:e0:5e:44:31:b0:4c:ca:31:de:3e:73:13:ee:1b:ec:80:
         d0:5e:48:4d:ab:11:5b:f6:94:39:da:48:59:55:da:23:b1:ac:
         e1:d0:5c:94:d5:83:7e:b7:91:88:1d:bd:3e:51:6b:bc:f1:4a:
         2d:8c:e1:92:22:b1:ea:d1:b3:0d:b0:e8:ac:a4:9c:ee:e9:87:
         7d:24:5b:49:0c:54:9e:40:f0:f6:f0:66:ee:e1:8d:bd:91:4b:
         f2:f6:3e:ee:9b:55:06:e3:fd:45:7d:98:78:77:e7:fb:8a:d9:
         0b:0f:2f:32:71:90:b9:33:42:c2:88:2a:3b:d0:48:47:e9:de:
         5f:e4:51:ca:36:ec:4b:18:bc:37:b1:c1:9a:95:a1:8b:50:8a:
         ab:15:b8:0f:8b:c9:34:62:98:87:ed:c4:8c:a9:b9:97:ea:2f:
         d3:e9:e2:27:4a:ee:62:6f:72:ea:33:f1:fb:e0:ae:99:a3:e4:
         88:6f:0a:5f:d2:a4:84:67:a9:3e:fa:87:c5:3c:f8:05:cb:2d:
         3f:0f:b6:a7:0c:02:78:36:21:c7:35:c0:c5:3d:51:1a:4d:59:
         f1:23:08:e8:23:45:a8:f1:dc:d3:79:a3:08:19:c2:0a:4b:54:
         b8:f0:3f:0d:b7:fd:48:e1:c8:b5:78:d0:d3:8b:06:38:c3:d9:
         fa:54:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:28:32 2026 by rpki-client