Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
File:                     SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft (raw, json)
Hash identifier:          f0LhlpCtpl65Le1EU6/sXuCECOrQ58/zr+ogVuBbZMo=
Subject key identifier:   8F:BD:EE:BD:74:C2:CE:FA:DF:83:2B:9D:E4:AD:CA:63:8A:FD:B0:C5
Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00
Certificate issuer:       /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
Manifest number:          53
Signing time:             Sat 13 Jun 2026 08:21:18 +0000
Manifest this update:     Sat 13 Jun 2026 08:21:17 +0000
Manifest next update:     Sat 20 Jun 2026 08:21:17 +0000
Files and hashes:         1: SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl (hash: RdYj0sQSifOy0xM8W0F7a9++smnQguNjwHGCLPkRMcs=)
                          2: 75BE67B2F12311F09E054F8D4F6F56BC.roa (hash: QeHn1agdKxmdJdH278JH44lkIuCADGys4RpsqprN2FU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400
        Validity
            Not Before: Jun 13 08:21:17 2026 GMT
            Not After : Jun 20 08:21:17 2026 GMT
        Subject: CN=6a2d12fe-e916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:24:f6:a3:a1:fa:fa:bc:9a:40:47:9d:2c:13:
                    32:17:61:ff:0e:eb:fc:a0:56:93:0e:d3:8f:d3:af:
                    82:be:57:fe:df:74:1b:69:a5:24:af:dc:cf:ce:a0:
                    5a:20:d2:5a:71:7c:74:d7:c0:ec:7d:c1:1a:f0:85:
                    c6:68:f9:41:e5:21:71:e0:00:51:73:cd:f4:d7:bd:
                    05:9b:f4:85:85:31:76:9b:bb:b7:56:0c:1f:92:af:
                    55:d5:cc:d0:e8:b6:fd:d3:d0:68:47:ae:e0:87:06:
                    d4:8a:ab:68:93:ac:91:d0:f9:1a:ef:57:bf:47:93:
                    a8:e0:54:94:24:f4:a4:de:7e:42:6c:4d:a7:c2:9e:
                    f6:7d:24:45:f2:7e:ca:bc:38:23:a1:8f:d9:c7:38:
                    3f:4b:8d:1d:9d:0d:e9:82:82:9b:33:9e:0a:16:2e:
                    69:7e:ba:db:72:4f:f9:1a:e9:e9:eb:16:e9:6f:83:
                    84:10:e3:e1:62:6c:a6:a0:2b:51:4b:28:14:93:61:
                    36:c3:4f:8f:c3:5d:40:11:b4:24:e5:0b:26:03:a1:
                    a7:3c:54:02:90:54:cb:be:c5:ec:3b:41:22:0e:81:
                    8d:9b:60:bf:10:4b:98:80:3b:00:f1:7f:d3:73:db:
                    4e:95:1b:01:88:f6:cf:37:93:d1:62:1e:b8:15:0f:
                    77:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BD:EE:BD:74:C2:CE:FA:DF:83:2B:9D:E4:AD:CA:63:8A:FD:B0:C5
            X509v3 Authority Key Identifier:
                keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f7:3c:bd:9c:37:83:61:8b:74:2e:10:b2:24:e5:91:53:29:
         f5:f6:9d:32:0d:54:32:ad:89:76:dc:6c:b5:bd:08:73:f7:c6:
         a0:f5:29:a0:d5:bc:0f:17:05:31:ed:2f:73:11:72:12:68:48:
         82:38:5d:b5:07:af:93:e4:4a:79:b8:29:2d:29:37:f7:23:e2:
         10:67:17:db:41:de:f9:b6:ae:d4:df:50:92:9a:ec:80:03:dd:
         f9:12:68:5c:50:35:d3:fb:e3:e8:b7:35:f1:e8:4a:95:65:a7:
         08:a6:c8:de:be:68:46:8b:ee:ea:8c:31:fe:64:d9:0d:31:53:
         7d:23:9e:1c:23:2b:b1:44:e9:09:9a:5d:76:63:e0:cc:21:af:
         3d:f3:f5:60:24:2e:79:0f:f6:1e:8c:c5:b4:21:b0:98:f2:de:
         7f:c7:7d:00:64:a1:46:96:d7:9e:9e:1e:c4:46:c4:78:5b:27:
         b5:f2:7a:79:b4:cb:b8:73:60:88:29:f6:ee:5a:07:fd:0b:25:
         72:51:88:85:fe:5f:5b:e3:2d:20:be:ef:ea:da:4f:16:6f:c8:
         4f:9a:96:ab:bc:63:21:28:79:be:ba:fc:e8:1c:9f:9c:58:fb:
         01:b8:c4:75:b6:e7:8b:19:a7:7e:a3:d3:e1:b4:bf:04:f8:5a:
         e9:f6:2d:d7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MkI5QTExMC8GA1UEBRMoNDk5RDY5MUIwRjczMkQ5MDA2RTk1MTNDNjBCNzM2NkI0
RTY5MDQwMDAeFw0yNjA2MTMwODIxMTdaFw0yNjA2MjAwODIxMTdaMBgxFjAUBgNV
BAMTDTZhMmQxMmZlLWU5MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpJPajofr6vJpAR50sEzIXYf8O6/ygVpMO04/Tr4K+V/7fdBtppSSv3M/OoFog
0lpxfHTXwOx9wRrwhcZo+UHlIXHgAFFzzfTXvQWb9IWFMXabu7dWDB+Sr1XVzNDo
tv3T0GhHruCHBtSKq2iTrJHQ+RrvV79Hk6jgVJQk9KTefkJsTafCnvZ9JEXyfsq8
OCOhj9nHOD9LjR2dDemCgpszngoWLml+uttyT/ka6enrFulvg4QQ4+FibKagK1FL
KBSTYTbDT4/DXUARtCTlCyYDoac8VAKQVMu+xew7QSIOgY2bYL8QS5iAOwDxf9Nz
206VGwGI9s83k9FiHrgVD3fxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUj73uvXTC
zvrfgyud5K3KY4r9sMUwHwYDVR0jBBgwFoAUSZ1pGw9zLZAG6VE8YLc2a05pBAAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjlBLzc3OTY5QjhDRjEy
MjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpBRzZWRThZTGMyYTA1cEJB
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvU1oxcEd3OXpMWkFHNlZFOFlMYzJhMDVwQkFBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy
QjlBLzc3OTY5QjhDRjEyMjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpB
RzZWRThZTGMyYTA1cEJBQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAt9zy9nDeDYYt0LhCyJOWRUyn19p0yDVQyrYl23Gy1vQhz98ag9Smg1bwPFwUx
7S9zEXISaEiCOF21B6+T5Ep5uCktKTf3I+IQZxfbQd75tq7U31CSmuyAA935Emhc
UDXT++PotzXx6EqVZacIpsjevmhGi+7qjDH+ZNkNMVN9I54cIyuxROkJml12Y+DM
Ia898/VgJC55D/YejMW0IbCY8t5/x30AZKFGlteenh7ERsR4Wye18np5tMu4c2CI
KfbuWgf9CyVyUYiF/l9b4y0gvu/q2k8Wb8hPmparvGMhKHm+uvzoHJ+cWPsBuMR1
tueLGad+o9PhtL8E+Frp9i3X
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:14:48 2026 by rpki-client