Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
File:                     ZKte21ESYrc2r4F0HU1zFBTTSlc.mft (raw, json)
Hash identifier:          w5IdQBSJXD7Wij9zEp2cABxWtf0Ay507iKSrFphS+og=
Subject key identifier:   DA:38:19:5C:9B:ED:B0:E0:01:FB:85:79:CF:F6:B2:BE:33:7A:70:F2
Authority key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57
Certificate issuer:       /CN=A91DD11A/serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
Manifest number:          6D
Signing time:             Thu 11 Jun 2026 10:21:38 +0000
Manifest this update:     Thu 11 Jun 2026 10:21:37 +0000
Manifest next update:     Thu 18 Jun 2026 10:21:37 +0000
Files and hashes:         1: ZKte21ESYrc2r4F0HU1zFBTTSlc.crl (hash: HCe3M1+lPi30mWZwHI6NSfHmzB8kIQ6v8k7QHffZ+DI=)
                          2: E4DCE562284911F19931E6E894833773.roa (hash: 0yKy3aBVwlRdNI3lMwh0VFIrVrZK1Q3eetgCew0uics=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl
                          rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 10:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
        Validity
            Not Before: Jun 11 10:21:37 2026 GMT
            Not After : Jun 18 10:21:37 2026 GMT
        Subject: CN=6a2a8c32-c2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:87:a5:70:89:b1:8a:4b:95:3f:86:7e:5a:
                    0a:ed:52:2e:2d:35:a1:76:90:fb:dc:d2:90:5c:8a:
                    e7:7e:a4:bb:c9:7a:fe:27:4f:3a:08:2d:b6:d2:82:
                    46:52:36:a0:21:08:72:e3:44:3c:cf:74:39:24:bc:
                    7b:b9:e9:b0:67:13:6e:82:38:07:b1:9e:44:01:14:
                    a9:c0:8f:79:15:db:1a:31:11:7a:39:4a:c3:e5:5e:
                    e5:56:80:e0:2c:d5:9d:2b:47:24:6f:59:51:17:5d:
                    fd:3b:14:64:83:29:ae:af:0b:db:e9:7f:66:86:31:
                    90:0b:de:20:7f:ab:3e:03:39:76:e2:5a:ff:35:32:
                    c2:47:a1:68:48:b1:0d:9a:10:55:fc:c4:ed:c5:81:
                    3c:1f:5a:7d:bd:d0:06:f2:e5:6e:1e:b5:74:51:66:
                    f0:ea:50:54:53:94:fd:bf:16:87:36:56:30:4f:1b:
                    72:5e:0a:64:ac:8b:3f:b7:77:60:17:f2:fe:1e:f5:
                    34:18:e3:b0:21:37:4c:ce:ab:b5:11:48:8b:8c:b3:
                    ea:96:97:46:ed:00:6a:40:18:84:78:6a:77:25:cd:
                    e4:41:3c:1a:6b:b3:af:0f:8d:c8:97:c2:1b:2f:01:
                    87:f8:10:a3:a9:44:d7:8e:08:0e:35:3f:f7:02:f4:
                    85:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:38:19:5C:9B:ED:B0:E0:01:FB:85:79:CF:F6:B2:BE:33:7A:70:F2
            X509v3 Authority Key Identifier:
                keyid:64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:26:13:84:ca:93:a9:6b:1b:e1:01:2c:2a:04:8a:b7:8c:9d:
         da:ca:88:ba:ce:33:68:e1:bd:c6:17:fb:a1:a8:87:8f:2e:b2:
         de:f1:37:c6:16:f8:91:57:e3:5a:ac:1e:e7:54:ff:20:35:43:
         61:46:74:81:7b:82:4f:7a:9b:75:d1:1f:88:5a:81:b0:46:df:
         ed:0b:4f:68:89:d3:6e:cc:f3:c7:9c:ad:49:b0:09:ba:37:63:
         3f:87:5a:93:9c:78:c0:38:db:da:14:7e:53:95:b0:ac:fb:87:
         aa:02:57:9b:f5:94:cf:6d:e8:79:39:5c:1c:42:63:1e:28:d3:
         00:5a:3d:ac:b4:96:28:e9:b2:6e:33:2c:c1:ac:c4:4a:9a:21:
         d2:6b:a3:d3:08:e0:ce:b3:83:6d:b6:25:94:2b:3d:5a:98:33:
         a9:84:c9:cb:7d:b9:60:23:6c:19:3a:d8:55:8e:84:16:44:6f:
         b5:e1:31:09:e9:27:15:2b:62:a1:07:42:28:44:76:8e:1e:03:
         d9:86:29:b9:03:ce:6f:bc:74:c9:91:12:d6:9a:e2:6e:13:62:
         80:03:c7:3a:c3:49:f3:d6:e2:cb:54:99:c2:cc:f8:9e:d9:37:
         a0:14:48:49:db:6d:3c:d3:26:bb:aa:87:38:55:a3:0f:ec:32:
         5a:64:f7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:04 2026 by rpki-client