Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
File:                     ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json)
Hash identifier:          KqRXVEhyJe4S1APAZezHxPl6o6+3kGYvMvtp6F4zdBQ=
Subject key identifier:   DB:89:F6:FB:1C:89:94:62:7D:C2:F1:9B:56:E7:67:58:25:93:7C:34
Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
Certificate issuer:       /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
Manifest number:          B4
Signing time:             Thu 11 Jun 2026 09:29:25 +0000
Manifest this update:     Thu 11 Jun 2026 09:29:25 +0000
Manifest next update:     Thu 18 Jun 2026 09:29:25 +0000
Files and hashes:         1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: OSbn2rovLU2BExri5qQvglNDo+p5/KQlg5MLlo9yn/g=)
                          2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: BxOM7SgqdGJtQ0VBZeNqfMKq52lRmXi/Ew1Q7dVeV+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
                          rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 09:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
        Validity
            Not Before: Jun 11 09:29:25 2026 GMT
            Not After : Jun 18 09:29:25 2026 GMT
        Subject: CN=6a2a7ff5-70b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:04:bb:fa:59:4e:98:6f:28:0b:23:52:5d:59:
                    49:77:30:e8:12:9b:51:01:db:19:5d:f9:71:97:a8:
                    91:a8:5b:58:40:4c:14:d6:5d:d7:9d:62:fe:9a:1e:
                    16:a4:63:b3:b3:c6:4f:cf:c5:d3:ad:7e:75:86:d0:
                    bb:61:d8:f0:8f:ac:ef:cc:48:93:ff:0a:d8:57:05:
                    89:eb:57:16:9a:4f:ec:fd:9d:ce:ca:6f:91:b1:96:
                    a5:93:e0:ed:60:b7:94:0e:6a:52:f0:d5:33:42:29:
                    d5:41:f1:de:f1:7c:ff:f4:31:7e:c6:3d:ef:86:90:
                    74:de:89:56:62:bf:bb:76:15:61:5a:2b:4a:32:10:
                    80:2a:ce:72:3e:05:69:bb:3a:fc:bf:73:d0:63:ad:
                    f0:62:9f:e1:bc:b8:6a:d3:52:c3:e9:5d:ac:74:aa:
                    e7:3d:11:d3:a9:fe:45:7e:c5:2c:47:27:a0:64:ff:
                    31:7c:bd:8f:dd:f3:8a:e6:08:1c:c3:df:60:54:b2:
                    0a:af:84:22:28:08:40:81:68:ad:31:bb:35:39:05:
                    73:50:41:a4:77:87:00:22:ef:ef:ee:f1:1b:91:77:
                    27:b7:06:9e:46:50:d4:a0:c2:cf:c5:35:e6:69:34:
                    51:83:72:13:66:41:1c:a3:1d:0a:8d:2d:41:79:37:
                    5e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:89:F6:FB:1C:89:94:62:7D:C2:F1:9B:56:E7:67:58:25:93:7C:34
            X509v3 Authority Key Identifier:
                keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:28:e0:19:9a:f5:5d:61:f1:d5:f1:a0:3a:ed:72:cf:c7:
         f7:89:a0:cf:a0:ba:48:68:07:bb:97:a2:62:e1:f7:7b:9d:d4:
         92:54:ea:39:14:f5:82:32:cd:c4:36:93:a3:11:33:af:42:f1:
         4a:f7:57:58:80:4d:d4:ee:26:b4:9b:02:a8:8e:a3:77:c8:48:
         67:68:b8:28:83:4c:c9:00:25:2c:80:f9:66:23:e4:b2:51:65:
         97:5c:98:f9:f4:7d:94:50:58:19:30:1d:b3:69:ec:64:8c:7e:
         dc:98:0a:92:08:26:93:e8:83:74:24:2b:f7:16:5d:dd:4f:96:
         3c:d3:a2:66:ac:2d:8f:af:89:30:af:01:cc:84:44:ea:47:97:
         23:06:d9:8e:87:da:5a:ed:7a:c9:36:06:24:71:8a:40:35:6f:
         e0:67:41:cd:fe:ef:13:86:e4:cc:52:13:1e:ba:f4:c0:0e:71:
         39:34:70:a7:9a:65:a2:c8:31:f4:15:80:7b:56:0e:d1:75:88:
         32:66:ea:89:10:bb:d7:74:39:40:b4:3b:5f:3b:5e:54:5a:6a:
         0c:75:d1:10:2f:2d:5e:38:37:46:1a:48:bd:a4:68:98:5b:f6:
         0d:80:5a:ac:d9:1b:4b:29:3f:ef:e2:a7:4e:0e:89:72:e8:84:
         bb:d0:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:50 2026 by rpki-client