Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
File:                     zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft (raw, json)
Hash identifier:          pN38PNXROOghsRF40LYYx+CDUkPJXcVeklTGkJlW9IA=
Subject key identifier:   7C:CC:31:56:8B:BC:D1:F0:1B:06:8A:63:50:51:EA:8E:A6:B8:FB:CF
Authority key identifier: CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
Certificate issuer:       /CN=A91E8FFF/serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
Manifest number:          50
Signing time:             Thu 11 Jun 2026 10:35:09 +0000
Manifest this update:     Thu 11 Jun 2026 10:35:08 +0000
Manifest next update:     Thu 18 Jun 2026 10:35:08 +0000
Files and hashes:         1: zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl (hash: zedbAzzww+t6EdVphOYWtVyVRdI7Bg1bxuAOe0NXb1k=)
                          2: DBA60106EED111F0AB3DEEA1736F56BC.roa (hash: Zm5NVQiX1B1lMh6YYC6ofTBSfpDnYcLSn7pw+rOzSFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 10:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8FFF, serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
        Validity
            Not Before: Jun 11 10:35:08 2026 GMT
            Not After : Jun 18 10:35:08 2026 GMT
        Subject: CN=6a2a8f5d-1d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:f3:00:11:96:45:29:64:9f:2d:da:f8:0f:
                    ee:05:cf:07:24:b6:86:1a:ae:ee:5f:ce:1d:0a:7d:
                    e2:4d:a5:b7:6f:26:9d:81:be:bf:03:3c:90:62:a5:
                    8f:28:17:b6:07:0d:2c:1a:e1:47:eb:cc:53:be:0c:
                    dc:33:0b:23:a8:9d:66:a8:7f:a2:0e:f2:e0:96:d0:
                    89:91:ab:d3:46:cb:79:83:8a:51:c0:19:51:15:c3:
                    59:0f:fd:d5:32:58:f5:1c:b3:0b:d7:95:3e:d3:3a:
                    c4:93:07:3a:f5:e8:48:15:b6:68:07:4a:20:6b:d3:
                    cc:fc:09:c2:98:29:8b:99:16:1f:5a:49:9f:ae:f6:
                    95:fb:96:8f:01:28:ac:9f:b6:cf:b0:2a:b3:36:9e:
                    57:b7:b9:08:b8:48:7e:87:65:c0:4f:7d:70:bb:b1:
                    af:59:92:74:6c:f0:68:06:b5:ee:b1:ab:c0:e2:01:
                    97:18:73:fb:7f:b1:a1:74:c3:e8:92:ad:4f:aa:d4:
                    5e:48:a8:87:a9:3a:7f:9e:36:27:61:b5:23:cd:7d:
                    7e:9d:6f:d0:b7:87:a4:75:5d:fe:60:97:f0:95:be:
                    78:8b:37:ee:1c:3c:d8:c9:8e:ea:80:aa:10:a2:d7:
                    96:d9:60:94:20:a0:f7:3c:16:70:b4:37:57:5e:c8:
                    98:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CC:31:56:8B:BC:D1:F0:1B:06:8A:63:50:51:EA:8E:A6:B8:FB:CF
            X509v3 Authority Key Identifier:
                keyid:CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:72:93:5d:6a:fe:44:87:cb:64:47:f8:fd:50:12:ce:e4:80:
         2e:c6:79:7c:b0:3c:fb:88:99:9e:17:35:9e:6d:07:0b:77:5a:
         00:3a:e0:6b:99:a2:48:4d:5a:4f:22:11:ea:2e:2e:4a:d3:57:
         fc:41:2b:7f:68:4c:8a:50:e7:70:77:49:96:7e:51:96:fd:2d:
         97:b9:4e:07:5d:e3:21:2b:4f:0c:01:70:15:8e:ad:d3:97:94:
         eb:62:f3:e6:47:b0:65:e7:ce:1c:86:a6:46:ae:5d:eb:40:91:
         62:22:03:ff:c4:90:bb:e7:32:2c:e1:4c:fe:ea:f0:cc:80:b5:
         42:0a:f6:66:66:a5:a5:e8:2e:08:d9:6a:99:a9:af:81:54:51:
         ac:d5:21:a1:0d:43:fe:bc:04:3a:4e:23:f4:c2:46:2c:63:c5:
         ed:95:03:67:ff:26:5b:44:2f:cf:16:5d:05:3b:b2:96:08:0a:
         31:a1:77:b7:09:2a:a9:01:f7:f0:00:e5:a6:c6:30:4a:3d:a7:
         24:24:50:93:76:3a:3f:d6:bc:e5:44:96:42:68:18:44:0a:ae:
         05:ab:8a:44:2b:56:28:12:fa:89:5d:c7:fd:39:d0:d9:ac:c5:
         f6:2a:40:1e:c4:e9:aa:fe:52:76:b5:66:da:54:1c:52:cf:8d:
         92:89:27:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:34 2026 by rpki-client