Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft
File:                     0zOneHph_4bHRbR0CWr2muMaz_E.mft (raw, json)
Hash identifier:          B4eYcqiNyZunHp/htzTFp7Gu3LBn881+7BC8mCSnXNo=
Subject key identifier:   D0:0F:86:F4:DF:9C:87:DD:72:B9:C7:53:2C:3D:73:7F:1F:EC:C0:08
Authority key identifier: D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1
Certificate issuer:       /CN=A911309C/serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1
Certificate serial:       06AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft
Manifest number:          06A1
Signing time:             Thu 14 May 2026 22:31:08 +0000
Manifest this update:     Thu 14 May 2026 22:31:07 +0000
Manifest next update:     Thu 21 May 2026 22:31:07 +0000
Files and hashes:         1: 0zOneHph_4bHRbR0CWr2muMaz_E.crl (hash: tt9RjbUPn3XWJZ6LxdFlvyfQykNkApGhI+tjyYa6pQU=)
                          2: 4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa (hash: QvOTyrpbe1VCHU2+KRZM8SSI4eGcfEaHjSGLe1IGI/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl
                          rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 21 May 2026 22:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911309C, serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1
        Validity
            Not Before: May 14 22:31:07 2026 GMT
            Not After : May 21 22:31:07 2026 GMT
        Subject: CN=6a064d2c-f77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:5d:aa:f0:18:55:28:f2:8c:2c:9c:a1:b2:
                    1e:9d:30:ae:4d:ea:6a:b1:36:0c:22:4a:ae:d3:4f:
                    2d:b5:2a:61:80:4f:e1:6d:48:a0:14:cf:22:1b:7a:
                    d3:e0:b8:22:ab:58:0f:a3:f9:97:1f:92:02:97:c2:
                    44:e6:18:e0:9a:48:4e:79:80:53:84:04:82:c9:99:
                    4e:01:5e:51:70:a3:68:7d:5f:d3:92:07:e6:18:12:
                    36:1f:8b:de:dd:3b:2a:b7:28:07:9c:29:26:13:dd:
                    5e:8a:74:ef:bb:c5:52:e2:5f:16:59:4b:ef:cd:22:
                    cd:25:73:ba:61:2a:c2:e4:0c:59:44:1d:93:11:12:
                    9e:5e:8a:5f:f9:c9:36:23:1e:01:57:62:59:a5:0c:
                    b6:7e:35:36:7f:6c:19:ac:38:e2:55:33:75:03:8a:
                    31:5c:67:12:a7:18:cc:12:4f:ac:f5:e9:6f:07:b2:
                    2d:fc:0c:18:1d:5c:c7:e8:81:0a:8f:9c:79:27:de:
                    a4:3e:a8:7a:93:70:16:6f:b1:f3:35:45:75:82:44:
                    d6:f1:6e:7d:a3:cb:fc:b9:16:ad:ef:01:cd:ef:ed:
                    09:95:4f:ed:2a:19:b4:fd:4a:35:e5:8d:08:c1:97:
                    0c:c6:52:aa:8e:d5:0a:b9:95:60:6a:83:a1:3c:1d:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0F:86:F4:DF:9C:87:DD:72:B9:C7:53:2C:3D:73:7F:1F:EC:C0:08
            X509v3 Authority Key Identifier:
                keyid:D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:25:92:29:50:01:df:70:ad:2d:cf:dc:c9:5e:41:9e:90:
         d4:1b:c3:95:17:26:20:9f:90:3d:ed:41:ba:cf:81:23:54:a5:
         fa:f6:41:ba:9c:10:e9:ee:26:ea:ce:ff:c0:a3:f1:47:f7:5e:
         37:06:29:79:15:0f:44:f2:3b:9d:67:be:c3:37:44:db:14:3e:
         98:1d:53:c4:ab:ca:be:73:0b:71:7c:f4:0e:61:1e:52:87:e5:
         f3:96:cc:d5:07:8f:1a:19:d8:80:a1:69:0a:d9:2e:8b:70:45:
         58:32:7d:f3:69:96:13:9f:7a:3b:0c:b6:4e:f4:33:67:25:00:
         9b:44:e7:c7:9f:09:34:b0:1a:0c:2e:b5:e0:1a:04:1f:46:f4:
         ff:95:31:cc:ce:ae:53:52:7e:96:62:55:36:a4:a8:ce:65:54:
         ff:00:e1:c1:aa:9f:c9:6b:cd:09:dd:3a:79:97:e6:60:e5:f3:
         ed:06:78:2c:de:f6:f9:f1:4f:30:3d:bc:1f:dc:dc:60:93:b4:
         6b:08:0a:aa:7f:31:37:ed:c9:b7:f0:02:bf:e8:f3:e1:70:83:
         64:28:85:a2:53:df:b5:31:81:86:84:8d:d3:82:58:53:34:54:
         f1:92:6e:6d:96:ee:d3:7e:5c:4b:cb:69:eb:78:b6:38:a3:fb:
         76:b5:ce:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:12:47 2026 by rpki-client