Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
File:                     ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json)
Hash identifier:          UZ+BV0hlUzdvOzA3mOH9ozSWjmSWXEP/rlLqf1FGxgs=
Subject key identifier:   65:01:8F:72:AE:88:3D:EA:B4:37:E2:43:D1:DB:BE:88:11:47:EC:48
Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
Certificate issuer:       /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Certificate serial:       02A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
Manifest number:          028C
Signing time:             Mon 27 Apr 2026 01:41:01 +0000
Manifest this update:     Mon 27 Apr 2026 01:41:01 +0000
Manifest next update:     Mon 04 May 2026 01:41:01 +0000
Files and hashes:         1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: KNwAvrenGu8Q2HPUzrGwwOfaA/izibNyHUCDJfUufwg=)
                          2: 98F2F9C8762611F09B1FE90DC4F9AE02.roa (hash: KS7F+OziKhDMCnUVMBfodEKMFb07L8NYOvPjvyYchaI=)
                          3: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: ZKWuilMC1mbTpNIhkFg3PCRossx3ZxzSiZXfGCxostY=)
                          4: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: VgKZr+Yro+WCDJDk8+sd8xGuOog1T6cOqydm30PIbLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
                          rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
        Validity
            Not Before: Apr 27 01:41:01 2026 GMT
            Not After : May  4 01:41:01 2026 GMT
        Subject: CN=69eebead-2861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:45:8f:d1:1e:95:12:a4:c2:26:7a:54:c3:
                    7c:51:c3:cb:3f:b3:e5:6d:b3:92:95:3f:be:b7:31:
                    8d:75:e4:df:ff:8d:71:21:1e:18:d2:f1:56:66:c5:
                    d7:a5:ee:ac:64:59:b7:20:df:1c:ba:d4:c7:84:da:
                    db:fb:a4:c7:be:ab:4e:fc:2f:fb:d5:eb:f6:b6:97:
                    52:ff:cc:f6:1d:f2:98:4f:b8:de:33:71:54:37:48:
                    9c:98:90:98:57:73:35:e3:0a:f7:ae:52:1e:62:9c:
                    d8:ae:f3:b5:9d:bb:c4:b9:ef:84:eb:d7:c2:64:1c:
                    a2:00:09:9f:24:07:14:23:a1:61:72:42:e6:11:1b:
                    d9:70:25:18:32:c3:5c:b7:31:66:80:5c:ae:5e:21:
                    36:92:c3:c7:e5:ec:c1:1a:a9:c3:92:3b:fe:59:6e:
                    35:a8:c4:1f:b3:48:d0:34:6a:cb:94:e9:10:e5:72:
                    2d:e0:c5:75:85:6c:d7:89:a3:87:2a:db:aa:34:fd:
                    36:67:bd:6f:d4:33:02:fa:14:35:c6:15:86:57:d4:
                    ef:26:f9:c6:8b:0a:30:23:16:9c:7d:62:59:07:52:
                    5b:16:ee:ab:62:c2:da:df:f8:ea:2b:3c:df:ff:79:
                    3b:23:00:28:54:06:24:01:6b:fe:d2:20:e0:98:7b:
                    ef:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:01:8F:72:AE:88:3D:EA:B4:37:E2:43:D1:DB:BE:88:11:47:EC:48
            X509v3 Authority Key Identifier:
                keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:85:cc:df:b5:96:56:f3:00:2f:c2:fa:ec:86:b8:0d:5a:73:
         ad:85:01:ae:6d:13:c5:85:b3:23:71:c8:56:f3:ec:d4:f8:6e:
         d6:89:4a:83:87:9d:4d:89:71:01:4d:ac:49:c5:6e:42:1f:aa:
         ec:23:0e:c7:97:b8:82:81:09:30:ae:1d:1c:93:42:9d:bd:81:
         63:ec:26:05:01:2a:2e:71:76:f8:94:0e:98:c1:68:f0:c6:d6:
         5e:14:d1:86:6f:f8:c4:32:f9:f9:01:d7:67:e2:49:94:0c:db:
         1b:db:64:27:0f:6f:63:f1:c9:7e:9b:17:48:ae:c5:7e:c0:02:
         00:6c:0d:0a:c9:76:fb:51:a4:f4:8c:11:9a:ff:04:dd:5f:9f:
         7f:29:83:b9:56:64:a7:4c:0e:4e:e2:88:3c:f6:9a:50:64:69:
         a6:de:5c:d1:5b:e1:f6:63:4b:09:47:0f:59:90:de:9b:91:e9:
         e2:25:a0:59:56:6f:b3:d3:7b:c6:d9:c5:4d:72:6e:d1:0c:ea:
         0c:a4:f2:c4:0c:9d:b0:2f:d4:10:7a:70:42:0e:9c:43:13:c0:
         dd:7b:72:c7:e3:ac:1f:bf:c0:cb:e8:7c:f6:25:4a:65:c4:10:
         88:a9:77:a3:17:ea:5b:bc:f0:38:fc:d5:b5:03:0c:90:c6:74:
         b3:ff:6a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 12:44:53 2026 by rpki-client