Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
File:                     ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft (raw, json)
Hash identifier:          0F0TGVp+S8CHGMGw0aWreHH4vj/Agf9F5mYFsa1CRhM=
Subject key identifier:   29:2F:D0:EF:2E:66:73:E0:D9:78:AE:0A:2D:6E:EE:3B:E0:F0:81:F2
Authority key identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13
Certificate issuer:       /CN=A911B5AC/serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
Manifest number:          70
Signing time:             Mon 01 Jun 2026 02:29:29 +0000
Manifest this update:     Mon 01 Jun 2026 02:29:28 +0000
Manifest next update:     Mon 08 Jun 2026 02:29:28 +0000
Files and hashes:         1: ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl (hash: kdZV0qa1vjW6OcrnG0s24UJrBz9w/GCS20zDgMOmpR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl
                          rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 02:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5AC, serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213
        Validity
            Not Before: Jun  1 02:29:28 2026 GMT
            Not After : Jun  8 02:29:28 2026 GMT
        Subject: CN=6a1cee89-3a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:0c:ed:ef:58:ec:30:ad:41:ab:62:87:5c:
                    e3:73:30:5a:be:00:46:5b:fe:88:a1:ef:e5:eb:7b:
                    ef:a1:87:bc:30:44:e8:17:e6:3f:61:c7:5a:5a:33:
                    d8:4d:12:b5:e8:ed:5f:1e:46:9d:c6:a1:a2:e4:48:
                    69:b9:1b:32:4f:a0:5f:1d:54:08:8b:ec:df:5b:85:
                    0f:c6:dc:d1:da:e8:0f:5d:0c:7a:a0:05:94:74:23:
                    eb:e8:11:44:c7:64:3b:85:c5:54:75:35:cb:c1:77:
                    2e:07:7b:3f:4b:c2:c9:f2:14:10:60:44:83:f8:c4:
                    32:35:ba:e4:4c:c6:67:a9:c2:a7:e1:1b:26:e9:ed:
                    59:04:95:a2:2e:bb:97:e1:0b:cb:5c:f8:32:22:39:
                    57:6b:60:32:4f:fe:5d:87:d3:29:0a:80:ec:3d:a0:
                    bd:2a:87:eb:7f:86:c5:12:39:19:8e:1f:a3:3a:e7:
                    da:5e:00:30:b3:ce:4c:99:c7:6f:30:80:ff:be:7d:
                    6f:f5:4a:f1:a8:d7:27:41:e1:cb:3e:df:61:06:55:
                    93:ea:95:42:3e:1f:ef:d8:33:5e:0f:48:60:0c:82:
                    15:90:5d:0e:0c:2e:6e:57:65:46:ba:35:0f:75:fd:
                    bc:bf:19:93:fe:8b:da:af:79:61:1b:11:34:d3:b2:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2F:D0:EF:2E:66:73:E0:D9:78:AE:0A:2D:6E:EE:3B:E0:F0:81:F2
            X509v3 Authority Key Identifier:
                keyid:64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:33:c3:fb:46:69:84:96:1b:18:48:9e:df:b8:ab:66:43:55:
         74:9a:55:a1:44:ac:15:f7:ae:d2:77:c7:de:6b:83:39:41:89:
         76:11:1f:68:d6:d1:61:c5:e1:ef:6a:95:46:f2:b0:5f:48:c0:
         e0:54:7c:c2:a7:af:de:f7:1e:3c:85:4f:29:a6:be:b3:19:32:
         39:8a:f4:25:ab:d0:35:f8:ee:a1:20:37:b3:6c:7f:97:71:0f:
         e3:4b:27:95:0e:7e:d2:af:4a:86:37:34:cc:15:24:b2:02:7f:
         ed:0f:88:53:7e:83:a6:d1:c4:76:89:0f:d3:8c:d9:9d:78:98:
         4d:0c:f9:24:ab:2a:21:e5:61:71:a4:95:08:9a:e5:0a:f0:b7:
         ce:55:48:57:0d:5a:63:c8:26:5a:a6:fd:a2:b9:51:e3:36:d4:
         da:ae:c7:c7:77:91:52:47:cc:c8:0a:7c:97:11:01:86:90:6c:
         46:a4:51:91:30:74:95:34:63:f8:b6:5b:5c:26:8c:af:64:26:
         43:0c:da:63:8d:65:5b:6a:76:75:fc:67:70:87:ac:db:0b:8d:
         91:7d:aa:d1:46:0c:01:b1:4f:be:38:08:a3:bc:13:42:ff:40:
         4f:bd:a5:f4:f5:96:94:77:12:22:02:91:91:50:27:99:4c:f6:
         a1:0e:6a:67
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
QjVBQzExMC8GA1UEBRMoNjQ1MTU1M0UwOURDMjRERERCQzU0MDczRTY2MjVCMUEx
NkU3NTIxMzAeFw0yNjA2MDEwMjI5MjhaFw0yNjA2MDgwMjI5MjhaMBgxFjAUBgNV
BAMTDTZhMWNlZTg5LTNhMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCVEwzt71jsMK1Bq2KHXONzMFq+AEZb/oih7+Xre++hh7wwROgX5j9hx1paM9hN
ErXo7V8eRp3GoaLkSGm5GzJPoF8dVAiL7N9bhQ/G3NHa6A9dDHqgBZR0I+voEUTH
ZDuFxVR1NcvBdy4Hez9LwsnyFBBgRIP4xDI1uuRMxmepwqfhGybp7VkElaIuu5fh
C8tc+DIiOVdrYDJP/l2H0ykKgOw9oL0qh+t/hsUSORmOH6M659peADCzzkyZx28w
gP++fW/1SvGo1ydB4cs+32EGVZPqlUI+H+/YM14PSGAMghWQXQ4MLm5XZUa6NQ91
/by/GZP+i9qveWEbETTTsjrbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKS/Q7y5m
c+DZeK4KLW7uO+DwgfIwHwYDVR0jBBgwFoAUZFFVPgncJN3bxUBz5mJbGhbnUhMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNUFDL0JDMUY3REI2Qjky
MTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4zYnhVQno1bUpiR2hiblVo
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWkZGVlBnbmNKTjNieFVCejVtSmJHaGJuVWhNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC
NUFDL0JDMUY3REI2QjkyMTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4z
YnhVQno1bUpiR2hiblVoTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDVM8P7RmmElhsYSJ7fuKtmQ1V0mlWhRKwV967Sd8fea4M5QYl2ER9o1tFhxeHv
apVG8rBfSMDgVHzCp6/e9x48hU8ppr6zGTI5ivQlq9A1+O6hIDezbH+XcQ/jSyeV
Dn7Sr0qGNzTMFSSyAn/tD4hTfoOm0cR2iQ/TjNmdeJhNDPkkqyoh5WFxpJUImuUK
8LfOVUhXDVpjyCZapv2iuVHjNtTarsfHd5FSR8zICnyXEQGGkGxGpFGRMHSVNGP4
tltcJoyvZCZDDNpjjWVbanZ1/Gdwh6zbC42RfarRRgwBsU++OAijvBNC/0BPvaX0
9ZaUdxIiApGRUCeZTPahDmpn
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:38 2026 by rpki-client