Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
File:                     ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft (raw, json)
Hash identifier:          SArxtIEQBiIyOBIE+nsRI9ETS16jGzJR+8JuTnW8xvQ=
Subject key identifier:   DA:22:9B:48:81:88:8C:E9:8C:DE:D9:AC:88:F0:A4:3D:A5:62:81:BA
Authority key identifier: 64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05
Certificate issuer:       /CN=A911DF56/serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
Manifest number:          AA
Signing time:             Fri 29 May 2026 07:01:06 +0000
Manifest this update:     Fri 29 May 2026 07:01:05 +0000
Manifest next update:     Fri 05 Jun 2026 07:01:05 +0000
Files and hashes:         1: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl (hash: 7hkA/HiJsFh+b9OrzOEo9n0HbxGAM34wo4y9/fJjowk=)
                          2: D24B5EDE93C911F09C542E6EC4F9AE02.roa (hash: HbcBbHHRKIss/B/Saaqgatr0k/NTmyc24yxnTCgjTfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl
                          rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Jun 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DF56, serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405
        Validity
            Not Before: May 29 07:01:05 2026 GMT
            Not After : Jun  5 07:01:05 2026 GMT
        Subject: CN=6a1939b1-d744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:1f:08:ba:c8:70:c1:17:55:2c:6e:ba:83:
                    c4:3c:dc:f6:8a:7f:ae:34:a6:cc:59:b9:3a:e5:cb:
                    5c:3c:a5:e0:78:6f:1b:d4:81:20:19:f6:52:60:8f:
                    33:dd:a1:8a:52:75:63:ed:75:27:24:33:f7:23:57:
                    e4:c7:8c:be:86:3c:f1:1a:82:0b:71:1c:00:7e:01:
                    7c:c4:f4:fa:c1:ec:9d:09:c8:f0:00:b1:c6:d1:af:
                    4d:ff:7d:8b:0d:47:60:5e:f5:6d:7a:05:da:9c:27:
                    33:86:09:6b:6b:05:64:b5:66:c0:6e:f4:08:f8:c0:
                    e9:e4:91:8a:3c:a3:29:40:54:7b:f0:a2:7f:99:ce:
                    34:3d:82:c0:47:54:0c:0d:4b:f2:98:32:7c:de:b8:
                    dc:4c:fb:a6:fe:d6:e2:84:dd:01:ca:8a:5c:48:e5:
                    1e:7f:29:c7:7a:49:b2:86:a3:4b:78:70:6c:b7:70:
                    fb:9b:30:20:78:ef:18:e1:76:27:44:cb:58:f9:35:
                    16:cc:81:d3:ad:3e:88:e3:83:9b:81:44:c2:48:e1:
                    53:8e:e7:1e:f6:df:26:c1:fe:78:97:d0:9c:22:3e:
                    87:dc:42:f6:d7:91:88:ee:40:af:84:ba:fe:72:46:
                    58:55:11:bb:e2:96:11:e1:94:5d:48:f7:9c:ad:3a:
                    14:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:22:9B:48:81:88:8C:E9:8C:DE:D9:AC:88:F0:A4:3D:A5:62:81:BA
            X509v3 Authority Key Identifier:
                keyid:64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:35:fb:af:29:de:18:21:52:6f:7b:9d:2f:6e:bf:4a:b1:6e:
         38:a0:e6:09:d0:92:23:c5:dd:ef:3f:cd:a3:a1:a7:4d:a0:66:
         23:a0:e5:e6:09:9c:59:ef:ef:4a:1d:fc:8f:96:cc:b1:b1:5c:
         5b:4c:34:17:38:e4:e2:8a:14:b5:08:e0:9a:0b:27:1a:71:a8:
         1c:1f:18:5b:0f:b0:56:09:65:79:18:a9:b3:0b:d6:8d:3b:d2:
         7f:5b:9e:c9:fa:a6:7a:2d:bf:3c:3d:b4:e1:ae:a6:db:f2:64:
         9a:fa:8f:cf:4a:cf:87:f7:bd:03:aa:a6:47:2c:5a:7f:95:6e:
         50:13:27:9b:54:7f:0d:ea:dd:0d:78:ce:0e:07:ec:01:3f:e0:
         a4:04:87:a2:35:0b:9c:b0:28:e7:68:6a:cc:c2:17:62:73:fc:
         63:d3:6b:87:bf:5d:e5:53:6a:56:d0:f2:e7:0a:32:c3:9c:fb:
         59:50:3a:1d:41:a6:7c:43:7d:a2:0a:4d:a2:34:d5:df:49:0d:
         04:30:23:a6:80:27:33:b0:d5:59:5a:0f:93:a9:e5:19:b9:1c:
         d6:0c:0e:a0:0e:91:81:22:e6:5a:f8:4a:ba:d6:66:ee:81:6f:
         60:5d:7c:7c:ae:7e:c3:2a:f5:29:21:b8:86:1a:74:30:4a:ed:
         58:88:5b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 04:45:06 2026 by rpki-client