Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
File:                     ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json)
Hash identifier:          HTqhNLhSDpiVDrZ0C+WJlgWKulI9Tpqu2Zox3p3CIsg=
Subject key identifier:   78:29:79:D0:ED:73:F6:0A:7E:73:8A:52:6C:96:73:58:EA:3C:0E:FC
Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
Certificate issuer:       /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
Manifest number:          0248
Signing time:             Thu 21 May 2026 02:37:34 +0000
Manifest this update:     Thu 21 May 2026 02:37:33 +0000
Manifest next update:     Thu 28 May 2026 02:37:33 +0000
Files and hashes:         1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: y8x81ChPO7DPqe/xe5FRa+L6aiv+U/woPB2R7JfOJzk=)
                          2: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: f58bvx3dukaGpN5ndoezdAfl/VXBXL0ui+Vo9iVwwM8=)
                          3: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: UaAm3ns+UzSlENWFg3alL8LgQQM37DkVyV1vadmtNwg=)
                          4: 118AB342249511EFBF275B73C4F9AE02.roa (hash: NqwTwG+Agr5XJi4bwI9im7xWQxdq8IuBPwpMhYcCze0=)
                          5: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: tzLUCAxcW3rpxPK1kY7IUqcMJWiwQOOzumNiMYyBy+Y=)
                          6: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: B+OeWoqQTwfm38iUF7sb5sL9h1ZJ6wXXxhu4Wl/m0EM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
                          rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
        Validity
            Not Before: May 21 02:37:33 2026 GMT
            Not After : May 28 02:37:33 2026 GMT
        Subject: CN=6a0e6fee-b90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:ca:a9:e7:87:9c:07:91:cd:66:5f:81:cd:
                    77:c7:39:e5:70:bc:f6:17:ca:cb:6b:88:e3:c0:f8:
                    11:9e:9a:6d:4d:83:28:11:ca:10:6c:11:a3:09:06:
                    8a:95:1f:78:7d:75:48:1c:8b:dc:ee:9c:41:6c:6d:
                    97:2a:ee:c6:2a:17:7a:ba:89:97:58:f9:33:27:6b:
                    bc:31:99:40:ff:91:48:80:4c:89:75:67:a6:ca:11:
                    85:e3:0c:c4:da:94:bf:b4:d3:15:dc:f1:24:57:72:
                    81:ef:be:05:3e:90:be:c2:25:df:a5:79:0f:13:4d:
                    88:7e:17:51:10:01:1f:b1:62:ad:c7:55:aa:08:31:
                    f9:b2:b9:51:93:bd:fa:62:f1:f9:14:9c:51:7a:ed:
                    15:24:ab:9d:b5:b2:2d:69:ae:bd:e8:7e:8a:8b:80:
                    fa:b8:be:5f:dd:fc:0a:59:6a:f1:96:b5:6e:62:1e:
                    4a:19:0a:c0:bd:d3:c7:7a:1f:b4:e7:67:30:58:95:
                    13:d6:b5:9a:be:6c:1b:c5:ca:22:48:2f:6a:51:8c:
                    9f:e8:cf:af:0f:80:fb:76:44:49:e8:45:0b:39:74:
                    fc:89:1b:51:52:6d:14:4b:7c:59:42:c2:84:96:c9:
                    55:a4:1c:ca:bc:2a:7a:8a:5a:a0:90:a3:82:d3:bf:
                    57:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:29:79:D0:ED:73:F6:0A:7E:73:8A:52:6C:96:73:58:EA:3C:0E:FC
            X509v3 Authority Key Identifier:
                keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:1e:cf:33:fc:41:86:5f:a1:48:a2:f5:8c:41:39:1a:ca:51:
         a8:62:2d:6b:06:95:d8:c1:c7:99:64:b7:de:9d:b4:e9:7b:98:
         8d:4b:92:62:92:49:05:07:44:c7:bc:84:80:7a:3d:d1:81:9b:
         45:07:65:10:b8:0e:d8:e0:5f:39:8a:aa:10:13:68:a2:55:c7:
         78:29:fa:f6:66:f8:01:e1:b2:89:ee:14:3a:0a:63:eb:98:d8:
         86:99:30:5b:45:99:fe:f4:91:9d:5c:16:9d:c0:da:88:f6:2a:
         76:94:ec:32:a6:23:5a:78:0d:a2:40:4a:86:91:60:89:f4:b6:
         9d:b1:53:03:49:0b:1f:11:58:6c:b7:e9:21:8a:94:da:86:77:
         1d:72:67:07:5f:96:25:2a:21:1f:29:f7:8b:c2:2e:18:fa:28:
         27:e3:7b:68:d0:af:97:79:0b:53:60:aa:95:25:ed:24:a1:3d:
         1f:ba:93:c0:c3:91:a5:4e:71:c9:b3:02:da:c4:2a:f0:7e:5e:
         8e:f7:d4:b0:21:6f:40:03:85:e7:c3:8b:ee:01:6d:d2:55:77:
         ec:51:86:b0:9d:e3:80:51:0b:19:a8:58:cc:b4:3f:c1:d5:c6:
         e7:17:1a:32:18:01:6f:79:39:8c:02:e2:29:55:d3:fc:06:54:
         6f:c9:38:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:11 2026 by rpki-client