Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
File:                     ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft (raw, json)
Hash identifier:          TMjCx4EtsjTYLQPlJ9/uqHVvcIbqFbSDRCtd95MZHz0=
Subject key identifier:   F8:E0:EF:01:E8:00:80:B4:C6:44:FA:8B:E5:3C:60:CA:A1:49:FA:AC
Authority key identifier: 66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4
Certificate issuer:       /CN=A912519D/serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
Certificate serial:       0674
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
Manifest number:          066D
Signing time:             Wed 20 May 2026 22:38:06 +0000
Manifest this update:     Wed 20 May 2026 22:38:06 +0000
Manifest next update:     Wed 27 May 2026 22:38:06 +0000
Files and hashes:         1: ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl (hash: 2kBoU8rNIJ/BmJCX/EW0R6GmXVj15GQvq9PkchbQS3w=)
                          2: 10581DEAC75D11EBB00EBD1AC4F9AE02.roa (hash: 5sKr5Je6hbpFf2Q5JDk7nrFaAZ90rKYQRnu0lj3etl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl
                          rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1652 (0x674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912519D, serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4
        Validity
            Not Before: May 20 22:38:06 2026 GMT
            Not After : May 27 22:38:06 2026 GMT
        Subject: CN=6a0e37ce-7813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:24:b8:85:8f:73:33:8e:37:40:00:9a:f0:52:
                    6c:6e:ab:03:ca:10:46:71:ec:35:a1:2c:4d:8f:31:
                    5a:52:b6:7f:7e:35:b8:eb:77:da:51:b8:a7:e7:46:
                    f6:54:2f:cf:cc:09:03:02:be:02:f0:99:01:2b:5d:
                    16:bd:c2:20:4f:e6:6f:e6:39:5d:e7:84:8b:23:fc:
                    6d:c0:a0:f8:ba:f1:65:f6:1e:b6:b1:e6:53:7c:45:
                    6a:41:61:6b:50:d6:4d:37:ff:dc:c1:c7:02:e1:f5:
                    11:33:2d:00:86:2f:a0:b8:a2:45:75:fd:9f:74:0f:
                    a8:18:76:35:eb:f3:45:d5:ee:b3:b3:ae:77:17:dc:
                    c7:75:64:1d:ae:6f:5b:46:71:22:11:35:4b:91:05:
                    12:23:d1:66:90:4e:90:69:70:61:98:6b:d9:fd:f8:
                    ff:36:bc:1a:02:1d:2d:56:4a:a4:69:61:ec:b9:9f:
                    40:63:80:e8:ed:06:18:0a:dc:53:90:dd:e3:89:fa:
                    96:07:b7:75:7d:d1:3d:50:0f:90:13:e0:b2:4c:48:
                    23:6e:11:7c:c8:8f:b8:d6:ed:e7:9a:2f:66:de:29:
                    ef:da:25:fc:e3:aa:8f:99:c2:e6:6b:77:05:ff:a9:
                    25:d9:e0:8a:81:e6:74:d6:19:41:8d:50:a7:81:55:
                    e4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E0:EF:01:E8:00:80:B4:C6:44:FA:8B:E5:3C:60:CA:A1:49:FA:AC
            X509v3 Authority Key Identifier:
                keyid:66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:99:16:1a:1d:d4:e5:96:f7:b2:8c:5c:a6:d4:67:04:53:7c:
         7e:a9:e8:ed:3f:d9:d3:87:c5:6b:be:71:1b:83:74:36:0c:66:
         f9:34:a8:2f:66:b1:ed:e8:33:68:cd:dc:ab:64:f7:cf:ca:bd:
         5c:e2:f8:57:c2:b8:5b:0c:fa:56:70:40:f2:55:b0:69:76:a1:
         e9:5f:0d:3e:e1:50:0f:06:3e:42:4c:10:79:f6:cb:c9:7e:97:
         f8:eb:21:e8:e5:f1:68:2f:57:b3:fe:c6:c2:c4:91:f9:52:bb:
         fe:3d:e3:26:de:d6:c2:a9:f7:c5:ef:c9:e8:6d:84:c8:9a:54:
         53:88:a1:28:96:5d:52:eb:d5:43:88:b6:ea:22:1a:77:d0:00:
         82:8c:6f:40:6c:aa:8b:fd:43:d1:0b:50:0a:dc:22:1e:17:f3:
         e4:c6:c3:b3:27:12:7c:78:f8:fe:c3:67:36:9a:61:c9:8f:53:
         69:fd:fc:0e:87:96:c1:9d:4e:74:ae:97:c7:61:02:93:e6:5c:
         af:cd:1a:de:81:19:d4:97:4a:87:02:02:67:94:c7:29:7d:43:
         ed:12:b0:be:1c:95:c3:8f:23:7b:fb:54:81:19:8c:8b:e1:01:
         97:61:76:1a:e3:c2:4f:07:b8:6c:0d:4b:2d:10:9b:12:1e:91:
         7a:d7:fd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:06 2026 by rpki-client