Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
File:                     ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft (raw, json)
Hash identifier:          QIMtOsveBamUk9cIV1c/ozgbKzdHr7GO0ARDxj2cUac=
Subject key identifier:   1C:47:1D:BC:76:3E:B9:A5:5C:93:96:FB:A2:BD:8F:A0:38:DD:D9:98
Authority key identifier: 66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77
Certificate issuer:       /CN=A9129738/serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
Manifest number:          3D
Signing time:             Tue 19 May 2026 08:30:05 +0000
Manifest this update:     Tue 19 May 2026 08:30:04 +0000
Manifest next update:     Tue 26 May 2026 08:30:04 +0000
Files and hashes:         1: ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl (hash: aBU7oY3mJ67J6QoFH5ECL+HzTHdeRh6jpYw0l2CiiCI=)
                          2: FF37A9C6067311F19CC2DF5A3C3D8C67.roa (hash: L00fkvDAp1HW2g8z2VX9l/pSUD1IBVKXFZoC6l822Do=)
                          3: 6BBEB632135F11F18A7710FA2D3D8C67.roa (hash: 6EX3EMDbsuc9zc5WzcOw4eX2IMHRRIrcRojW8W0oknY=)
                          4: FFB68BF6067311F19CC2DF5A3C3D8C67.roa (hash: k9kaJXO8PQNyQBahywqQxP62KA454/soqOWb5claBqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl
                          rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129738, serialNumber=66654E012039326E13D3CD9EF58DA9EF07772277
        Validity
            Not Before: May 19 08:30:04 2026 GMT
            Not After : May 26 08:30:04 2026 GMT
        Subject: CN=6a0c1f8c-5f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:af:0e:50:67:31:a0:35:da:fe:ef:f7:73:
                    40:b9:9d:01:13:1d:b8:dd:77:e4:53:a1:5b:22:48:
                    61:05:cc:81:d5:c6:64:45:94:05:ce:8c:0f:ba:53:
                    3a:9e:3e:2e:70:6c:1b:a3:b5:50:95:19:cb:d9:85:
                    64:d1:14:0d:b3:97:dd:b1:f2:ed:aa:13:1e:3b:be:
                    75:90:65:70:68:4e:de:24:16:ad:79:92:d9:ff:bd:
                    54:99:56:85:30:04:dc:62:dd:2a:d0:6e:a3:21:65:
                    80:49:30:07:50:85:b4:89:a4:41:75:c9:ef:ca:e9:
                    71:9f:98:17:19:d3:91:e9:1a:62:06:e0:a8:2f:ae:
                    53:b2:c2:52:9f:ba:16:77:ec:da:9b:cb:4d:9b:05:
                    72:b0:28:ba:57:38:da:4e:7f:25:2b:b0:b9:42:15:
                    db:7a:67:1b:36:ef:e7:8e:fd:b8:0b:9a:72:79:a7:
                    8f:63:15:64:25:e7:f3:ff:44:08:84:d7:dc:5f:0e:
                    c7:07:9f:70:0f:c1:91:0e:4a:12:44:d4:d6:bd:81:
                    98:96:82:be:58:a8:03:85:63:0b:a3:64:ea:cb:44:
                    9b:4e:10:c7:0c:7c:30:be:75:e1:59:c1:a4:46:87:
                    73:a1:4c:c6:da:1d:05:be:9c:4c:2d:e2:56:fc:dc:
                    05:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:47:1D:BC:76:3E:B9:A5:5C:93:96:FB:A2:BD:8F:A0:38:DD:D9:98
            X509v3 Authority Key Identifier:
                keyid:66:65:4E:01:20:39:32:6E:13:D3:CD:9E:F5:8D:A9:EF:07:77:22:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmVOASA5Mm4T082e9Y2p7wd3Inc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129738/98CC37CE067311F1A6CF330F3C3D8C67/ZmVOASA5Mm4T082e9Y2p7wd3Inc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:70:e4:3a:c4:04:b9:3f:a0:43:e2:77:ed:bf:3d:d7:b7:2f:
         8d:4b:79:df:07:45:a8:04:44:fc:68:0d:a8:e9:ed:ae:67:7c:
         96:f6:79:17:68:9f:cf:06:52:20:7f:32:e8:5e:a5:c8:75:7b:
         a2:12:60:dd:f0:2b:8a:cf:1b:38:7f:a7:07:37:0a:05:21:06:
         cb:c0:d7:27:cd:b4:56:30:3d:12:7b:09:82:41:18:36:cc:e7:
         9e:10:ee:84:59:70:16:a2:38:2d:fd:7b:5c:7c:92:4a:ae:32:
         60:7c:84:d3:bb:43:23:36:37:8e:e6:8b:29:e8:89:d4:f4:96:
         fb:20:62:f8:fc:13:4f:cc:1f:30:e6:8a:91:2a:7f:6a:82:af:
         42:0d:d7:4e:dd:92:80:a3:d3:26:aa:0f:9e:e5:f4:b5:32:7f:
         32:5e:12:6b:5a:f7:86:3a:67:78:d1:14:84:b1:36:aa:ed:c9:
         b7:8e:b5:94:d5:96:81:81:04:7f:80:8c:17:59:44:67:c6:8c:
         78:c5:5d:7d:c9:1c:f2:a2:87:18:24:cb:79:66:1c:f8:5e:66:
         ad:7f:1f:c0:74:8c:3b:b0:49:59:98:8e:8b:e5:7d:b1:3d:5b:
         d3:35:2e:fa:06:f6:af:08:bb:9d:f9:1b:5e:f0:37:f7:2c:ec:
         9b:73:8b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:21 2026 by rpki-client