Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
File:                     Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json)
Hash identifier:          qQ1kRx+s7LpKOsO6PdZF6SizJtYOPgouxDIvVP7XKwM=
Subject key identifier:   D7:22:33:20:2D:A2:28:57:FB:6F:DF:A8:B8:84:27:33:F4:54:59:BE
Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
Certificate issuer:       /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Certificate serial:       0D23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
Manifest number:          0D14
Signing time:             Mon 22 Jun 2026 18:10:20 +0000
Manifest this update:     Mon 22 Jun 2026 18:10:20 +0000
Manifest next update:     Mon 29 Jun 2026 18:10:20 +0000
Files and hashes:         1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: n5Crl8Q/F2EUBw/b0e1wMGOVnBUT/h/OS2w1XdvNPJs=)
                          2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: mfe6dh8HV+B3Izq2cj3w4opPN3aJ9/HVDtDRjSUh3Hs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
                          rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3363 (0xd23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
        Validity
            Not Before: Jun 22 18:10:20 2026 GMT
            Not After : Jun 29 18:10:20 2026 GMT
        Subject: CN=6a397a8c-76ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:ea:6e:6d:7e:45:23:9e:3f:49:3b:1c:02:
                    d2:83:fb:e3:aa:a2:f5:68:6d:b9:50:3f:d9:e7:6d:
                    d8:74:8f:94:6c:4f:ac:6a:56:f8:3f:a6:8b:6d:c9:
                    ff:75:b2:1f:5b:fc:ac:1a:dc:7c:93:20:88:ff:85:
                    5e:74:1d:d3:fa:c5:2b:d3:32:be:61:81:aa:e0:69:
                    76:47:4a:9c:89:f7:76:8f:3a:c2:8a:28:62:73:5c:
                    48:83:77:81:a3:15:ff:45:21:14:bd:9c:e6:9b:94:
                    76:2e:5b:8c:3f:90:9e:b0:e1:dc:ca:1a:45:68:44:
                    0f:36:18:8f:1e:42:d6:c9:92:3d:38:54:83:48:c6:
                    aa:d1:02:78:6b:60:d7:fc:a3:92:d3:07:fa:91:bc:
                    22:af:fb:3e:06:52:3b:9d:7e:69:41:55:08:43:fd:
                    25:5f:70:39:f9:cd:60:eb:3b:00:be:38:22:6f:a9:
                    fc:eb:97:72:00:f0:d2:ad:7b:cf:9c:c4:14:92:bc:
                    f2:28:59:25:2b:ff:a8:0a:07:29:90:bf:de:a9:fc:
                    5c:20:a5:ae:4f:72:60:5c:1f:b0:60:98:00:f8:7c:
                    d2:02:29:80:fe:a8:30:9c:74:08:20:4c:61:10:66:
                    b5:2b:25:22:e8:4d:a9:cb:16:fa:62:80:fc:e5:9b:
                    da:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:22:33:20:2D:A2:28:57:FB:6F:DF:A8:B8:84:27:33:F4:54:59:BE
            X509v3 Authority Key Identifier:
                keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:98:bf:35:e7:d6:77:20:46:68:01:7c:de:24:d2:16:c4:99:
         4d:6c:6b:f4:f9:01:69:27:92:8e:dc:07:f9:5a:e6:3d:14:5f:
         1b:dd:f1:a6:03:da:b1:d5:46:ba:af:48:63:ac:ce:ce:34:96:
         68:cc:71:4f:81:58:90:76:a9:34:4a:5c:d8:44:0c:09:54:e6:
         dc:34:40:5d:52:9c:d8:dc:e2:40:bc:1c:36:16:d4:5b:ae:9d:
         7f:c8:ff:f2:fd:01:76:8f:31:40:bf:ea:a6:dd:55:a6:12:ab:
         15:17:a8:10:f1:f1:b8:ee:af:93:b9:22:8e:40:e3:6f:06:3e:
         37:e5:2d:6f:ea:cb:d3:60:69:0b:45:fc:93:c4:4c:15:73:f5:
         6d:26:f7:0d:3d:61:ae:68:5d:c0:06:3e:76:06:8a:05:43:7a:
         f5:34:93:d9:8e:07:f9:ff:09:ef:42:c9:c0:6f:20:65:80:db:
         99:c8:a1:94:0a:56:ca:28:a1:ae:52:4f:54:81:c7:36:fb:03:
         2c:b4:96:f9:d0:80:96:76:7b:3f:e8:0c:2d:e4:b9:13:20:c2:
         cc:f6:42:f2:72:55:ad:62:d2:4c:19:f5:38:06:07:ba:2b:02:
         41:db:19:52:9a:ab:fb:be:a8:28:26:6b:fd:f7:27:56:e1:ea:
         f8:c6:12:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:07 2026 by rpki-client