Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
File:                     z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json)
Hash identifier:          rX9nxi94U1sG/nmSRkWGWvcVHWXRJFVTFvI98/VK2iA=
Subject key identifier:   02:F0:5E:D0:30:36:E0:6D:9F:CE:C9:C2:00:42:C0:42:C4:09:24:03
Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98
Certificate issuer:       /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
Certificate serial:       01B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
Manifest number:          01B4
Signing time:             Mon 01 Jun 2026 04:44:57 +0000
Manifest this update:     Mon 01 Jun 2026 04:44:57 +0000
Manifest next update:     Mon 08 Jun 2026 04:44:57 +0000
Files and hashes:         1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: ZonBod0sxv3P+o+yRCZnjkVEh0VvOaYSXGDubprrvok=)
                          2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: GLrzVbO/eZPffRoT3cGz+iLpJergigCKe+VSGEBiwVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl
                          rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98
        Validity
            Not Before: Jun  1 04:44:57 2026 GMT
            Not After : Jun  8 04:44:57 2026 GMT
        Subject: CN=6a1d0e49-df8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:af:1a:8c:cb:74:60:7e:1d:1d:42:cf:42:
                    0b:9a:d7:da:cc:ef:bd:01:39:f2:e3:6f:69:ef:a2:
                    60:60:20:09:61:b4:76:16:d8:e4:df:31:0c:c6:97:
                    d0:24:fe:7c:ee:e5:82:19:74:1b:66:cb:f5:31:53:
                    d8:3f:03:fb:ec:f6:98:8d:54:bf:fc:42:3a:81:c3:
                    6f:58:98:9f:35:71:dd:3f:98:a6:0e:7f:28:d8:06:
                    5a:4a:55:8d:7a:d7:db:26:97:8a:e8:a2:76:35:8f:
                    b9:0a:d5:dc:9b:69:9a:3f:d7:6d:65:c6:fa:39:f9:
                    3f:48:99:ea:84:b7:65:26:c3:dd:9b:ed:c4:f3:f6:
                    a2:16:fd:79:44:4a:d2:c2:8a:5b:82:66:0c:2b:5c:
                    19:64:8b:7e:96:d6:03:33:18:93:55:2d:8d:3b:cf:
                    92:b8:3c:d7:7a:b5:4c:16:61:f2:af:db:c8:22:90:
                    2d:5f:d9:db:32:41:ab:49:e7:f8:f8:13:60:e6:5b:
                    9a:78:f7:19:41:16:bd:b9:f5:fc:23:58:79:d4:42:
                    6a:c1:9b:73:57:82:7b:34:35:60:dd:c4:2e:8e:8a:
                    a7:ff:e6:9c:1a:7b:2a:1d:c3:c2:24:26:cb:17:51:
                    25:d2:ba:2f:6a:b7:2a:98:ec:f2:e0:18:77:58:f1:
                    44:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F0:5E:D0:30:36:E0:6D:9F:CE:C9:C2:00:42:C0:42:C4:09:24:03
            X509v3 Authority Key Identifier:
                keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:48:c4:8f:9e:4d:4b:15:dc:52:d6:ed:cb:b0:f5:02:b0:81:
         af:82:de:f0:d4:6c:5b:b5:6d:fc:08:32:51:95:17:df:b9:1a:
         ab:5d:2e:96:a3:45:34:9b:08:1e:e7:df:d5:f8:10:c6:49:d3:
         a1:4b:10:bb:47:93:5c:8c:e2:af:a4:e8:bd:7f:92:9e:6c:cd:
         3c:85:0d:fb:b3:bf:b3:2c:86:84:63:89:05:74:94:26:5d:89:
         71:b2:0b:d0:7a:af:04:ec:76:9a:83:64:88:20:b2:8d:34:fd:
         1f:19:6b:d9:fb:55:b8:77:3a:cb:87:11:04:e4:7d:ef:4a:95:
         8a:38:1e:36:24:3a:d8:b9:0c:1a:e7:8b:0f:5a:a1:d4:e9:5b:
         90:04:45:3a:38:eb:bd:f2:31:26:3b:cd:00:91:4d:77:50:80:
         42:96:40:3e:06:e2:79:63:75:f0:76:4f:59:7a:8e:45:36:d6:
         d5:ac:fe:69:d0:8b:b4:6d:1f:61:0d:eb:34:4d:0f:a7:64:50:
         e3:c4:a0:f8:0b:5a:48:5f:6d:56:64:67:94:0f:12:39:7d:4a:
         f0:08:7a:7b:4a:68:ad:86:3f:c5:1b:62:b3:8a:54:49:2f:35:
         cb:de:a0:d5:3b:60:55:25:be:67:39:ec:28:8b:8f:84:a4:50:
         9f:71:48:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:14:24 2026 by rpki-client