Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
File:                     z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft (raw, json)
Hash identifier:          oqoQEB8qv3WHIZUCIknRjMAagvNqVtjVSs4LaylOWBU=
Subject key identifier:   C9:FD:A8:CA:D6:A2:7F:98:85:32:5F:6B:78:72:B9:82:A5:FC:9F:32
Authority key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97
Certificate issuer:       /CN=A913CE18/serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
Manifest number:          64
Signing time:             Mon 01 Jun 2026 08:45:38 +0000
Manifest this update:     Mon 01 Jun 2026 08:45:37 +0000
Manifest next update:     Mon 08 Jun 2026 08:45:37 +0000
Files and hashes:         1: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl (hash: OEHm70W/J8AMvl5mbwsR8xgZO5+6xnjQ+J3lfeDqaiA=)
                          2: 66FA3E10C68311F0A13F9748C4F9AE02.roa (hash: qhmDYrXSka0BnnAzbzb+vh6r8WiWcCMdpJjXHDEOqUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl
                          rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
        Validity
            Not Before: Jun  1 08:45:37 2026 GMT
            Not After : Jun  8 08:45:37 2026 GMT
        Subject: CN=6a1d46b2-ca37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:ba:55:bb:aa:2e:e0:26:bf:05:3d:83:13:
                    fe:9a:31:1e:17:40:d8:d9:f4:5c:38:25:05:f1:69:
                    89:65:f4:c0:59:92:6e:a0:89:d2:c0:47:ae:4e:8a:
                    65:76:bd:52:dc:0e:0c:04:f0:89:0a:fe:36:a4:83:
                    fc:f5:45:f1:33:70:61:79:16:0a:88:e4:67:7b:c2:
                    77:8f:fb:4c:10:4c:19:a2:77:7d:bf:db:a8:22:c2:
                    68:25:b3:f8:04:01:df:20:03:80:fe:f8:b1:5d:56:
                    78:11:55:1a:17:63:ce:ad:df:54:c6:19:76:6d:d4:
                    00:67:e5:bf:a5:36:5c:10:09:df:59:4c:6d:50:70:
                    7f:27:ee:36:a5:f1:3f:5c:7a:69:e8:b8:c6:89:b2:
                    2f:39:2f:8e:86:94:be:78:f7:a7:1c:a4:d0:a3:9a:
                    46:d8:12:0e:ba:1e:b0:ee:fd:fb:89:75:b3:f6:a6:
                    a5:3c:1b:df:8b:a2:59:99:00:bf:79:7b:9a:e0:d4:
                    6a:9c:4e:56:6c:b8:e7:da:d7:5c:b3:21:d6:06:78:
                    59:d4:40:dc:26:fe:0b:76:f0:77:46:1d:79:db:44:
                    3c:31:06:88:81:b1:b5:46:c8:83:c0:d2:16:45:54:
                    c7:7a:1b:80:74:01:1c:b5:2d:4a:41:39:9e:bd:28:
                    ad:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FD:A8:CA:D6:A2:7F:98:85:32:5F:6B:78:72:B9:82:A5:FC:9F:32
            X509v3 Authority Key Identifier:
                keyid:CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e1:bf:13:fd:20:6d:da:27:1d:8d:5e:97:28:9d:13:73:99:
         68:ac:92:b3:80:49:47:54:1a:06:d8:75:5a:0b:c0:2b:8d:51:
         75:47:8f:fd:03:5a:64:44:57:32:e6:a6:7b:25:b4:16:a6:3a:
         09:6c:55:52:15:25:53:d4:a3:5b:00:a1:7b:63:bd:8e:ce:91:
         75:34:47:74:c0:12:7e:89:ad:50:a1:9c:09:cc:23:f0:f1:dc:
         6a:9d:41:5a:2e:d7:65:19:13:8a:c3:7a:e7:af:a0:35:da:3c:
         c4:56:bc:41:72:2d:57:87:44:68:90:10:d3:60:25:79:e2:f3:
         87:82:23:0f:5c:ef:08:7e:84:b8:d6:76:a5:09:1f:8b:ce:38:
         51:c7:ca:a7:18:eb:db:af:c2:3e:4a:f8:5e:ca:08:19:49:1f:
         1d:43:c5:69:05:ed:6e:53:f0:e0:92:bf:e6:a7:39:34:cd:85:
         8a:27:cd:8a:31:0e:bd:6b:d6:14:69:e8:f0:57:23:c9:aa:57:
         81:d2:71:51:dd:e6:ae:e1:03:e4:c0:f1:7d:6c:48:a2:e8:3b:
         3c:b9:f3:73:24:f7:df:81:b7:5b:3f:92:ae:75:ff:2d:11:b7:
         8b:52:e3:0b:93:6c:be:af:f4:d1:e7:c0:ac:01:a2:3b:dd:a9:
         08:b8:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:02 2026 by rpki-client