Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
File:                     ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json)
Hash identifier:          D9sVBvolWVliY/n4pdWurgBpD0YvsYyT1zGfmjcivSk=
Subject key identifier:   67:AA:9F:7A:70:D6:ED:68:E5:03:AF:12:86:42:1C:0F:BF:F1:DE:AE
Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD
Certificate issuer:       /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
Certificate serial:       0939
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
Manifest number:          0931
Signing time:             Mon 22 Jun 2026 20:15:07 +0000
Manifest this update:     Mon 22 Jun 2026 20:15:06 +0000
Manifest next update:     Mon 29 Jun 2026 20:15:06 +0000
Files and hashes:         1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: As+kp3VjZgoDkKHP0EP7g+bYKY7W6lz7ebjzFKK9+wc=)
                          2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: FnGXHW3NTkfV5VQ0kQwJy6k6mXA3xyfslsGAqppArLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl
                          rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 20:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2361 (0x939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
        Validity
            Not Before: Jun 22 20:15:06 2026 GMT
            Not After : Jun 29 20:15:06 2026 GMT
        Subject: CN=6a3997cb-9d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:1f:6e:5f:88:a9:97:f8:75:63:0f:8c:f6:
                    c1:2e:2c:ad:ce:52:68:86:ca:8f:88:80:f4:1d:1b:
                    c0:7f:eb:b9:b7:03:4d:8b:52:9a:5b:ec:d1:b7:a5:
                    40:ae:4a:45:7e:50:34:ff:7d:e3:73:e8:23:c7:9f:
                    c7:dc:b7:c8:38:ca:99:e8:ae:d7:c5:24:23:fc:43:
                    2a:b7:f4:8e:ad:6a:2b:a7:86:93:25:dd:18:e3:2e:
                    7a:d2:07:19:04:9c:ee:11:8f:a4:c8:3f:08:d5:34:
                    49:8b:07:a6:52:e9:46:65:ae:4f:45:4c:cb:54:89:
                    74:d5:59:d9:fd:25:65:ac:45:b4:67:16:18:16:c1:
                    a9:5e:41:00:04:7a:80:da:b1:a3:c0:6a:63:7e:de:
                    9f:8b:bf:2d:a1:00:5d:88:c7:5f:d2:71:b6:90:56:
                    47:32:93:1c:b9:32:e0:06:6a:7b:c5:86:8b:1a:71:
                    89:c9:27:a8:f6:d4:5c:bd:4b:5e:4e:8c:3c:83:bd:
                    74:81:8b:46:84:80:33:d8:46:2b:a2:94:db:b0:52:
                    07:30:94:51:e5:32:30:dd:f2:15:d3:21:7f:98:8e:
                    01:09:04:10:0e:08:10:c8:e1:e4:c1:85:6d:db:77:
                    68:f7:89:cc:27:bd:25:37:2d:a7:a2:3e:14:36:b7:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AA:9F:7A:70:D6:ED:68:E5:03:AF:12:86:42:1C:0F:BF:F1:DE:AE
            X509v3 Authority Key Identifier:
                keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:15:2e:0f:3c:69:2e:8d:e2:2b:be:38:52:2a:04:01:0e:0e:
         fb:7d:32:8b:9b:78:2c:dc:b7:e9:bd:9b:d9:28:20:f4:30:10:
         16:f9:7d:e7:40:d1:33:36:26:1a:68:66:fe:02:07:ed:c3:e0:
         90:1c:7e:a3:5b:da:81:ba:56:da:c5:8e:a2:9d:66:80:f7:1b:
         67:c5:8e:55:5d:fc:fc:cf:1a:28:07:d0:9c:91:c8:4d:79:83:
         fb:23:50:2d:23:e3:08:70:b6:5a:18:6e:f4:03:69:88:61:3a:
         8d:50:57:eb:e9:63:77:a7:56:1e:5c:d4:99:df:40:80:42:0f:
         85:9b:ae:83:6e:74:ee:45:a0:cd:41:bb:20:22:f6:ba:f5:93:
         0b:3e:bd:77:62:a5:20:59:0f:80:1a:16:83:4b:68:e4:8d:8b:
         5e:68:19:8a:17:b2:04:35:7f:94:5f:e7:b6:02:80:73:6a:fc:
         ad:2a:85:7b:1d:9a:2b:d8:b2:ee:f6:d8:d0:ae:e7:bc:d5:48:
         6f:af:b6:7c:46:95:6e:e1:5c:12:10:14:13:79:f1:7b:17:79:
         5b:2d:8b:dc:71:c4:03:84:8d:77:cc:36:50:cf:4d:27:41:5c:
         83:78:1a:ef:9a:48:a4:b6:10:68:e0:28:da:79:b8:d6:ce:09:
         21:08:2e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:13 2026 by rpki-client