Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
File:                     ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json)
Hash identifier:          TPKXa0T+wK2HabvNdR86vnkJBqZmUXEmbLOu2r9s8h0=
Subject key identifier:   41:61:82:C3:94:35:32:CE:11:48:4B:F5:B6:15:84:85:A4:18:6E:F6
Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
Certificate issuer:       /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Certificate serial:       03F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
Manifest number:          03EA
Signing time:             Sun 21 Jun 2026 00:31:07 +0000
Manifest this update:     Sun 21 Jun 2026 00:31:06 +0000
Manifest next update:     Sun 28 Jun 2026 00:31:06 +0000
Files and hashes:         1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: RLYc6NrCtGedmUX0h4fcVT0QoXCFtuz1rf0NNe03F6s=)
                          2: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: PZXeG2z5Up6Bnr/fbTuUWxL/M8azNuvO/Wv2mvuOFVk=)
                          3: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: 06iHCsokSQ39HgOy2KJzWubeFrH/1VczqWMzLvyLOHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
                          rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Jun 2026 00:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
        Validity
            Not Before: Jun 21 00:31:06 2026 GMT
            Not After : Jun 28 00:31:06 2026 GMT
        Subject: CN=6a3730ca-01b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:94:e3:1f:db:7f:f9:cc:13:4e:ca:39:24:
                    21:1f:d0:e7:ad:c7:64:14:af:cb:6f:88:41:9b:46:
                    f7:3d:8f:f5:32:0d:f9:a2:1f:d0:59:3f:18:d3:c5:
                    6d:f1:5a:88:de:19:a7:c6:df:f4:4d:59:da:40:94:
                    0f:5d:cc:c7:cc:e7:78:7a:da:09:d1:cf:e4:39:6c:
                    77:f0:8a:16:25:a8:1a:4b:f9:56:df:88:64:04:78:
                    17:e3:f3:f9:3c:49:52:1f:5d:f0:c9:25:09:81:ff:
                    66:8e:8d:cf:04:d1:cd:c8:cd:e6:ec:be:94:c0:40:
                    5b:e9:14:bd:f6:d5:e5:07:39:96:18:ff:c0:fb:e6:
                    47:ba:e3:62:54:72:2b:7d:ed:d1:a9:6d:43:31:6c:
                    a3:79:d4:80:e7:0a:36:b8:44:ec:27:fa:94:6a:3e:
                    28:9b:c8:6c:4c:d6:6b:39:be:1b:c2:1e:90:44:f9:
                    6d:ab:1f:3a:8e:17:8e:ea:fb:7b:e9:ec:28:b3:96:
                    61:61:ba:3a:4f:7e:4d:86:15:c5:2a:3e:b9:6d:be:
                    09:7e:f4:c2:61:88:3a:aa:d5:be:ca:d5:fc:fb:d1:
                    a4:72:96:23:84:73:5d:65:2f:39:74:7e:50:7a:e4:
                    e0:5c:a4:38:d2:15:7f:f5:8f:db:ea:dd:6d:91:74:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:61:82:C3:94:35:32:CE:11:48:4B:F5:B6:15:84:85:A4:18:6E:F6
            X509v3 Authority Key Identifier:
                keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:15:11:e6:ff:ca:e9:76:ce:a8:a1:6e:9a:30:54:10:54:40:
         d7:47:ae:08:3c:6c:c9:61:02:ac:be:a7:11:b6:db:11:d0:89:
         e1:59:44:96:97:78:6d:4b:c3:0e:74:24:20:9e:f0:4f:aa:b9:
         e1:a0:59:4e:7d:7c:bd:0c:a9:5a:3a:50:07:b0:9f:b1:68:86:
         29:91:3d:b7:0b:09:3c:3c:98:df:11:d3:a4:2c:6d:b8:81:67:
         83:0d:d4:73:30:87:cc:09:2f:28:05:e3:b9:a6:c0:de:17:08:
         c3:d5:dc:2c:2a:94:58:3f:21:6a:42:d5:a7:fe:98:9a:77:d7:
         3e:6d:d5:a6:a6:28:48:60:0b:c3:83:d2:ff:c1:f0:71:34:12:
         c8:03:cf:85:13:a3:ee:ae:c8:63:1b:df:d5:98:ae:89:3f:79:
         4d:f6:bf:fd:ee:b3:8c:54:f7:df:95:a9:21:26:49:3f:da:cc:
         ad:21:92:78:af:b3:b0:40:7a:63:8f:9d:62:74:fc:bc:63:8c:
         b0:9b:6b:d8:76:34:0d:55:e9:99:60:e1:85:41:d6:de:89:56:
         03:2e:85:ba:45:1d:5e:4d:5c:75:95:18:42:80:a5:84:84:9d:
         c7:d2:d2:b1:04:9f:ab:52:b9:ad:52:0f:6b:bd:0e:56:93:98:
         47:1b:5b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 17:02:51 2026 by rpki-client