Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
File:                     zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft (raw, json)
Hash identifier:          pZhNGBKLccOHksltnAXjqZArdKmyDE7eCQUz2ZWoQ38=
Subject key identifier:   AE:70:3F:85:93:79:A5:3E:28:0A:0A:E6:AA:4F:58:C4:16:FD:39:47
Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
Certificate issuer:       /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
Manifest number:          F4
Signing time:             Mon 01 Jun 2026 07:09:15 +0000
Manifest this update:     Mon 01 Jun 2026 07:09:15 +0000
Manifest next update:     Mon 08 Jun 2026 07:09:15 +0000
Files and hashes:         1: zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl (hash: i2i4NqjZtFji9BivVAgE++BbP7T+DRY7zryzP8AJquU=)
                          2: 7B2FAA3C209711F196D22F2D3A3D8C67.roa (hash: 46jInQJtabZ7v+bShiZhomvrokC8+lMJ4HP9JqEdr94=)
                          3: 37783B4E20CC11F18B0BA4B30A3D8C67.roa (hash: U3KVjwUBLUlPVHRa+0vAy5Ai0f/M4Fs7JbPDlUfLDwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
                          rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
        Validity
            Not Before: Jun  1 07:09:15 2026 GMT
            Not After : Jun  8 07:09:15 2026 GMT
        Subject: CN=6a1d301b-e43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:94:f3:07:41:b7:7e:69:4a:fc:6c:7c:00:
                    73:76:a1:90:86:74:9e:19:19:08:d5:19:55:b0:fd:
                    97:6d:44:8e:10:43:91:32:6d:78:35:16:11:4f:7e:
                    20:fc:c7:81:44:81:31:71:09:4f:75:b4:1c:77:63:
                    e9:fb:b7:f9:ea:7f:33:84:c5:dd:70:b0:8e:a8:fb:
                    76:9a:4a:57:f6:e1:3a:f9:37:c7:c5:77:ca:0a:e8:
                    3d:ae:14:ff:d7:e8:66:3e:12:87:4f:4c:ff:32:7d:
                    18:aa:5a:5a:9b:a8:61:64:ef:66:e8:04:7c:22:9f:
                    ae:60:9e:62:1f:72:df:4d:7b:8b:da:87:a4:a1:a8:
                    3e:51:40:8e:1f:53:fc:e8:39:e3:16:da:7b:a8:62:
                    e9:ad:4b:06:72:97:19:59:6d:a7:00:f2:77:1d:0e:
                    43:a9:df:0a:f0:9c:18:71:f9:87:79:50:8a:b1:a4:
                    1a:69:45:e8:ba:40:20:8c:b6:17:5d:61:e3:4a:67:
                    94:80:01:64:b4:96:ef:47:7f:e9:81:95:e1:40:a0:
                    3f:ff:e5:c2:26:b2:09:12:e6:2c:29:3d:86:6a:4b:
                    f9:35:a2:7e:2d:3a:aa:13:d2:0f:32:08:3d:44:31:
                    ca:1a:bc:92:ec:ea:06:30:63:7e:f9:33:b1:16:ea:
                    b9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:70:3F:85:93:79:A5:3E:28:0A:0A:E6:AA:4F:58:C4:16:FD:39:47
            X509v3 Authority Key Identifier:
                keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:33:69:ff:75:8a:22:1b:53:68:30:e5:86:c5:0f:fa:2e:78:
         81:8f:64:90:1c:d1:95:18:4d:55:25:13:5c:b4:e4:7a:58:92:
         81:bd:df:e4:c6:fe:5f:18:f8:12:d1:ea:d6:fb:e9:29:08:ea:
         7f:5b:1c:6b:67:24:3e:63:b9:02:2a:27:4b:40:8d:26:6e:a2:
         a6:bb:8f:20:4e:ca:b5:08:f2:72:8a:e0:bc:e2:e4:03:78:32:
         d3:88:91:d8:71:76:6f:ab:03:59:21:7b:e5:c4:2b:ee:93:70:
         6d:24:66:7d:b6:24:36:67:d1:c4:63:b7:75:f8:2f:bd:55:09:
         94:cb:2c:91:76:da:f2:97:10:c2:59:33:28:cf:fe:ee:44:d1:
         8f:89:32:49:72:ae:2b:02:5f:8f:70:19:1e:a3:2a:a8:e6:24:
         a0:1a:37:e4:2f:ae:62:81:6e:00:d7:c3:3c:4f:92:59:a6:5b:
         d5:9c:23:22:28:43:a8:1b:f6:62:c3:6d:09:d9:2e:b8:91:e0:
         5e:54:0a:1a:45:02:28:37:e5:91:35:35:86:88:77:aa:e5:98:
         d5:ad:32:db:5e:22:60:83:7d:37:3e:4d:cb:c8:03:ba:41:bd:
         a7:6b:35:82:a5:54:40:67:62:97:34:97:2d:e0:de:05:5b:a4:
         cd:79:cb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:57 2026 by rpki-client