Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
File:                     zcExhQol8Mzfybm5zI7mTDr6bQg.mft (raw, json)
Hash identifier:          UvbELuAaaaejtBRcEvroGmXmrUnjPzlXd8cQI1Ih5nI=
Subject key identifier:   6A:1C:7D:C6:39:59:CB:1C:EA:F8:9E:6A:FB:EC:C1:92:8A:9C:64:F1
Authority key identifier: CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08
Certificate issuer:       /CN=A915B358/serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
Manifest number:          1E
Signing time:             Mon 01 Jun 2026 09:08:46 +0000
Manifest this update:     Mon 01 Jun 2026 09:08:46 +0000
Manifest next update:     Mon 08 Jun 2026 09:08:46 +0000
Files and hashes:         1: zcExhQol8Mzfybm5zI7mTDr6bQg.crl (hash: BZgoxhQwlpFKw9T7hA30NGXhJ6dmiaRswjimQbulOWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl
                          rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B358, serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08
        Validity
            Not Before: Jun  1 09:08:46 2026 GMT
            Not After : Jun  8 09:08:46 2026 GMT
        Subject: CN=6a1d4c1e-efae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a2:09:50:ef:88:a5:14:44:8b:56:cf:5c:1e:
                    67:db:99:fc:8c:12:b9:22:a7:a7:1a:f7:5c:22:15:
                    6a:f0:67:fb:b5:b9:cb:e7:93:a8:7c:ca:89:a7:a4:
                    68:4d:da:9d:1a:2e:79:ac:1a:9b:61:4b:49:1f:16:
                    5e:da:27:92:15:1c:5b:af:58:22:9a:a3:76:34:c2:
                    cb:f5:65:cb:4e:df:d5:73:a9:96:fa:d6:93:23:4d:
                    15:83:3b:0f:2b:fa:3e:32:07:82:1b:09:e0:66:54:
                    08:a3:b3:2e:63:ba:6b:8b:0f:43:c9:50:5f:ae:46:
                    08:a6:36:c0:5c:11:ea:22:62:f3:2c:bc:e2:b6:a0:
                    f9:5d:82:35:27:99:1c:8f:0b:f2:7e:d7:1c:ce:43:
                    f8:d5:7d:1a:9d:53:d4:ff:c6:42:11:b3:25:7a:bc:
                    8e:ac:15:d0:64:55:2f:ad:f1:0e:23:92:6b:1b:1b:
                    08:91:4a:64:cc:b4:bb:65:dc:ff:bf:d6:83:f7:d1:
                    da:c4:5d:09:5c:c7:7e:86:ed:17:6c:65:57:30:d1:
                    3a:26:9e:92:ac:5f:98:70:c8:b4:d3:17:3c:0c:ce:
                    84:bf:6a:0e:0f:e1:d5:91:74:24:7c:c7:63:28:d9:
                    3a:ab:96:a3:c5:ee:31:98:f9:c5:f5:3a:63:60:87:
                    9d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1C:7D:C6:39:59:CB:1C:EA:F8:9E:6A:FB:EC:C1:92:8A:9C:64:F1
            X509v3 Authority Key Identifier:
                keyid:CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:79:ea:2c:bf:ad:94:1e:f5:97:ba:be:98:69:8e:ec:90:5a:
         87:ab:dc:2e:13:4b:98:34:94:e5:b2:91:bd:cb:43:6f:d9:ee:
         51:98:13:86:82:a7:11:6c:fa:4e:bc:ec:f9:31:5f:e6:87:45:
         a4:82:b8:50:18:66:29:32:53:e1:a8:6c:18:a2:11:e9:79:3a:
         06:92:c7:af:f1:25:74:44:ce:5c:f4:22:9a:0a:30:85:a9:f4:
         68:c5:ff:5f:cb:a4:90:dc:e1:a4:e4:4d:57:7b:e2:fe:2e:14:
         25:c7:d6:d7:b0:a4:33:0c:15:e1:81:dd:b7:fe:a7:63:1d:b6:
         e6:d9:38:f2:80:f0:b0:33:fe:d0:4a:ec:a6:cc:80:d6:e6:bb:
         1f:3a:0d:32:9f:48:e3:87:21:35:9f:34:c3:ce:c8:75:21:bf:
         e1:46:53:d8:1b:3e:ab:01:d1:bd:6f:d3:bd:d2:72:d1:1e:fe:
         94:c9:b1:e8:60:19:5f:ea:fc:c9:e8:06:07:ff:9a:a1:cf:a4:
         f3:65:5f:41:f9:a4:81:ce:83:ff:60:e6:8a:c9:80:17:2e:24:
         2c:35:c3:c0:af:bd:b9:b2:e6:56:c9:ef:a8:fa:b2:bf:b7:ef:
         f5:32:ab:e0:12:82:4b:ca:f6:d4:ee:c2:06:71:de:06:46:9d:
         ed:74:5d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:49 2026 by rpki-client