Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
File:                     zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft (raw, json)
Hash identifier:          H4n3wGoogRzJTInRUjFBS8rT8BRuzFwOjsUXmvs4dNU=
Subject key identifier:   C0:42:AC:8F:C0:4E:B1:18:AA:48:F8:F1:91:BC:DC:3F:6D:78:DA:60
Authority key identifier: CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7
Certificate issuer:       /CN=A916D4BE/serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7
Certificate serial:       04F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
Manifest number:          04F7
Signing time:             Wed 20 May 2026 23:55:35 +0000
Manifest this update:     Wed 20 May 2026 23:55:35 +0000
Manifest next update:     Wed 27 May 2026 23:55:35 +0000
Files and hashes:         1: zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl (hash: o2TjslXFwoe+I3fCj0YDXxIQ2ievsv+NUDmNal8necQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl
                          rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273 (0x4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D4BE, serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7
        Validity
            Not Before: May 20 23:55:35 2026 GMT
            Not After : May 27 23:55:35 2026 GMT
        Subject: CN=6a0e49f7-0997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:d2:4d:f2:7c:63:c5:9d:cf:5e:dd:82:be:
                    8a:d7:6f:0c:96:0d:50:ae:df:4b:0c:54:be:b9:7e:
                    6a:21:cf:3a:99:c6:94:70:19:98:62:14:01:aa:7f:
                    4b:82:b8:47:42:6e:75:37:26:9e:40:db:eb:8d:60:
                    85:30:4f:36:a1:c0:bc:6b:5b:55:34:05:82:a4:b2:
                    06:25:c4:ae:b2:20:9a:a4:f6:00:09:7c:60:38:3c:
                    57:10:30:a8:e2:10:67:f1:39:c4:e1:b8:a7:10:f7:
                    49:d1:40:d7:2b:d9:e2:20:bb:2b:82:ba:49:5e:26:
                    d4:3a:0c:2b:d1:dc:38:d8:53:82:23:d3:97:05:1c:
                    36:25:3f:1c:7d:99:ba:0d:9b:5a:d9:84:97:4d:50:
                    43:37:86:81:01:a0:33:e3:05:26:d9:d7:6b:3d:cd:
                    82:6f:f0:d0:de:83:df:b5:85:44:a3:40:cb:15:2b:
                    93:fd:9f:83:d4:3f:ff:e4:ce:bb:33:16:10:55:db:
                    0b:c6:17:04:24:0d:97:a0:15:fb:bc:8b:30:8a:cf:
                    34:f3:a3:aa:32:dd:2a:60:f8:fc:d7:e7:03:d7:a7:
                    b2:40:f5:84:35:2d:0f:ed:b1:29:f7:45:5b:13:8f:
                    02:77:b7:dc:87:89:0b:bc:4e:38:09:1e:73:31:4e:
                    29:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:42:AC:8F:C0:4E:B1:18:AA:48:F8:F1:91:BC:DC:3F:6D:78:DA:60
            X509v3 Authority Key Identifier:
                keyid:CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d5:12:55:b4:e8:be:05:70:c0:55:80:6f:9e:90:66:35:dc:
         10:c1:73:f0:70:55:b7:be:37:2d:2f:cb:e4:7f:84:29:64:e9:
         92:7e:df:0a:df:96:a6:19:9d:94:cb:e9:cd:12:a0:36:23:e9:
         11:2d:03:ce:ad:9f:0d:7b:c0:7d:70:95:a4:2e:97:2b:e2:4a:
         bc:73:fe:02:ba:6e:5c:2a:0b:84:b9:6d:9d:d1:49:95:22:c8:
         ff:0a:04:6c:5a:3e:4d:ee:44:84:03:a4:1e:70:3e:d4:40:9b:
         27:8e:3d:52:88:17:8d:22:4d:a1:0d:ef:73:10:27:6b:ae:80:
         8b:e2:57:37:97:ea:a2:9c:12:7e:94:40:22:68:d9:ca:74:c5:
         9e:5e:57:9d:ad:39:92:d2:a7:4e:fb:6a:2c:7f:ae:28:d7:e4:
         44:01:b9:29:11:15:03:a4:b3:14:7b:8e:19:48:da:2d:10:31:
         51:01:f8:61:fa:b7:61:e1:8f:dc:d0:73:42:cc:d1:ce:75:65:
         c6:4d:80:f5:42:e0:ee:3b:f2:23:5a:9f:31:28:da:67:a7:e2:
         58:10:24:1f:e0:e4:85:d3:8a:fe:66:17:cb:15:8b:9f:b8:88:
         88:da:b8:58:46:82:94:64:f3:6e:8a:7b:c3:13:4b:cb:69:8a:
         a4:a1:bb:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ0QkUxMTAvBgNVBAUTKENENDhGRUJGMjZGRTI0OUUwNTRCRkQ0NEFFOTRGQzU4
QzBFOEUwQTcwHhcNMjYwNTIwMjM1NTM1WhcNMjYwNTI3MjM1NTM1WjAYMRYwFAYD
VQQDEw02YTBlNDlmNy0wOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArAbSTfJ8Y8Wdz17dgr6K128Mlg1Qrt9LDFS+uX5qIc86mcaUcBmYYhQBqn9L
grhHQm51NyaeQNvrjWCFME82ocC8a1tVNAWCpLIGJcSusiCapPYACXxgODxXEDCo
4hBn8TnE4binEPdJ0UDXK9niILsrgrpJXibUOgwr0dw42FOCI9OXBRw2JT8cfZm6
DZta2YSXTVBDN4aBAaAz4wUm2ddrPc2Cb/DQ3oPftYVEo0DLFSuT/Z+D1D//5M67
MxYQVdsLxhcEJA2XoBX7vIswis8086OqMt0qYPj81+cD16eyQPWENS0P7bEp90Vb
E48Cd7fch4kLvE44CR5zMU4pbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBCrI/A
TrEYqkj48ZG83D9teNpgMB8GA1UdIwQYMBaAFM1I/r8m/iSeBUv9RK6U/FjA6OCn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDRCRS82QThGNzEzNjZE
NEUxMUVDOUNCOENFMEFDNEY5QUUwMi96VWotdnliLUpKNEZTXzFFcnBUOFdNRG80
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pVai12eWItSko0RlNfMUVycFQ4V01EbzRLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDRCRS82QThGNzEzNjZENEUxMUVDOUNCOENFMEFDNEY5QUUwMi96VWotdnliLUpK
NEZTXzFFcnBUOFdNRG80S2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ9USVbTovgVwwFWAb56QZjXcEMFz8HBVt743LS/L5H+EKWTpkn7fCt+Wphmd
lMvpzRKgNiPpES0Dzq2fDXvAfXCVpC6XK+JKvHP+ArpuXCoLhLltndFJlSLI/woE
bFo+Te5EhAOkHnA+1ECbJ449UogXjSJNoQ3vcxAna66Ai+JXN5fqopwSfpRAImjZ
ynTFnl5Xna05ktKnTvtqLH+uKNfkRAG5KREVA6SzFHuOGUjaLRAxUQH4Yfq3YeGP
3NBzQszRznVlxk2A9ULg7jvyI1qfMSjaZ6fiWBAkH+DkhdOK/mYXyxWLn7iIiNq4
WEaClGTzbop7wxNLy2mKpKG7ag==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:13 2026 by rpki-client