Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
File:                     DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft (raw, json)
Hash identifier:          6agji3EBnYgdrmGKI/WORH7NHc7Ts4d5mnLeKM5XPzQ=
Subject key identifier:   99:B0:93:60:26:B2:9E:AB:87:5D:55:F7:4B:34:46:BA:95:59:55:7B
Authority key identifier: 0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0
Certificate issuer:       /CN=A916DD4C/serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
Manifest number:          06
Signing time:             Thu 21 May 2026 09:21:41 +0000
Manifest this update:     Thu 21 May 2026 09:21:40 +0000
Manifest next update:     Thu 28 May 2026 09:21:40 +0000
Files and hashes:         1: DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl (hash: B3W2pD3BE07vJ0kqcEtXG09RCR68anXFCaThwAh0a10=)
                          2: B542E6104F5111F19B10B1EBBC833773.roa (hash: mP6zUQytayXrN1Je1WI2oXHvaN9oSuIafOIFenUItbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl
                          rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 09:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DD4C, serialNumber=0D2FB355CBDF0D01AA05527BC47128E50BB35AB0
        Validity
            Not Before: May 21 09:21:40 2026 GMT
            Not After : May 28 09:21:40 2026 GMT
        Subject: CN=6a0ecea4-bea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:58:4f:69:23:30:5f:40:a0:ea:64:ed:52:
                    85:30:98:b9:b1:50:5c:88:96:77:24:5d:86:6b:1d:
                    0d:f5:19:c8:41:0e:90:6a:9c:1b:ab:82:a8:46:f1:
                    5a:1e:c8:05:f6:07:65:25:55:57:0a:0b:22:18:28:
                    31:62:fe:1d:70:e3:c3:73:44:22:bc:c7:39:dd:d6:
                    26:84:c2:1f:c3:91:19:e4:63:08:31:df:02:0e:4a:
                    ef:40:36:82:e5:dd:41:db:49:83:35:c7:e9:65:94:
                    10:67:48:13:eb:0a:2c:03:c2:12:fd:b0:87:41:f9:
                    dd:e1:c3:8a:cf:56:d9:04:a0:fe:80:bd:2a:4a:10:
                    69:cd:18:2e:f5:fa:b4:0a:29:8e:d4:b1:66:8d:81:
                    77:3f:5a:c4:df:a9:b2:fb:8e:48:b5:49:3f:94:60:
                    fd:34:aa:fd:b6:7d:cc:ce:3b:09:a0:cc:88:e9:13:
                    0b:73:d0:21:50:11:05:5b:d4:12:30:4f:d5:82:03:
                    b8:3a:e7:a4:32:9f:27:fe:87:d4:80:f7:fc:f8:b6:
                    eb:9f:00:06:27:98:f9:53:0d:b0:2e:ef:28:5a:31:
                    9e:8a:cf:cc:53:74:cd:8e:6e:fd:8e:f0:fa:e0:9b:
                    21:41:ac:96:d4:97:85:40:b5:93:bd:86:d7:3c:1a:
                    f6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B0:93:60:26:B2:9E:AB:87:5D:55:F7:4B:34:46:BA:95:59:55:7B
            X509v3 Authority Key Identifier:
                keyid:0D:2F:B3:55:CB:DF:0D:01:AA:05:52:7B:C4:71:28:E5:0B:B3:5A:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/E4F3556C4F5011F1B08C87E5BC833773/DS-zVcvfDQGqBVJ7xHEo5QuzWrA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ed:6e:cf:4a:62:18:cf:93:9b:a0:45:f0:7d:ed:b3:ce:1e:
         09:42:a8:c5:52:68:c3:81:c5:5b:7e:14:84:6b:e2:e3:5c:59:
         81:b3:7c:3a:00:eb:44:fb:da:bb:46:65:8a:f6:48:75:de:03:
         5a:99:54:5a:bd:c5:15:84:e0:2e:04:e3:a3:37:97:79:ac:d5:
         e7:58:40:46:0d:44:cd:c8:06:40:25:00:ac:67:0c:28:30:8c:
         3c:c5:27:b0:c2:a8:57:b0:dc:64:3b:c4:1f:00:8c:50:84:da:
         41:fb:c7:6d:67:dd:66:3b:12:f8:d0:52:65:1a:fd:ed:82:80:
         c5:2c:fb:4e:37:f7:48:e7:7b:f5:3c:df:6f:84:59:46:3a:35:
         2b:28:e9:fa:4e:0a:5d:30:a2:bc:cf:2f:17:25:1d:4b:1c:27:
         d0:3c:37:f6:97:d4:f0:2a:b3:f7:48:10:aa:7a:3b:a1:57:a5:
         05:a3:fa:dc:e9:20:2b:c6:5f:ce:6c:55:d1:cc:02:51:61:0d:
         8b:66:40:08:23:85:36:b9:07:fe:9d:8a:67:b4:a6:1e:fb:0a:
         32:9f:24:22:ca:84:2e:12:af:49:7c:bd:65:16:35:ad:a5:0e:
         ab:d1:e1:de:3d:bc:43:8b:62:22:a6:23:ac:fa:dc:bf:fc:3b:
         14:65:34:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:11:08 2026 by rpki-client