Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
File:                     zURUsk4_99x1y76Rm92nnEe5Xqc.mft (raw, json)
Hash identifier:          F3xCemvND/Lm2oHk5IoGjWYfhowZ2qQwvovqDXKHKCA=
Subject key identifier:   54:A8:CB:04:72:5F:14:83:86:E1:F9:FE:76:33:C4:92:BF:32:CF:7D
Authority key identifier: CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7
Certificate issuer:       /CN=A9172999/serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
Manifest number:          13
Signing time:             Thu 11 Jun 2026 03:04:43 +0000
Manifest this update:     Thu 11 Jun 2026 03:04:43 +0000
Manifest next update:     Thu 18 Jun 2026 03:04:43 +0000
Files and hashes:         1: zURUsk4_99x1y76Rm92nnEe5Xqc.crl (hash: P0eblQeBXrdLfIgcoEQyoGy6ipT7t5mdTDhwa9URadA=)
                          2: A53F1E96647311F1BC2A35D47947A888.roa (hash: aWkLi47uIb9GIJOKXHkRTH7Cyo2StRxOnkwZBq2MqlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl
                          rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172999, serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7
        Validity
            Not Before: Jun 11 03:04:43 2026 GMT
            Not After : Jun 18 03:04:43 2026 GMT
        Subject: CN=6a2a25cb-cccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:64:58:b1:61:58:ad:ec:c5:ec:34:1d:26:99:
                    5e:d4:e9:07:8e:f0:32:2b:2d:e6:68:8c:11:e3:79:
                    ce:c0:15:65:8f:18:47:12:a6:5c:b6:8f:46:7a:2f:
                    f7:d9:fd:c3:91:f5:d6:fc:77:e2:18:95:f5:a0:72:
                    ab:94:e9:c7:a0:3f:27:dc:67:69:61:97:77:07:cd:
                    3d:1e:dd:d3:cd:17:22:1c:11:74:7f:44:42:25:08:
                    91:ec:03:e5:a1:20:e7:50:ab:66:27:67:58:5e:cc:
                    89:87:4b:cd:7d:b1:77:75:0e:3c:60:95:35:7e:67:
                    42:4c:34:9d:0a:15:fa:3b:56:56:a9:b8:20:aa:78:
                    16:1f:5b:85:54:8b:30:7c:60:50:0b:1e:87:47:8c:
                    af:62:17:28:17:97:71:0e:f5:81:12:eb:6a:cd:e9:
                    74:9d:b3:26:73:06:ad:08:cc:a0:f3:92:a0:3c:05:
                    da:7e:52:09:b0:8d:02:ad:b8:57:6e:0e:df:8b:cd:
                    9e:a4:ae:5c:47:cd:ae:d4:82:77:86:bd:5f:cc:39:
                    64:79:a7:17:bb:5f:42:11:29:51:d5:d1:c9:2f:4b:
                    e6:30:82:75:cf:80:ff:2c:e2:ed:a8:51:ed:bc:49:
                    ff:6e:8a:3e:97:e9:95:f2:d5:d7:d3:0e:35:cb:da:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A8:CB:04:72:5F:14:83:86:E1:F9:FE:76:33:C4:92:BF:32:CF:7D
            X509v3 Authority Key Identifier:
                keyid:CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:06:e3:fe:a8:04:88:84:7f:f0:07:5f:7d:52:29:95:38:2e:
         41:f4:c7:4d:df:91:79:5f:50:d4:bd:a7:19:2b:77:20:41:22:
         2d:ad:5b:a2:ea:52:d3:24:f2:53:62:6e:95:f9:e9:e7:b6:87:
         4d:28:cc:3b:bf:30:64:91:0c:d1:88:53:00:af:43:1d:75:43:
         d7:5f:35:f9:ad:49:20:62:3d:8d:94:95:e4:60:a5:af:12:26:
         e1:4f:b4:01:e9:d5:03:e6:97:5c:cd:48:03:ce:4f:82:06:4e:
         b0:b3:cf:b3:c7:29:3f:0c:bf:79:2f:27:cf:5e:21:64:d2:c5:
         86:20:aa:92:a8:87:de:c7:14:46:6d:8f:2a:92:29:ad:e3:74:
         d4:c2:4f:36:3c:63:63:a8:6d:ce:d4:b3:b8:0f:ac:b8:18:75:
         ee:b1:1a:31:30:1b:b2:a5:31:0c:59:b3:0b:26:0b:c0:f9:cd:
         a2:98:47:da:0c:a2:df:d8:f6:5a:c7:87:5e:f2:63:72:66:16:
         c0:ca:a3:f7:8d:0d:f1:d5:80:f5:f5:ed:6f:a4:f2:18:26:cd:
         a4:1e:ed:5a:51:1e:44:68:b4:09:b8:d5:b0:05:a9:38:85:7f:
         19:c8:70:61:de:4e:e3:87:0b:e4:dd:c3:8c:eb:dc:96:36:f0:
         ee:a7:70:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:28:30 2026 by rpki-client