Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
File:                     ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json)
Hash identifier:          lAK6HPg/oeT5l+GaesrVX+m8G0FAa3IZOuI9dP+gK/I=
Subject key identifier:   5C:85:EA:5D:9E:58:FD:85:6F:71:4C:7B:50:40:79:A3:7F:83:F1:16
Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71
Certificate issuer:       /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
Manifest number:          01DA
Signing time:             Tue 23 Jun 2026 03:46:40 +0000
Manifest this update:     Tue 23 Jun 2026 03:46:39 +0000
Manifest next update:     Tue 30 Jun 2026 03:46:39 +0000
Files and hashes:         1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: kPMV4/13cRK4TJrQqFAfjU0XcUWUE+8iqIqZy8VUbJo=)
                          2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: J9Q0fospq9ZatXjfck0bQd1+CpXH2kLag8vk4D7Q214=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl
                          rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 03:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
        Validity
            Not Before: Jun 23 03:46:39 2026 GMT
            Not After : Jun 30 03:46:39 2026 GMT
        Subject: CN=6a3a01a0-b2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6d:b1:77:ae:a5:05:c0:7e:80:f9:4f:3f:6d:
                    70:f1:e3:05:a2:43:54:5e:3e:54:9b:51:9d:ef:a9:
                    e9:bc:b8:a7:d0:1b:34:ad:ad:3f:90:24:6f:67:cd:
                    8a:5b:85:4a:69:95:ba:67:6a:78:9a:e9:0c:9f:b4:
                    99:66:33:54:3b:aa:ef:1b:f0:74:07:a6:71:e8:87:
                    f5:6e:74:ae:17:19:51:b1:88:4b:3f:10:ee:ac:5d:
                    55:cb:cc:ec:d8:cc:3a:fb:a9:21:4a:1a:f1:05:2b:
                    4d:b0:04:20:ac:a1:72:40:17:50:ec:dd:85:24:7e:
                    61:92:cf:80:de:74:28:6e:82:bc:c3:81:39:ff:76:
                    27:8e:55:46:23:4c:e9:d1:ee:bd:b3:40:9c:ba:6d:
                    81:f5:47:3c:a7:e0:b0:ab:2f:36:a9:ea:e0:06:d0:
                    f4:10:e2:e8:ef:d2:a4:8a:01:bb:8e:ad:11:b2:65:
                    2d:d4:a8:70:8d:b4:f1:30:9b:ac:ad:9c:47:5a:48:
                    a1:17:c0:bb:2c:1f:5d:2b:98:39:f4:81:c9:38:9c:
                    a5:94:b1:e8:09:3a:b0:ae:ca:92:2b:f1:c0:e6:0a:
                    c2:7d:af:1a:61:d1:0c:73:f7:01:1f:01:7c:c0:e9:
                    ee:02:29:b8:09:93:61:a8:a6:36:84:c8:8f:80:87:
                    bc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:85:EA:5D:9E:58:FD:85:6F:71:4C:7B:50:40:79:A3:7F:83:F1:16
            X509v3 Authority Key Identifier:
                keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:db:0b:d7:b0:97:52:d1:2d:49:4b:05:04:4e:3a:b4:63:f1:
         44:67:b3:98:76:e1:84:1d:df:96:2e:f9:99:1d:15:1d:cf:cb:
         a6:ee:44:38:87:68:af:e4:7f:4e:37:a4:6c:e3:77:7c:77:47:
         49:24:7c:8c:a7:a1:26:8d:45:a0:66:4d:c0:cf:e7:9d:b7:4f:
         40:fa:c5:2f:b5:7a:7e:5e:71:0e:c5:89:89:98:57:1d:2e:fd:
         68:70:08:58:a0:17:33:11:8a:af:49:cb:2c:49:24:d1:d5:5d:
         cd:98:aa:2d:75:ae:0f:cd:17:69:4e:75:7c:d9:a2:73:e3:19:
         3c:76:aa:17:aa:fa:ce:18:02:67:c9:34:bd:b2:2f:4b:00:99:
         fe:5f:c3:13:78:9c:24:b7:39:42:dd:44:c0:74:e1:d1:2b:40:
         59:24:40:69:14:cf:8b:b0:e5:00:1e:24:9e:19:2e:31:53:a9:
         67:e8:f2:39:1f:24:6d:75:b9:d1:dc:88:55:a7:78:fd:8f:e2:
         11:44:f5:7b:29:8d:ac:f3:49:03:dc:60:69:d0:e8:ea:3c:70:
         97:f4:07:8c:36:7f:00:61:75:f2:b2:e1:35:c1:f9:18:ca:34:
         87:6c:cd:2f:ee:51:a0:43:33:e4:11:7d:b6:f0:59:a6:3e:92:
         69:23:ae:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:50 2026 by rpki-client