Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
File:                     ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json)
Hash identifier:          DY/5mvADfMLVr4rTwQw6j9AElnzTB/x0uCNIMUYbAgM=
Subject key identifier:   11:A9:C2:87:78:E8:2E:34:11:FA:85:1E:14:D4:A7:49:FB:B9:7A:A2
Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA
Certificate issuer:       /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
Manifest number:          016D
Signing time:             Fri 05 Jun 2026 05:04:23 +0000
Manifest this update:     Fri 05 Jun 2026 05:04:23 +0000
Manifest next update:     Fri 12 Jun 2026 05:04:23 +0000
Files and hashes:         1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: vBDiwRdvJiyp86lImHNoN8jqwg9Pkh4eSisUADyelx8=)
                          2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: KxQFpzpoosNuGePL0OCDu0Wnx4bnznIe59MLAgWCeJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl
                          rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 05:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA
        Validity
            Not Before: Jun  5 05:04:23 2026 GMT
            Not After : Jun 12 05:04:23 2026 GMT
        Subject: CN=6a2258d7-0c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:49:1b:6c:63:c3:05:d9:0f:c1:46:b8:d7:
                    c7:de:ff:f0:e4:bc:15:cf:e5:88:6b:37:41:b6:c7:
                    db:50:d3:1f:c0:b0:07:eb:c3:54:98:cd:ea:e2:81:
                    a5:78:7b:9b:5e:86:01:cf:94:04:59:ab:c8:73:03:
                    bc:a5:81:9b:cf:b7:b6:4b:2c:52:28:fe:77:72:98:
                    d8:5c:7f:45:8b:c9:04:72:3d:fe:5c:45:20:ef:82:
                    c9:74:79:a8:4c:d9:89:2e:08:41:50:2d:48:7e:8d:
                    e9:3d:be:cd:3d:32:ac:c3:36:1e:4a:e3:bb:dd:44:
                    82:a5:c7:9d:b3:aa:44:75:92:d2:38:9a:79:76:4f:
                    29:33:ca:8e:67:34:7e:27:be:8f:4e:ae:31:0a:1c:
                    fe:75:43:b9:96:f2:7e:15:0e:a6:5b:9e:69:e9:ad:
                    71:25:83:e6:14:d9:01:55:86:4d:e5:fa:09:0e:3c:
                    72:db:08:6e:46:c6:4c:01:0c:5e:0e:af:a6:a7:bb:
                    6a:6d:6d:e5:c4:9a:35:47:15:3a:cb:b3:85:b6:1b:
                    8f:56:34:6b:59:c4:dc:c4:a2:86:5d:26:ab:e2:1a:
                    50:84:4f:66:ba:c2:7e:4c:4e:88:99:00:1e:72:a4:
                    5d:b3:bc:f7:3f:e3:f6:84:7c:8d:02:75:59:b4:ee:
                    09:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A9:C2:87:78:E8:2E:34:11:FA:85:1E:14:D4:A7:49:FB:B9:7A:A2
            X509v3 Authority Key Identifier:
                keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:20:21:1c:75:3a:7e:be:80:9f:74:db:c6:49:7d:30:1f:6e:
         19:03:c6:d4:e7:0e:c4:6b:1b:8b:14:33:6b:39:c4:81:ab:b8:
         20:b5:1c:68:ba:c0:a4:a7:7c:9b:dd:c6:22:81:51:8c:36:0a:
         5d:d3:74:17:9e:ed:7f:ef:ed:7e:27:d8:00:bd:17:d7:4c:0e:
         dc:0e:bb:b7:23:7d:f5:a2:9e:4d:5d:c5:c6:4a:ba:3b:f3:1d:
         0e:28:7d:af:b2:51:ff:6c:a5:21:bb:6f:58:ee:94:74:4e:80:
         57:b9:4d:5d:06:c2:e5:a2:18:87:28:bf:df:97:85:8c:69:fc:
         b6:c4:ed:96:91:94:61:46:3c:f0:59:b7:60:74:3c:a0:64:46:
         44:b2:d2:2d:54:d2:12:ce:e4:7f:ff:cd:b7:d9:3d:05:48:bf:
         d3:0b:0a:c4:a5:d7:45:ff:c2:af:2d:92:91:61:81:f0:fe:c3:
         9f:2e:60:68:fa:a4:f2:6d:b0:69:e9:f3:6d:5e:d4:ec:59:0d:
         cc:4f:64:43:da:b6:bf:5b:bc:3c:b0:ff:0d:e1:be:50:09:1e:
         be:93:05:51:76:6a:ca:57:a8:f3:5e:2c:e3:2e:47:a1:8e:85:
         ee:56:4a:05:17:09:1f:8a:38:ed:60:c9:0b:2c:f4:0f:7e:bc:
         74:48:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:30:24 2026 by rpki-client