Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
File:                     ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json)
Hash identifier:          vyGReFjyJJ4Vm1MbLu+5lYQzlUAQ1chLjxMNMkpAwuk=
Subject key identifier:   1E:98:6C:3A:5D:F8:D5:8E:56:F5:7B:8A:C9:FC:1C:0F:D8:FA:F6:6A
Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
Certificate issuer:       /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Certificate serial:       23B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
Manifest number:          23A4
Signing time:             Wed 20 May 2026 15:49:17 +0000
Manifest this update:     Wed 20 May 2026 15:49:17 +0000
Manifest next update:     Wed 27 May 2026 15:49:17 +0000
Files and hashes:         1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: aXZgSlMjJCW6G07qi8nsezlLNdA/C7VQYDu5fJ79xbE=)
                          2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: Qn2+lYGa2h6xQsCbP0A3ivL3myO3Z5q3ATYz2Fpqscc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
                          rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9141 (0x23b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
        Validity
            Not Before: May 20 15:49:17 2026 GMT
            Not After : May 27 15:49:17 2026 GMT
        Subject: CN=6a0dd7fd-f50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:e6:ba:cd:ba:b8:d3:6c:3e:48:8a:aa:f5:
                    5d:6a:f6:ae:ec:af:00:e4:1f:d1:2e:77:2f:95:4d:
                    38:a8:24:fc:2f:91:bf:be:6a:82:48:e2:f9:33:f3:
                    03:e5:09:15:55:31:01:cf:c3:13:37:ff:21:d5:96:
                    78:69:2b:a7:09:a8:de:7e:e9:88:90:52:67:3c:cf:
                    12:e9:86:fc:a8:23:c1:0f:db:4c:01:d6:ab:60:50:
                    7c:c2:8a:2b:34:d9:d8:5d:43:91:fe:1f:56:31:13:
                    17:f8:d3:22:bf:e0:b4:26:e8:ef:18:c6:8d:0d:a9:
                    e3:9b:24:02:7b:04:72:74:5a:15:7a:fe:25:5a:1c:
                    c4:45:83:7f:17:3f:af:cb:e2:04:ae:03:27:86:ec:
                    31:32:c3:1f:a6:6a:32:9b:37:0e:f6:69:03:82:45:
                    dc:ca:2e:c5:7b:e1:c7:f8:88:a1:3e:62:99:d2:eb:
                    c2:9f:02:d5:42:ee:d9:34:2e:c6:98:56:ef:4b:c7:
                    fb:c5:b5:d5:2b:92:62:5c:cc:8c:e2:47:a5:4e:c3:
                    c6:05:01:e9:1a:3e:fd:e3:10:67:70:db:61:5e:31:
                    e4:c9:bf:ee:39:59:d0:fb:b7:b1:9a:df:8e:0b:38:
                    1a:ab:cd:2d:18:c1:ce:df:3c:fa:bc:22:40:fd:1a:
                    e2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:98:6C:3A:5D:F8:D5:8E:56:F5:7B:8A:C9:FC:1C:0F:D8:FA:F6:6A
            X509v3 Authority Key Identifier:
                keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:06:82:34:6c:4d:1f:e1:ab:7f:45:db:07:69:21:4c:62:31:
         49:b6:7f:ea:82:8b:d9:88:91:fd:e3:c4:8d:6e:aa:a7:7e:47:
         10:df:24:90:0e:c4:9a:ee:b1:3b:d4:c4:48:9d:0f:e1:38:1c:
         ac:3a:60:4e:83:46:39:81:83:d8:9b:c3:93:c7:7c:72:4f:27:
         c8:a2:1a:5f:d8:d2:9b:e9:2d:33:51:97:06:5c:39:f8:f4:93:
         f9:e2:0a:d9:c1:f6:5a:58:b9:a5:a2:4d:9e:95:46:3b:60:c3:
         09:59:8c:79:ba:d5:05:b6:d0:82:84:f7:ac:54:2b:cf:2c:35:
         ec:9b:38:9f:5f:b3:bd:35:2a:af:6d:e3:51:d2:a3:0d:f0:fa:
         ce:bb:50:37:47:b9:fc:3e:5d:a0:74:cb:ea:16:49:35:98:0f:
         f3:8f:2b:a4:9a:a1:61:49:f1:f9:7b:70:0d:bc:22:be:23:98:
         22:64:ef:9b:9d:df:f1:ab:f2:5c:fc:98:43:8f:15:c7:bf:ee:
         bd:95:e9:f8:59:12:a4:1f:59:bd:fe:24:68:6e:f9:a1:a0:d9:
         cc:0f:dd:c6:aa:06:f4:30:d3:20:ce:cf:20:fb:e6:95:07:6d:
         28:d9:59:99:5d:50:33:66:b7:37:2c:49:b4:73:a4:c8:7f:72:
         84:b7:2e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:19 2026 by rpki-client