Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
File:                     ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json)
Hash identifier:          u8OTPlQ4vqt/AnlsBYc5vM0NrT6K2cXrjyxHdPV8Lzs=
Subject key identifier:   93:19:AD:9F:03:64:EB:D4:81:62:ED:86:C5:BE:0C:1E:45:99:C3:3E
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Certificate issuer:       /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial:       04ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
Manifest number:          04DA
Signing time:             Wed 20 May 2026 23:55:52 +0000
Manifest this update:     Wed 20 May 2026 23:55:51 +0000
Manifest next update:     Wed 27 May 2026 23:55:51 +0000
Files and hashes:         1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: PDXHmhs01py32bfLxg8SNOyM7db2rlmdYe/g/+MHbw4=)
                          2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: L0YUjWVE6ClQnbjkSz7YliWfDv2+LcOW4hK3DI2GwKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
                          rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1261 (0x4ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
        Validity
            Not Before: May 20 23:55:51 2026 GMT
            Not After : May 27 23:55:51 2026 GMT
        Subject: CN=6a0e4a08-c169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:02:25:b2:c6:cb:a0:f7:1b:55:58:0a:83:
                    aa:4f:e4:b2:8e:db:01:4f:a2:eb:c4:15:aa:de:4c:
                    0e:10:e7:56:10:e8:6b:51:44:da:53:8f:2b:28:c4:
                    02:8c:3f:24:ce:45:79:cb:14:44:a9:92:52:d3:e3:
                    38:18:2b:e5:2a:e8:c5:bf:cd:87:b9:48:a4:52:5a:
                    af:cf:b0:e2:1d:72:e9:8b:5a:3b:25:17:53:13:a5:
                    5e:39:73:19:6e:5d:2b:83:56:cb:6e:ca:47:be:5e:
                    19:2d:90:59:79:69:4e:37:ed:1f:8b:62:1b:0a:6e:
                    d3:2a:6e:c1:bb:b2:30:f0:7d:61:e0:90:d3:f5:ae:
                    d0:53:e5:75:6b:82:71:ca:35:38:9e:eb:8b:ca:0b:
                    3a:94:b2:cb:7a:7b:aa:c0:28:e6:13:3f:46:d3:f1:
                    6a:88:f6:0f:d2:13:16:bb:a7:31:f5:b3:5e:86:16:
                    09:58:95:a1:92:44:e0:28:a4:6f:0f:c2:3b:47:14:
                    b6:db:6f:16:71:31:3e:41:06:51:53:c3:cc:9d:8b:
                    ba:7a:d6:a9:54:6b:9a:b6:1f:68:b9:64:0f:2b:56:
                    b8:a8:9a:64:b9:8b:39:06:31:d9:79:a3:73:ba:32:
                    86:b9:28:69:4a:67:ad:06:1e:4e:26:67:2b:67:6e:
                    2f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:19:AD:9F:03:64:EB:D4:81:62:ED:86:C5:BE:0C:1E:45:99:C3:3E
            X509v3 Authority Key Identifier:
                keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:99:9a:2d:73:8b:ba:28:f7:39:e0:18:24:96:27:41:7a:69:
         56:62:cc:bf:5f:e5:f6:12:5c:77:48:6e:00:52:91:93:24:d5:
         1a:21:e8:13:6c:30:3e:a1:9b:80:98:13:68:f4:84:c1:3d:f4:
         ff:5f:ad:de:f9:38:5c:28:82:e9:88:bc:a7:29:3d:95:40:8f:
         1f:41:d1:ba:49:af:b6:47:36:69:30:49:02:36:75:08:f5:9d:
         8a:9a:24:d3:7c:02:6d:77:c1:a6:a7:87:47:91:2e:78:78:e6:
         1d:b7:7c:eb:54:89:9e:b4:c9:7a:3d:b8:2d:ec:b1:d3:c2:57:
         cf:1a:ce:79:7f:ab:4f:4b:05:64:38:2c:cc:06:f1:2d:3e:2f:
         c1:94:e6:bf:56:ae:32:c6:43:45:39:47:73:ad:e8:26:6b:f6:
         70:34:77:f2:9f:f4:ad:a2:22:03:c5:65:ea:04:45:2a:af:90:
         2d:12:91:57:6a:1e:9a:01:38:ee:aa:4a:e1:cf:04:b0:66:79:
         27:3b:52:07:9e:9d:8c:9e:0d:54:cb:69:ac:42:7c:aa:91:70:
         22:81:ed:f3:1d:b3:d7:bd:bf:5b:1f:3e:60:c5:a7:9f:6e:b1:
         d0:8f:18:45:65:e8:69:9e:15:3d:20:a6:8f:19:24:63:03:ed:
         d0:26:07:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIwNDcxMTAvBgNVBAUTKDY1MDEyQUYwNTcxMDg2QjlFQUIzMDM0NkY2MjRCNjMx
MkE1NTFDMzgwHhcNMjYwNTIwMjM1NTUxWhcNMjYwNTI3MjM1NTUxWjAYMRYwFAYD
VQQDEw02YTBlNGEwOC1jMTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxTICJbLGy6D3G1VYCoOqT+SyjtsBT6LrxBWq3kwOEOdWEOhrUUTaU48rKMQC
jD8kzkV5yxREqZJS0+M4GCvlKujFv82HuUikUlqvz7DiHXLpi1o7JRdTE6VeOXMZ
bl0rg1bLbspHvl4ZLZBZeWlON+0fi2IbCm7TKm7Bu7Iw8H1h4JDT9a7QU+V1a4Jx
yjU4nuuLygs6lLLLenuqwCjmEz9G0/FqiPYP0hMWu6cx9bNehhYJWJWhkkTgKKRv
D8I7RxS2228WcTE+QQZRU8PMnYu6etapVGuath9ouWQPK1a4qJpkuYs5BjHZeaNz
ujKGuShpSmetBh5OJmcrZ24vbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMZrZ8D
ZOvUgWLthsW+DB5FmcM+MB8GA1UdIwQYMBaAFGUBKvBXEIa56rMDRvYktjEqVRw4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjA0Ny8zM0FEQjNFNjZF
MDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhybnFzd05HOWlTMk1TcFZI
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pRRXE4RmNRaHJucXN3Tkc5aVMyTVNwVkhEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjA0Ny8zM0FEQjNFNjZFMDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhy
bnFzd05HOWlTMk1TcFZIRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASJmaLXOLuij3OeAYJJYnQXppVmLMv1/l9hJcd0huAFKRkyTVGiHoE2wwPqGb
gJgTaPSEwT30/1+t3vk4XCiC6Yi8pyk9lUCPH0HRukmvtkc2aTBJAjZ1CPWdipok
03wCbXfBpqeHR5EueHjmHbd861SJnrTJej24Leyx08JXzxrOeX+rT0sFZDgszAbx
LT4vwZTmv1auMsZDRTlHc63oJmv2cDR38p/0raIiA8Vl6gRFKq+QLRKRV2oemgE4
7qpK4c8EsGZ5JztSB56djJ4NVMtprEJ8qpFwIoHt8x2z172/Wx8+YMWnn26x0I8Y
RWXoaZ4VPSCmjxkkYwPt0CYHRg==
-----END CERTIFICATE-----
Generated at Thu May 21 10:28:40 2026 by rpki-client