Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
File:                     ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft (raw, json)
Hash identifier:          cP3tddtkJPFhfomHv9YDxyNn2+yGlcMPDkbVt6i0aeA=
Subject key identifier:   5D:B1:57:15:A3:D2:D5:23:82:61:E2:12:D3:E4:EC:37:3A:A6:87:47
Authority key identifier: CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF
Certificate issuer:       /CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF
Certificate serial:       0BC1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
Manifest number:          0BB6
Signing time:             Wed 20 May 2026 19:03:01 +0000
Manifest this update:     Wed 20 May 2026 19:03:01 +0000
Manifest next update:     Wed 27 May 2026 19:03:01 +0000
Files and hashes:         1: ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl (hash: C90PuSoKwBn8kK+dXuHRI0ji89+luE0Re7hg+Uu09hM=)
                          2: 4E6B4E24458E11EA84E01A0FC4F9AE02.roa (hash: /2dz4PjA3+fudT7lQIBIdu9/aDa/a/TeRxW2OSUWKSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl
                          rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3009 (0xbc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189132, serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF
        Validity
            Not Before: May 20 19:03:01 2026 GMT
            Not After : May 27 19:03:01 2026 GMT
        Subject: CN=6a0e0565-4630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:dd:1f:38:0b:d7:87:3a:28:ed:a0:f5:ca:
                    91:cb:50:5c:fc:54:1e:ee:ca:9f:95:92:44:d7:f9:
                    45:d1:fa:c3:bb:f7:49:65:49:d0:75:2a:ed:51:62:
                    b4:b8:34:9f:27:1a:c8:e7:82:e0:e9:c6:ad:29:db:
                    c8:6a:5d:2b:0a:c7:0c:73:8d:b1:27:07:8e:ac:98:
                    e7:06:d1:74:f8:af:1e:12:11:a0:8a:b4:41:bd:63:
                    c1:ad:ff:d1:5a:bd:11:99:57:14:3e:8f:00:92:fd:
                    58:8e:79:8d:9b:09:ba:3d:48:e5:0f:61:72:66:07:
                    b2:63:91:6a:3f:cf:9d:c5:f8:a4:c7:d2:b1:d3:38:
                    fc:db:c5:ef:c8:b1:db:11:b9:45:92:4f:ab:2f:1d:
                    36:4a:fd:07:a5:6c:5d:c2:82:9e:55:7d:9a:32:f3:
                    3b:e4:70:4b:aa:7e:b4:74:50:38:4f:56:ca:a4:89:
                    e9:5e:19:fc:81:d0:6a:fa:d7:50:bd:62:2d:d8:51:
                    e4:9b:27:20:d8:13:b6:73:48:4a:f0:03:7f:2f:0d:
                    80:cb:db:7c:83:db:fa:32:ea:08:ea:22:fe:f5:6d:
                    63:cc:27:76:d8:a0:d1:75:d2:01:bc:6a:9d:f9:ec:
                    5f:e3:97:de:4c:65:5a:bf:e4:0a:b6:77:71:92:32:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B1:57:15:A3:D2:D5:23:82:61:E2:12:D3:E4:EC:37:3A:A6:87:47
            X509v3 Authority Key Identifier:
                keyid:CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:af:81:fb:ef:00:06:b7:db:0b:9f:41:53:a9:bf:b2:47:40:
         e7:31:d1:f5:2d:55:c4:49:4a:b7:41:91:d3:61:eb:1e:2e:2f:
         9e:60:f4:79:d5:cc:39:61:ae:d3:fe:25:18:c9:64:7f:3e:db:
         52:9f:8f:7d:50:04:66:b3:1e:34:67:76:fc:11:b2:6e:a3:98:
         8a:a3:03:38:5f:01:d3:e8:2f:ec:89:87:44:f5:70:bd:f0:01:
         09:4c:de:74:fb:82:a0:1b:8f:a3:1c:ab:88:a7:49:c7:89:d3:
         aa:37:cc:d6:db:63:81:88:0e:b2:b6:67:50:96:08:d7:a5:9d:
         98:69:5d:f5:11:45:6f:97:9a:fe:d3:4e:63:be:7a:c8:6b:2c:
         a6:b4:54:18:8d:02:6d:38:9d:3e:dc:dc:dd:1b:8e:ee:d0:3a:
         a6:f3:29:60:d9:40:6e:9e:6f:d8:1b:4f:31:b0:9e:72:69:c0:
         61:b9:39:5f:08:29:b6:35:e8:bf:91:21:c1:9c:9f:3e:e4:af:
         41:34:db:94:45:3c:28:98:02:28:8b:26:1a:14:a9:23:01:dd:
         d4:c4:e3:53:55:d3:c1:cb:0c:7f:f4:ee:44:f0:02:16:6b:cb:
         3a:cc:9d:48:77:38:eb:0d:78:42:8a:e8:42:78:ff:9b:de:92:
         43:b1:30:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:47 2026 by rpki-client