Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File:                     Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier:          Xf3JYvaQqQtKjQAF+AAoM+WSuZ2CdeD1UcfR+tPyZr4=
Subject key identifier:   08:13:86:48:71:09:54:CE:58:AE:9E:69:E1:7C:12:23:79:8B:74:3F
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer:       /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial:       0832
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number:          0822
Signing time:             Sun 26 Apr 2026 20:58:43 +0000
Manifest this update:     Sun 26 Apr 2026 20:58:42 +0000
Manifest next update:     Sun 03 May 2026 20:58:42 +0000
Files and hashes:         1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: GEh3WKj60Ok9HSe8YDVh8P3bufXEV7E3R4m3OPSm5hQ=)
                          2: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: U1wbDqDunlaKuYqjqIcFyq/5UG7Pub5IpvN+buNY/uw=)
                          3: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: c2NbvzRPb3OX8yUH2vwhzYHB05TOx09RU6yJUt7vO/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
                          rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 20:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2098 (0x832)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
        Validity
            Not Before: Apr 26 20:58:42 2026 GMT
            Not After : May  3 20:58:42 2026 GMT
        Subject: CN=69ee7c83-dba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:ee:67:51:ae:1d:90:08:f7:97:cb:51:ca:
                    ef:48:42:fa:59:28:a0:d2:07:08:28:48:0a:f0:71:
                    24:33:b7:a7:4e:3b:93:2b:94:3d:2e:a6:4d:b1:e4:
                    35:c5:21:60:db:59:7e:1d:be:67:95:21:e7:ca:d4:
                    23:62:f3:25:f2:de:0c:90:34:02:63:15:bc:da:a5:
                    cd:a8:0b:df:e2:b3:72:8e:00:e7:51:41:01:c3:ec:
                    53:aa:1f:51:10:b1:2b:ed:58:42:63:39:2b:79:2e:
                    8b:13:ed:fa:9e:2c:4b:c4:a1:f2:14:87:91:e8:74:
                    5b:65:4d:ca:96:fb:29:e4:9f:b3:02:44:f4:c4:69:
                    c1:b5:a1:32:ee:4e:1a:b2:e7:03:73:52:72:fb:b6:
                    2c:1c:f6:ea:c1:33:99:8b:97:a5:93:d9:fd:9d:2b:
                    82:37:53:db:9a:25:39:d4:48:a4:3c:a0:73:ba:e0:
                    f2:ac:97:52:5a:53:70:57:99:81:ff:47:c5:ba:4b:
                    87:db:59:c1:75:cf:83:5d:dd:d9:87:a3:09:a6:a2:
                    04:7a:21:8d:49:9f:2e:62:d4:5b:11:f9:08:f3:5a:
                    f1:4b:03:71:55:a2:ea:5a:f0:a0:17:44:17:d1:e7:
                    ea:be:44:c5:8c:f6:b0:13:72:5a:18:95:0c:71:6a:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:13:86:48:71:09:54:CE:58:AE:9E:69:E1:7C:12:23:79:8B:74:3F
            X509v3 Authority Key Identifier:
                keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7c:c2:c4:f2:1b:19:eb:a2:d2:8a:36:9a:da:c2:9c:ab:b9:
         21:ec:3b:ec:00:c2:86:88:f7:0c:6f:1f:7b:ee:83:84:20:0e:
         1d:fe:3b:bb:1e:06:96:27:94:8d:4c:81:87:39:e9:8d:16:ba:
         9e:00:a8:83:6b:20:45:17:8b:7a:db:60:c1:2c:be:81:9f:8a:
         3a:6d:55:7a:d3:f7:81:87:fe:91:65:8d:fa:85:c2:b2:3a:7d:
         20:24:36:fd:08:6b:e4:53:4b:57:af:5f:fa:dd:e8:91:36:8e:
         f0:41:d9:ef:65:45:93:88:c4:0a:5f:92:e4:49:10:de:0d:b7:
         32:2a:71:5d:15:53:cc:bb:bf:59:e1:62:b0:30:78:59:b0:44:
         2f:d8:c7:83:cd:90:74:89:5b:50:68:6d:7e:a9:ff:37:a0:41:
         66:9a:52:16:69:6d:5f:38:01:c2:13:06:b2:ac:d1:83:68:8c:
         0c:95:91:79:09:da:08:cc:bd:a9:41:22:f8:67:b6:09:e8:9a:
         8b:0f:ff:8d:a9:c4:d6:14:ab:ad:ab:e5:f7:7a:0b:04:78:b5:
         96:d3:8d:f7:c0:0c:b0:85:63:00:5b:61:17:6e:58:6d:d0:9f:
         54:cf:91:5a:d3:77:bb:70:bd:08:49:12:6f:8d:cf:03:c2:f3:
         cd:1c:1c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:34:46 2026 by rpki-client