Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
File:                     ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft (raw, json)
Hash identifier:          Lv7mutUc3KbAPAehUIlosvMTwnt3hFKWxSONwRZtgSQ=
Subject key identifier:   30:38:ED:AB:24:17:F9:23:65:83:8D:67:2B:1C:92:91:20:A4:9F:FE
Authority key identifier: 66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4
Certificate issuer:       /CN=A9193045/serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
Certificate serial:       049E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
Manifest number:          0474
Signing time:             Tue 23 Jun 2026 00:15:20 +0000
Manifest this update:     Tue 23 Jun 2026 00:15:19 +0000
Manifest next update:     Tue 30 Jun 2026 00:15:19 +0000
Files and hashes:         1: ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl (hash: aD8xcAuI4kwWB96e4hkxhikTqw9np+q0293XSNW2RhE=)
                          2: E57F70C206C311F185D816DB103D8C67.roa (hash: ldEkt8AnQQd4OxqJC4JbMV5PgPlGcaBYG25O0CezBnI=)
                          3: 62AC0F740B1511F189F6F0D93B3D8C67.roa (hash: 3cQBG+eCngkux1xOr3AWliZdBv2QypSCmE9xW1mHxwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 00:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182 (0x49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193045, serialNumber=66E85461BB352A498DB55703646305CA37E74FB4
        Validity
            Not Before: Jun 23 00:15:19 2026 GMT
            Not After : Jun 30 00:15:19 2026 GMT
        Subject: CN=6a39d018-d280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:b9:8b:5f:9f:ce:27:31:4c:d2:5e:c5:84:
                    63:06:c8:0b:a7:e6:85:63:c3:2e:73:9b:e6:5c:c9:
                    7c:84:d9:31:bf:3a:62:c8:49:0a:60:e6:7f:f4:b6:
                    9f:9d:f5:fb:62:ca:8e:d8:9d:24:ed:51:ac:46:09:
                    ff:03:90:fe:2e:64:cf:89:e8:2b:18:d9:fa:2b:f5:
                    81:d7:70:03:85:37:02:9f:e2:af:7b:28:8c:6a:67:
                    a6:a2:38:4a:06:a8:7b:82:a1:61:89:f8:78:0b:d8:
                    56:26:b9:6d:12:cd:de:f8:12:82:94:86:2c:4e:f8:
                    f0:db:23:5c:29:bc:3e:84:05:e7:68:f0:8c:5d:31:
                    8f:7b:27:2d:4d:3d:2e:b5:54:d8:4a:13:ee:3e:e2:
                    c1:41:db:79:11:8c:1a:00:6d:6e:fd:a6:18:24:64:
                    fb:3f:93:11:a3:c8:1d:7a:fa:dd:19:90:7a:8d:18:
                    ae:7f:74:91:7d:fa:a9:41:fa:55:0f:47:cd:bc:ce:
                    e0:db:08:20:06:4b:14:ef:d6:96:73:5d:98:fb:d1:
                    bd:de:ce:12:64:a2:44:a9:70:f1:7c:f3:f5:15:56:
                    43:07:f6:f5:46:04:6c:71:f1:38:ee:92:a8:06:d0:
                    21:3d:04:5a:87:65:ee:db:7f:9f:75:68:07:2c:19:
                    cc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:38:ED:AB:24:17:F9:23:65:83:8D:67:2B:1C:92:91:20:A4:9F:FE
            X509v3 Authority Key Identifier:
                keyid:66:E8:54:61:BB:35:2A:49:8D:B5:57:03:64:63:05:CA:37:E7:4F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193045/BFADC6109F2911EC9C2D6785C4F9AE02/ZuhUYbs1KkmNtVcDZGMFyjfnT7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e8:83:63:6b:fc:f7:10:ad:c4:bd:db:7b:fc:81:7f:66:b6:
         9c:a2:c2:ff:59:d5:3f:cc:9b:3e:ce:9e:6a:dd:1f:59:d9:e5:
         99:8f:2e:ca:54:64:0a:92:b2:ac:d7:bc:f0:77:a7:2c:75:0b:
         ab:ea:00:9d:db:5e:99:0d:83:29:c6:d6:c3:e6:51:25:b8:ce:
         9c:5b:94:73:a5:44:43:2a:27:60:ff:34:ab:e6:37:3a:1f:6d:
         7f:02:fb:f7:f6:a3:08:63:b8:3b:dd:f2:c8:9a:7a:03:84:c5:
         b7:66:96:db:8c:bb:09:e0:28:98:65:ec:22:fe:ab:64:19:85:
         db:fc:30:45:96:d9:56:3a:0a:8d:35:0b:3c:16:d7:e2:68:62:
         87:d3:3c:20:04:1f:90:98:a3:97:14:70:b3:6e:7f:25:e4:18:
         4a:ac:a1:d5:a2:38:fe:d8:72:4c:24:df:dc:4d:f7:dd:2d:2b:
         92:71:93:fe:fb:8e:57:ba:2b:06:43:de:e5:d1:12:bd:14:39:
         90:75:11:71:11:c3:b2:e9:5f:0f:31:e2:e4:f1:fe:52:62:70:
         03:0d:36:47:4e:77:01:b3:cb:ed:5b:88:2c:6e:56:33:05:b3:
         cb:1d:52:bc:e6:3e:0a:5a:80:f9:2a:d3:a9:e9:09:d9:d7:8a:
         e4:fd:b2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:07 2026 by rpki-client