Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
File:                     ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json)
Hash identifier:          MwugqWbdHeRf2F1uqGNMlmJg5PgCRwXW0JMy69FwNeg=
Subject key identifier:   20:5E:9B:AA:8D:89:02:E3:CA:0A:6F:0F:7E:3D:A2:FB:32:D0:4F:9E
Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12
Certificate issuer:       /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
Certificate serial:       1076
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
Manifest number:          1061
Signing time:             Wed 20 May 2026 17:25:26 +0000
Manifest this update:     Wed 20 May 2026 17:25:25 +0000
Manifest next update:     Wed 27 May 2026 17:25:25 +0000
Files and hashes:         1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: wjnjgsPZKb93NjIaqJskTPI34VE54LAeVluSU5renWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl
                          rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4214 (0x1076)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
        Validity
            Not Before: May 20 17:25:25 2026 GMT
            Not After : May 27 17:25:25 2026 GMT
        Subject: CN=6a0dee86-7a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b2:bb:c3:88:28:e0:bf:a7:eb:58:88:e8:82:
                    ef:a5:4f:5c:82:38:be:a7:26:b6:3f:01:e0:08:50:
                    53:6c:62:08:8a:14:c2:ad:b1:c7:2d:18:64:dd:cf:
                    44:0a:39:37:f9:65:b5:9c:fc:c3:2d:7c:16:e5:b3:
                    64:72:8f:90:3d:5e:4c:62:7d:89:4a:0a:10:17:02:
                    08:52:c0:e3:92:f6:6d:4c:60:c2:e3:23:65:66:e5:
                    95:71:e2:c0:29:90:7d:1a:d7:3f:6f:d6:2a:c9:a8:
                    1d:af:dd:9e:20:71:12:61:0b:eb:bf:dd:fb:8a:58:
                    ec:95:ed:52:11:17:d8:11:0a:f5:6c:f5:4b:dd:33:
                    09:00:b4:f7:8a:ac:d1:51:e6:c7:91:84:40:aa:67:
                    17:b1:c4:56:5b:bf:a5:ae:92:49:ce:ea:d0:0f:7f:
                    63:04:0b:31:d2:9f:a4:ba:d3:76:93:5b:bc:bb:c9:
                    31:86:5b:a9:4d:be:e3:b5:7a:76:79:40:16:93:70:
                    f7:4f:16:50:03:96:47:5f:93:83:3c:bc:b9:57:bb:
                    ad:e5:a5:31:82:b3:65:ad:b6:10:b4:47:2e:01:4d:
                    77:e1:cc:91:5e:d9:74:ef:9f:1a:e0:c4:f4:8f:6a:
                    fc:27:01:07:1b:20:bf:e3:22:d9:ec:f6:ee:6c:70:
                    07:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5E:9B:AA:8D:89:02:E3:CA:0A:6F:0F:7E:3D:A2:FB:32:D0:4F:9E
            X509v3 Authority Key Identifier:
                keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:78:9e:7d:d7:2c:0b:46:f1:e6:2d:c4:0d:74:7e:f1:ba:5a:
         fb:80:76:84:a6:fe:6b:24:45:14:53:bb:cb:a7:54:7d:05:44:
         68:b1:22:8f:aa:e1:ed:b7:9e:f9:4a:a9:64:bf:c7:d4:cf:10:
         62:67:37:3e:42:c6:40:78:38:b2:34:ab:72:42:07:26:b5:55:
         e8:d6:b4:92:cf:77:9e:be:7c:09:52:e5:bc:fb:0e:0f:e4:4e:
         ae:df:75:91:06:11:fa:e3:cd:d4:9f:4b:0c:7d:90:37:48:ee:
         49:ca:b8:89:96:0b:43:c9:b1:e7:14:e5:23:ae:51:04:39:6d:
         6e:a8:b8:28:7f:8b:c5:37:b9:43:18:37:3a:f6:5a:b3:00:86:
         0c:4a:11:c0:10:93:bb:29:40:8e:ad:6e:69:05:17:f8:42:a8:
         c4:42:86:e3:00:ae:c0:a4:20:11:5c:a7:56:bb:55:4c:47:3f:
         45:67:c2:26:77:17:da:bc:62:6a:b3:0a:be:50:93:dc:7b:0d:
         84:00:10:f0:56:32:d3:e6:97:1f:34:5d:90:73:05:7c:0e:80:
         8b:c4:26:d6:b3:d4:d4:25:05:6e:8e:c4:cd:1e:12:bb:f5:f6:
         af:7f:7f:c5:d6:10:84:55:fd:6a:df:eb:2b:26:d2:cd:37:21:
         41:9b:66:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF
MzMzNEMyMTIwHhcNMjYwNTIwMTcyNTI1WhcNMjYwNTI3MTcyNTI1WjAYMRYwFAYD
VQQDEw02YTBkZWU4Ni03YTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk7K7w4go4L+n61iI6ILvpU9cgji+pya2PwHgCFBTbGIIihTCrbHHLRhk3c9E
Cjk3+WW1nPzDLXwW5bNkco+QPV5MYn2JSgoQFwIIUsDjkvZtTGDC4yNlZuWVceLA
KZB9Gtc/b9Yqyagdr92eIHESYQvrv937iljsle1SERfYEQr1bPVL3TMJALT3iqzR
UebHkYRAqmcXscRWW7+lrpJJzurQD39jBAsx0p+kutN2k1u8u8kxhlupTb7jtXp2
eUAWk3D3TxZQA5ZHX5ODPLy5V7ut5aUxgrNlrbYQtEcuAU134cyRXtl0758a4MT0
j2r8JwEHGyC/4yLZ7PbubHAHDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCBem6qN
iQLjygpvD349ovsy0E+eMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD
RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i
elNZSHhOOFhwVXpqTTB3aEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv3iefdcsC0bx5i3EDXR+8bpa+4B2hKb+ayRFFFO7y6dUfQVEaLEij6rh7bee
+UqpZL/H1M8QYmc3PkLGQHg4sjSrckIHJrVV6Na0ks93nr58CVLlvPsOD+ROrt91
kQYR+uPN1J9LDH2QN0juScq4iZYLQ8mx5xTlI65RBDltbqi4KH+LxTe5Qxg3OvZa
swCGDEoRwBCTuylAjq1uaQUX+EKoxEKG4wCuwKQgEVynVrtVTEc/RWfCJncX2rxi
arMKvlCT3HsNhAAQ8FYy0+aXHzRdkHMFfA6Ai8Qm1rPU1CUFbo7EzR4Su/X2r39/
xdYQhFX9at/rKybSzTchQZtmTA==
-----END CERTIFICATE-----
Generated at Thu May 21 11:16:39 2026 by rpki-client