Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft
File:                     PzH7XY70fa043ZLqGonoiHFAOjE.mft (raw, json)
Hash identifier:          ufFMYLSXpUi7pZFnPOj6yDjmEYQhJlLfK72K6qZiD8Q=
Subject key identifier:   EE:1D:55:28:72:16:66:DA:F4:86:DD:24:0B:AF:88:00:E5:B8:38:24
Authority key identifier: 3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31
Certificate issuer:       /CN=A91C66B2/serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft
Manifest number:          C8
Signing time:             Thu 21 May 2026 06:54:19 +0000
Manifest this update:     Thu 21 May 2026 06:54:19 +0000
Manifest next update:     Thu 28 May 2026 06:54:19 +0000
Files and hashes:         1: PzH7XY70fa043ZLqGonoiHFAOjE.crl (hash: dPo8ZMnuOuD4B5e/LYtyaXD0aL+al4iR8413PkXszsQ=)
                          2: F8C50B08201711F0A5D51F16C4F9AE02.roa (hash: 0V0IRbzifSTjNSAVOPWTTktiswJ9KarZ5qkmJcePTMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl
                          rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C66B2, serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31
        Validity
            Not Before: May 21 06:54:19 2026 GMT
            Not After : May 28 06:54:19 2026 GMT
        Subject: CN=6a0eac1b-659c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:14:05:f9:f5:9b:bd:b8:d6:9c:f2:a1:ed:
                    24:08:2d:15:a3:6e:38:a5:85:4c:f6:5c:68:c1:7d:
                    50:f0:2c:aa:e5:98:74:18:78:d0:d7:fd:e4:cd:ed:
                    17:22:84:29:e8:f6:ba:58:05:34:e8:b0:b6:9e:e6:
                    1b:a4:52:08:98:65:2d:75:23:67:d5:3a:5d:28:ae:
                    37:59:67:51:b4:34:84:0d:a1:a7:a0:79:4a:a6:b1:
                    9c:0d:e6:79:e2:2a:60:78:a1:6f:f9:f9:9c:f5:f7:
                    a1:8d:d4:25:45:62:63:8a:b6:fd:78:ea:2e:26:53:
                    98:f9:7b:ed:2d:a1:03:b9:83:c5:b6:35:54:c8:0d:
                    51:61:66:20:76:11:14:fd:22:6e:4d:ad:0b:93:ae:
                    13:b1:4a:e9:61:81:98:ce:dc:2d:1b:35:91:a9:48:
                    99:65:6c:1d:08:15:d1:ad:cd:06:5a:e2:3a:26:a3:
                    0c:6c:9b:61:78:c6:ee:96:a6:26:a1:db:6f:37:05:
                    b2:05:69:40:fa:0b:9f:33:00:95:b5:28:a3:66:e9:
                    b9:bc:53:92:87:89:fe:49:15:c3:f6:28:bc:f3:23:
                    65:6e:07:24:ed:91:6f:3d:a0:d2:84:de:b4:0d:1b:
                    50:26:c7:00:f0:29:38:c1:09:f6:69:45:77:3b:5b:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1D:55:28:72:16:66:DA:F4:86:DD:24:0B:AF:88:00:E5:B8:38:24
            X509v3 Authority Key Identifier:
                keyid:3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:cc:6a:e2:79:96:98:e6:fd:1e:3f:48:09:44:a4:dc:96:e6:
         52:35:63:06:1b:38:bb:b6:b2:81:0b:34:15:44:24:28:94:ef:
         3b:ff:42:df:fd:7c:fc:25:5b:2f:d5:bc:a0:f1:a6:60:f2:b1:
         18:03:48:0a:a4:1a:ea:ee:d9:8f:87:94:9b:b5:c0:34:14:1c:
         62:c8:c9:ea:d1:62:59:91:84:2a:e5:52:3b:6e:7e:44:7f:b5:
         a9:d4:39:e9:71:0e:d4:54:39:70:3a:f6:d5:66:b5:4b:79:81:
         b7:f6:d7:11:e3:75:08:e1:b3:1a:2d:a8:9c:7e:8d:c3:b0:23:
         6e:f3:f4:e6:f4:7d:c7:82:5d:d3:63:aa:d8:1f:b7:17:41:cf:
         3d:5c:85:7c:64:87:00:52:ed:c0:a2:ae:8b:1f:f0:19:ef:fc:
         d8:e4:86:f3:01:0f:fa:8f:fa:b1:81:98:0b:c0:4a:40:7f:7c:
         8c:37:32:5e:d2:02:f7:1a:b6:46:2b:87:09:2d:88:09:bd:4f:
         0c:0e:02:cb:da:c8:93:8a:1d:7e:86:f2:99:b6:f6:37:46:ff:
         80:cd:25:e6:3c:fd:0f:ba:2f:2e:d9:af:de:5f:5e:d5:3b:99:
         84:ad:fb:6f:62:dc:19:87:c8:dd:8e:85:61:32:39:95:f7:bd:
         ab:6e:6c:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY2QjIxMTAvBgNVBAUTKDNGMzFGQjVEOEVGNDdEQUQzOEREOTJFQTFBODlFODg4
NzE0MDNBMzEwHhcNMjYwNTIxMDY1NDE5WhcNMjYwNTI4MDY1NDE5WjAYMRYwFAYD
VQQDEw02YTBlYWMxYi02NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjqEUBfn1m7241pzyoe0kCC0Vo244pYVM9lxowX1Q8Cyq5Zh0GHjQ1/3kze0X
IoQp6Pa6WAU06LC2nuYbpFIImGUtdSNn1TpdKK43WWdRtDSEDaGnoHlKprGcDeZ5
4ipgeKFv+fmc9fehjdQlRWJjirb9eOouJlOY+XvtLaEDuYPFtjVUyA1RYWYgdhEU
/SJuTa0Lk64TsUrpYYGYztwtGzWRqUiZZWwdCBXRrc0GWuI6JqMMbJtheMbulqYm
odtvNwWyBWlA+gufMwCVtSijZum5vFOSh4n+SRXD9ii88yNlbgck7ZFvPaDShN60
DRtQJscA8Ck4wQn2aUV3O1vT5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4dVShy
Fmba9IbdJAuviADluDgkMB8GA1UdIwQYMBaAFD8x+12O9H2tON2S6hqJ6IhxQDox
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjZCMi9DNEYxNTQ3MjIw
MTYxMUYwQThENzQzMTRDNEY5QUUwMi9Qekg3WFk3MGZhMDQzWkxxR29ub2lIRkFP
akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B6SDdYWTcwZmEwNDNaTHFHb25vaUhGQU9qRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjZCMi9DNEYxNTQ3MjIwMTYxMUYwQThENzQzMTRDNEY5QUUwMi9Qekg3WFk3MGZh
MDQzWkxxR29ub2lIRkFPakUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAw8xq4nmWmOb9Hj9ICUSk3JbmUjVjBhs4u7aygQs0FUQkKJTvO/9C3/18/CVb
L9W8oPGmYPKxGANICqQa6u7Zj4eUm7XANBQcYsjJ6tFiWZGEKuVSO25+RH+1qdQ5
6XEO1FQ5cDr21Wa1S3mBt/bXEeN1COGzGi2onH6Nw7AjbvP05vR9x4Jd02Oq2B+3
F0HPPVyFfGSHAFLtwKKuix/wGe/82OSG8wEP+o/6sYGYC8BKQH98jDcyXtIC9xq2
RiuHCS2ICb1PDA4Cy9rIk4odfobymbb2N0b/gM0l5jz9D7ovLtmv3l9e1TuZhK37
b2LcGYfI3Y6FYTI5lfe9q25sZw==
-----END CERTIFICATE-----
Generated at Thu May 21 10:54:08 2026 by rpki-client