Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
File:                     ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json)
Hash identifier:          X6cLMDwffbn3pmJ8RiWiUgpmYIVI4d8iYTEsNkwkIQc=
Subject key identifier:   3B:37:AA:AA:6B:58:9A:46:8F:04:A5:3F:F6:D5:AC:2A:85:84:A8:3B
Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E
Certificate issuer:       /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
Manifest number:          0156
Signing time:             Thu 04 Jun 2026 21:38:32 +0000
Manifest this update:     Thu 04 Jun 2026 21:38:32 +0000
Manifest next update:     Thu 11 Jun 2026 21:38:32 +0000
Files and hashes:         1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: UAgX4GoJcpMLBhUkMnsv7cG6jE7rckau0ECSEjDxJys=)
                          2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: 4De+ftW6AlydF3aj182yhRL0S4HDbta7pD0izCS8LQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl
                          rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 21:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E
        Validity
            Not Before: Jun  4 21:38:32 2026 GMT
            Not After : Jun 11 21:38:32 2026 GMT
        Subject: CN=6a21f058-9e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:b5:9d:73:e3:cc:53:c9:b4:c1:12:57:a1:
                    d5:1f:d9:28:a9:74:36:f8:0a:f9:63:d0:24:03:18:
                    3e:43:29:f0:73:11:fb:3e:58:7d:af:44:d9:d8:89:
                    15:09:82:2f:4f:93:d3:4e:42:91:03:80:78:50:1c:
                    03:f3:5e:88:b0:e1:46:81:95:70:c5:14:22:2e:39:
                    88:3d:a4:8d:56:31:fe:78:8f:30:82:83:d1:b2:09:
                    41:4d:52:7c:05:76:87:2d:53:f4:e0:c9:cc:c7:cc:
                    4f:71:37:20:9f:e5:64:8c:3f:54:52:51:00:f3:79:
                    43:e7:ac:11:5d:31:58:9e:07:4f:fb:f1:97:e7:d4:
                    19:37:d7:49:45:cb:5a:72:60:1a:ee:0b:6c:84:9d:
                    f4:37:ad:12:44:ce:46:cc:cf:b4:67:c1:ae:a8:09:
                    ba:ee:72:7a:79:80:c2:12:04:61:d3:eb:72:7a:cc:
                    a9:2d:7b:ab:56:8f:57:00:b5:e8:72:f7:56:59:24:
                    ab:03:17:68:0d:81:bb:94:17:f8:bb:6c:36:b9:49:
                    ae:06:fa:d1:2e:96:13:ee:1a:cb:28:3b:e2:a3:57:
                    62:7b:17:8e:10:8d:6f:95:80:af:94:4f:21:9b:40:
                    60:44:84:72:ac:30:7e:1f:ba:5f:0b:c9:a3:aa:4b:
                    b3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:37:AA:AA:6B:58:9A:46:8F:04:A5:3F:F6:D5:AC:2A:85:84:A8:3B
            X509v3 Authority Key Identifier:
                keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4c:8a:f6:35:7c:d1:2d:ec:85:a1:5e:7f:d7:81:38:32:28:
         b0:9c:fa:c6:f8:cc:ba:99:b0:58:a8:02:9e:ef:18:9f:5e:07:
         c5:c8:11:a8:ef:a0:f0:07:e9:e4:47:3b:37:d5:1b:f5:60:28:
         5d:a7:97:54:f5:b0:57:10:60:d1:e9:88:20:a9:a8:b5:41:32:
         3b:ff:75:0b:21:62:06:e8:8a:02:6f:47:a2:46:fc:5a:29:fb:
         38:ec:82:53:e0:85:54:87:8b:d6:20:ec:5c:c3:55:ff:64:48:
         df:6d:ea:38:58:fd:05:ed:83:a5:12:4b:0c:3e:fa:3e:f3:c7:
         d4:a2:c6:17:fb:46:87:bb:e9:11:9e:ea:f6:4d:20:42:34:d6:
         2c:f5:1a:8b:96:d3:08:3b:22:9b:2e:04:97:bc:c4:ee:fc:36:
         98:87:3a:c3:ed:e7:be:34:fa:6d:32:e8:34:85:42:ff:ae:05:
         a6:30:d4:b4:10:b2:05:7e:ab:cc:b3:b1:14:1d:7d:cd:e5:02:
         f8:0c:87:22:ea:36:54:d2:04:2c:eb:bd:e3:4d:2d:fc:cc:46:
         1b:43:29:45:76:cd:eb:d8:dc:9c:e5:4f:1f:c3:85:30:f7:dc:
         71:8e:ce:59:c1:12:81:ac:af:5c:fa:65:34:3c:4b:0e:f4:f7:
         d2:7b:53:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:14:49 2026 by rpki-client