Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
File:                     ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json)
Hash identifier:          IWDdXm4EhIQN0Sh7uK5l5FvcUe14TTAr6PokXA/GJqY=
Subject key identifier:   C7:A7:B8:5F:3E:53:02:2A:D6:0A:47:C2:F7:1F:75:7F:72:81:2C:75
Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
Certificate issuer:       /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Certificate serial:       0EEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
Manifest number:          0EDF
Signing time:             Wed 20 May 2026 17:39:36 +0000
Manifest this update:     Wed 20 May 2026 17:39:36 +0000
Manifest next update:     Wed 27 May 2026 17:39:36 +0000
Files and hashes:         1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: hU8h1d26Fk4KqvdMwZWru52UFXMlOUeT1CgV1ap4AuE=)
                          2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: iihOs73vGdIvHbM2jbGXnunoWi4oTaT680dFjp4s8/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
                          rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3822 (0xeee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
        Validity
            Not Before: May 20 17:39:36 2026 GMT
            Not After : May 27 17:39:36 2026 GMT
        Subject: CN=6a0df1d8-9077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bc:62:d7:f2:4f:e4:de:fb:4d:8e:12:94:56:
                    bb:52:3c:36:09:b0:f3:12:11:82:92:e1:fb:fb:1f:
                    56:f6:6e:8b:5e:56:a7:9f:d7:60:1b:08:63:08:49:
                    7a:12:dc:8e:f3:c7:65:1d:31:9b:e4:95:6e:1f:ef:
                    b1:b6:09:a1:68:88:f6:0c:9d:45:9c:86:95:a7:08:
                    0c:cf:f0:1d:fe:07:cf:19:3e:72:32:df:18:18:c8:
                    32:c7:cc:b5:3a:f9:bb:ee:62:9b:fb:4f:1a:bc:75:
                    0a:85:7a:14:a0:d9:32:89:36:5b:cb:1b:2b:2e:94:
                    91:1f:0c:e2:43:fd:d6:2a:a5:e9:84:f6:fa:3c:db:
                    eb:bd:31:f4:ff:eb:8b:eb:ed:89:01:3a:4b:4e:39:
                    e7:c5:d4:94:74:8a:f1:68:d0:99:7e:56:24:fd:e6:
                    df:69:4a:03:4e:fe:b3:2a:6b:e5:41:37:cc:d3:75:
                    09:c3:eb:c9:24:45:ce:c7:0e:21:87:a9:05:b4:19:
                    ce:e5:4e:c9:24:84:93:e9:7e:65:60:63:14:fb:02:
                    8c:4a:25:2b:a6:35:db:d4:fe:5d:a5:01:e0:5c:ef:
                    00:b3:d3:2b:d4:b0:61:94:47:60:80:55:60:df:57:
                    10:44:a6:6e:a6:a1:ae:4b:84:3d:34:2e:e1:07:bd:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A7:B8:5F:3E:53:02:2A:D6:0A:47:C2:F7:1F:75:7F:72:81:2C:75
            X509v3 Authority Key Identifier:
                keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:76:b2:a2:38:bb:e6:39:bb:72:79:f8:39:83:57:f3:6f:d5:
         f8:93:c9:6d:bc:d5:47:d4:b6:d0:82:66:24:27:91:0f:73:a2:
         ed:85:40:c5:92:fc:eb:ca:0e:d0:11:ad:ce:0b:0f:64:5f:9d:
         1e:06:a8:a4:3b:2e:eb:94:0d:36:b4:92:36:e2:fb:ae:40:d8:
         3c:d8:24:15:fb:8a:62:95:6a:3d:46:fd:d2:40:99:a7:ca:2e:
         ae:ee:c8:5b:84:73:9c:1f:9b:ca:c1:52:b2:60:cb:fa:07:ba:
         62:1b:e9:bd:d2:26:3b:58:52:84:83:36:3e:61:d3:24:69:cd:
         f1:d8:3c:a2:e7:f5:f0:88:7d:b5:99:32:63:10:e6:56:36:1c:
         9a:1e:0d:4d:9d:33:2d:ab:30:80:c4:ea:e0:d0:45:0f:3f:ae:
         93:65:4e:4c:09:12:80:53:39:8e:5b:bd:71:78:91:5f:11:03:
         1f:f9:09:57:6f:37:75:13:31:c2:f1:12:f8:f9:ec:ed:e1:a2:
         24:82:bb:56:d6:5c:ea:ad:f8:ea:12:a1:a5:f2:b9:f6:8b:c8:
         67:11:96:79:14:57:01:43:da:4f:03:2a:b6:27:9a:0a:90:b0:
         b2:34:9b:60:c6:ee:46:88:48:2c:d6:bc:be:ad:92:f5:15:da:
         32:9d:4b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:03 2026 by rpki-client