Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
File:                     ZKte21ESYrc2r4F0HU1zFBTTSlc.mft (raw, json)
Hash identifier:          w8zeMao08hOzk5yU51F9pkF7HtVNPB+M/MhSX5333yo=
Subject key identifier:   49:4B:35:25:F5:44:D0:74:6C:0B:6C:08:F1:75:DF:AB:39:F8:22:63
Authority key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57
Certificate issuer:       /CN=A91DD11A/serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
Manifest number:          63
Signing time:             Thu 21 May 2026 08:16:53 +0000
Manifest this update:     Thu 21 May 2026 08:16:53 +0000
Manifest next update:     Thu 28 May 2026 08:16:53 +0000
Files and hashes:         1: ZKte21ESYrc2r4F0HU1zFBTTSlc.crl (hash: XX40ze8Qwrl+HOeiE5Km8f+Y6W5gkOq38d2uUNk1Vec=)
                          2: E4DCE562284911F19931E6E894833773.roa (hash: 0yKy3aBVwlRdNI3lMwh0VFIrVrZK1Q3eetgCew0uics=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl
                          rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 08:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57
        Validity
            Not Before: May 21 08:16:53 2026 GMT
            Not After : May 28 08:16:53 2026 GMT
        Subject: CN=6a0ebf75-edec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:7c:21:39:b6:12:45:39:a2:69:85:98:47:
                    ec:29:71:f9:94:55:09:16:82:ff:a3:7c:78:6e:70:
                    70:82:51:77:b4:41:87:d6:e3:a6:0c:57:35:c0:86:
                    d2:36:a2:55:11:06:03:78:d7:56:e2:e3:bf:89:c9:
                    45:d6:dd:a5:76:af:24:ab:42:ef:69:80:98:2e:3f:
                    ef:86:0a:37:14:6d:f8:67:c2:73:04:34:c9:50:a5:
                    74:b2:7e:76:9b:2e:8b:c7:40:78:d2:f7:61:8c:d7:
                    e9:c8:cc:89:c7:60:19:86:38:b3:4a:42:c9:a1:8a:
                    44:97:7a:ac:4e:b0:0b:c4:e4:db:c1:e8:36:50:13:
                    e4:d8:16:ae:2d:71:01:1c:13:10:b6:4a:30:a8:7f:
                    63:ee:42:ce:28:29:a5:f4:65:d4:af:09:3a:76:db:
                    24:7a:33:9c:05:93:89:ad:cd:28:14:f2:36:5d:62:
                    26:26:a2:db:50:49:ea:be:2c:7c:79:24:d1:7e:46:
                    17:27:bd:ee:d8:52:4c:03:14:ca:4a:08:f5:c1:bc:
                    c8:a1:f5:0d:c8:49:4c:17:d7:76:53:13:0f:78:27:
                    44:c4:f4:1b:44:21:9e:4e:01:81:a3:31:65:6d:7e:
                    2b:e2:d6:61:e5:36:d8:75:bc:34:05:42:38:bd:c2:
                    bb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4B:35:25:F5:44:D0:74:6C:0B:6C:08:F1:75:DF:AB:39:F8:22:63
            X509v3 Authority Key Identifier:
                keyid:64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2a:c1:fe:15:3b:3e:a1:d9:25:d7:e0:20:e2:9f:a9:4c:21:
         dd:74:07:b3:06:5b:f6:52:49:8e:34:c6:a1:9f:48:1c:4e:dc:
         c4:2c:c1:50:63:6f:68:f8:69:9d:4f:52:c5:c0:04:84:93:74:
         42:46:45:be:3c:b4:d0:b8:71:98:3a:66:cf:8f:fc:30:a9:8c:
         84:f2:d6:89:ec:87:18:55:a4:c0:95:bc:66:30:9b:7d:f2:f8:
         73:7f:12:46:94:dd:5a:d4:3d:9d:62:98:c4:19:8f:8b:51:b0:
         65:14:7b:c6:f0:6b:aa:d8:e7:40:ac:5d:0c:01:18:ab:c1:b7:
         62:56:7f:4e:b7:b1:a9:33:2b:98:19:18:b7:e0:98:aa:03:dc:
         12:f8:e4:eb:dc:d5:61:3f:0d:f9:d0:d0:a4:42:f6:39:78:16:
         25:3c:c9:d2:f0:9d:ad:81:7a:d7:f1:65:0e:f5:d7:99:20:54:
         15:19:ef:8c:31:65:3f:57:43:28:0c:5c:49:ed:5f:11:4f:91:
         f1:b4:b9:8a:05:d5:cc:87:63:9d:08:32:80:30:da:6a:78:76:
         db:a2:7b:9e:1e:3b:a5:76:7a:fe:8a:d5:b5:7e:8b:82:22:a4:
         ff:c5:51:2c:6d:91:75:d0:b7:5e:a0:48:8d:14:0e:ba:50:06:
         df:b9:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:54 2026 by rpki-client