Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
File:                     Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json)
Hash identifier:          /lkKwE75hjG1pStmbev9pkUJS+qzGcIIIg7oTxTsmao=
Subject key identifier:   57:35:2F:4B:A9:85:CE:2B:2A:C8:1B:9E:8D:FE:5D:EF:F2:52:27:B4
Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
Certificate issuer:       /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Certificate serial:       0D27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
Manifest number:          0D12
Signing time:             Wed 20 May 2026 18:09:43 +0000
Manifest this update:     Wed 20 May 2026 18:09:43 +0000
Manifest next update:     Wed 27 May 2026 18:09:43 +0000
Files and hashes:         1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: 6b0xbqTDq9wutrNqefJW3ObtpBeHL0Gx3Y8QQCBGEe8=)
                          2: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: TQPUr83+4QFfxrmveT7ts0ztgC3olEi7fsnrMHT3vIA=)
                          3: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: Ff/TvlQUYnwser6iOQ55Fx+c++mQlZ6UhNGfpxx3R90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
                          rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3367 (0xd27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
        Validity
            Not Before: May 20 18:09:43 2026 GMT
            Not After : May 27 18:09:43 2026 GMT
        Subject: CN=6a0df8e7-afc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f1:48:1c:5c:46:fd:06:db:6c:3a:03:12:ad:
                    44:bb:d5:10:3c:dd:a6:bb:7d:a8:9c:96:27:b8:57:
                    aa:da:c2:52:fd:56:72:9f:b8:ca:28:b3:66:90:c7:
                    72:3c:47:58:26:39:17:01:72:1a:15:0a:52:20:73:
                    71:e7:20:cd:8a:db:b9:74:83:ea:61:88:9a:33:4c:
                    c6:56:28:ba:ca:cb:ed:68:2b:43:69:1d:b7:38:77:
                    11:8b:62:58:cf:38:15:ec:44:f7:b9:52:b5:63:e8:
                    9c:2a:ed:b8:cd:32:86:a8:93:5f:2b:3d:79:d9:00:
                    95:7e:f9:17:0b:30:7d:1c:26:0c:9d:44:b0:5c:36:
                    94:24:e7:3a:ce:df:85:a1:45:45:92:1d:a1:62:ca:
                    c3:d3:af:9d:2e:f6:51:89:06:6b:4b:fa:e2:8b:a5:
                    d3:ce:a6:00:61:18:6b:c7:9a:8e:0f:70:11:6b:1c:
                    8a:6a:cf:6d:42:24:9e:1c:99:ba:73:58:08:5c:45:
                    0b:df:73:b0:c1:a7:3a:20:b5:dc:33:45:df:c6:54:
                    ba:f8:e3:dc:f3:8f:42:49:7b:07:69:03:b8:6d:1b:
                    b4:22:66:5e:7b:db:0e:88:02:30:91:a3:b5:a7:f5:
                    91:55:26:2c:65:4e:b8:fd:bc:32:1a:d1:77:ac:b0:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:35:2F:4B:A9:85:CE:2B:2A:C8:1B:9E:8D:FE:5D:EF:F2:52:27:B4
            X509v3 Authority Key Identifier:
                keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c7:13:f3:ef:10:0c:47:15:3d:f1:4c:0e:90:fe:ff:17:cb:
         3e:7d:96:07:5e:b8:d4:e9:30:14:6e:c8:75:93:b6:98:6e:4a:
         ad:95:2c:6d:d7:a9:3a:cc:6f:1e:5b:33:ca:42:58:ef:46:fc:
         b9:fb:ee:b7:90:51:e7:75:be:7a:1a:36:a8:da:cd:27:fb:6e:
         04:f0:36:bd:b5:c6:22:2a:60:fc:1f:76:0c:30:d7:44:7d:c4:
         12:f0:d2:9e:6c:70:26:00:4d:de:4e:a3:b4:e9:5c:ee:fe:c6:
         84:22:a8:91:d1:3c:66:bc:0b:3c:2a:42:f1:67:76:7d:55:db:
         84:c9:ff:7e:21:4e:a0:42:3e:44:22:a2:83:cb:80:00:6e:31:
         d9:70:66:2b:5d:16:2e:4c:1c:7a:e2:77:c1:6a:37:70:8d:8f:
         69:53:c5:b2:e0:63:a9:13:77:a8:05:9d:8b:fa:ee:41:af:03:
         9b:2f:ac:f6:9a:31:41:30:0a:04:ef:73:87:22:06:ec:8f:c3:
         3e:52:4d:7b:56:5a:e7:ea:59:ac:8d:8e:58:09:97:77:48:34:
         b3:6b:8e:50:d7:d3:0d:d1:67:80:04:8d:e9:fb:ea:93:49:f8:
         17:09:9d:c7:d9:ea:0b:ee:5e:26:22:4e:10:ae:2e:49:30:fd:
         30:28:9e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:14 2026 by rpki-client