Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
File:                     ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json)
Hash identifier:          mwtJjteXS3NMWMjcjCy/23C7QTlcF+p1Zg61NS4CbpQ=
Subject key identifier:   DE:ED:C7:A2:61:74:A2:75:26:59:9D:1B:1C:58:56:97:C5:84:3A:B3
Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
Certificate issuer:       /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
Manifest number:          0160
Signing time:             Fri 19 Jun 2026 05:07:21 +0000
Manifest this update:     Fri 19 Jun 2026 05:07:20 +0000
Manifest next update:     Fri 26 Jun 2026 05:07:20 +0000
Files and hashes:         1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: vRudIuBYxPOCzFJqV0j0iQGOFIaCZCmrmkb4Uy63HAw=)
                          2: 92EBC90CABD111F0B4462F16C4F9AE02.roa (hash: Y/OOSY60AbWXfzo+A9kK6oMwS+RTIvrW3ZiwtXUzU20=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
                          rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Jun 2026 05:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
        Validity
            Not Before: Jun 19 05:07:20 2026 GMT
            Not After : Jun 26 05:07:20 2026 GMT
        Subject: CN=6a34ce89-4c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:75:e3:ce:ea:c3:28:0e:21:de:f4:95:4f:
                    12:de:08:85:4c:f2:fa:56:45:68:48:e4:97:e8:f0:
                    28:c7:1b:79:97:a7:13:e6:61:11:00:04:f5:ec:98:
                    7c:3d:53:3f:72:4f:7d:79:6a:cc:67:6e:16:c7:d1:
                    6c:e6:86:1f:7e:4e:41:52:4f:20:a2:83:63:10:79:
                    7d:70:95:08:e4:85:a0:6f:78:bd:3b:59:d8:81:33:
                    27:ca:ba:a5:b4:5e:38:19:4c:78:79:1f:b6:03:71:
                    37:79:f7:6a:74:04:ca:55:11:5f:9d:5f:15:94:6e:
                    6d:c1:4f:4a:d0:3c:ba:aa:91:ac:c9:0f:64:53:ee:
                    a3:c7:c8:57:ce:4a:2e:9c:af:99:bf:fa:37:29:04:
                    e4:3a:84:bf:11:d7:fb:0f:0b:f3:0e:6d:10:c1:3b:
                    63:00:d9:42:d7:ff:ab:08:49:51:9f:f9:40:93:e1:
                    f5:77:b8:96:a5:15:6e:f6:7d:f9:ec:4e:dc:55:96:
                    f6:a0:1b:4b:26:75:7f:51:70:5e:80:46:ab:4d:ad:
                    88:a6:11:b3:aa:0c:87:c7:13:1e:7a:f7:79:84:03:
                    b9:ea:8d:77:14:01:4a:04:80:1b:c9:b0:e7:2f:89:
                    b2:b6:de:a1:ef:a2:9c:61:dc:05:8f:ea:52:48:22:
                    fc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:ED:C7:A2:61:74:A2:75:26:59:9D:1B:1C:58:56:97:C5:84:3A:B3
            X509v3 Authority Key Identifier:
                keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d7:4e:24:42:d1:d5:c6:ef:fa:c7:99:fa:41:e8:f6:bb:a1:
         74:04:35:50:5f:94:d8:e4:db:c5:ef:aa:15:be:5a:cb:2b:2f:
         6f:82:1a:3c:11:aa:60:bb:dd:53:18:72:fc:f0:6a:02:e0:78:
         1e:d3:52:2c:97:74:ef:26:61:9f:7f:17:c7:95:d8:4e:9e:0f:
         21:2d:ee:17:0c:6f:31:a9:c2:65:f5:4d:4f:11:8e:32:0a:56:
         b5:49:cc:d2:62:78:53:bd:f5:7b:4a:57:82:60:10:23:c2:1c:
         de:7a:c1:cd:e2:52:fd:88:04:d7:9d:cf:ef:52:29:0e:c0:fb:
         d8:5f:39:92:30:fb:a2:69:5b:b6:f0:e7:27:18:91:4e:f7:35:
         85:d4:53:51:ee:30:2d:f4:c8:dc:92:6f:78:7e:6a:a2:e9:a4:
         c0:2a:2d:d1:24:1e:b5:a4:15:67:d5:44:f8:b5:ca:1a:52:cb:
         cc:4f:36:70:c4:8f:d4:33:61:9f:8e:43:ab:5f:21:32:40:55:
         01:2a:06:c9:02:20:08:7f:3e:f6:51:67:d4:6a:f1:a7:0d:ae:
         b0:f6:c8:14:c0:2f:6a:83:c8:c7:c4:56:67:76:7a:1e:13:ac:
         46:18:a4:da:61:77:31:a5:a0:65:0a:5d:3d:b8:41:09:75:d3:
         1b:8c:8a:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc3RjMxMTAvBgNVBAUTKDY1MTE0QjE3NDNGRDYwREQ3NzI4REVFMUU4NUI0OUVF
QTFCRjBEQUQwHhcNMjYwNjE5MDUwNzIwWhcNMjYwNjI2MDUwNzIwWjAYMRYwFAYD
VQQDEw02YTM0Y2U4OS00YzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq+h1487qwygOId70lU8S3giFTPL6VkVoSOSX6PAoxxt5l6cT5mERAAT17Jh8
PVM/ck99eWrMZ24Wx9Fs5oYffk5BUk8gooNjEHl9cJUI5IWgb3i9O1nYgTMnyrql
tF44GUx4eR+2A3E3efdqdATKVRFfnV8VlG5twU9K0Dy6qpGsyQ9kU+6jx8hXzkou
nK+Zv/o3KQTkOoS/Edf7DwvzDm0QwTtjANlC1/+rCElRn/lAk+H1d7iWpRVu9n35
7E7cVZb2oBtLJnV/UXBegEarTa2IphGzqgyHxxMeevd5hAO56o13FAFKBIAbybDn
L4mytt6h76KcYdwFj+pSSCL8qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7tx6Jh
dKJ1JlmdGxxYVpfFhDqzMB8GA1UdIwQYMBaAFGURSxdD/WDddyje4ehbSe6hvw2t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdGMy85NEVGQ0MwQzVC
OUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlOMTNLTjdoNkZ0SjdxR19E
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pSRkxGMFA5WU4xM0tON2g2RnRKN3FHX0RhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzdGMy85NEVGQ0MwQzVCOUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlO
MTNLTjdoNkZ0SjdxR19EYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVNdOJELR1cbv+seZ+kHo9ruhdAQ1UF+U2OTbxe+qFb5ayysvb4IaPBGqYLvd
Uxhy/PBqAuB4HtNSLJd07yZhn38Xx5XYTp4PIS3uFwxvManCZfVNTxGOMgpWtUnM
0mJ4U731e0pXgmAQI8Ic3nrBzeJS/YgE153P71IpDsD72F85kjD7omlbtvDnJxiR
Tvc1hdRTUe4wLfTI3JJveH5qoumkwCot0SQetaQVZ9VE+LXKGlLLzE82cMSP1DNh
n45Dq18hMkBVASoGyQIgCH8+9lFn1Grxpw2usPbIFMAvaoPIx8RWZ3Z6HhOsRhik
2mF3MaWgZQpdPbhBCXXTG4yKeg==
-----END CERTIFICATE-----
Generated at Sat Jun 20 08:21:17 2026 by rpki-client