Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
File:                     zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft (raw, json)
Hash identifier:          ZMVi5TIEk2WSaEFSxlU/Pkfy/Bo8yjA+nxWH8SEByDg=
Subject key identifier:   D1:F8:0B:14:EB:25:F0:1D:0E:93:61:7A:00:F1:1E:37:25:EA:FE:ED
Authority key identifier: CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
Certificate issuer:       /CN=A91E8FFF/serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
Manifest number:          4C
Signing time:             Mon 01 Jun 2026 09:07:12 +0000
Manifest this update:     Mon 01 Jun 2026 09:07:11 +0000
Manifest next update:     Mon 08 Jun 2026 09:07:11 +0000
Files and hashes:         1: zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl (hash: HmXM9dRtDVqpA4Jei6onN97sMOY4V3bQM/7RpwniAjc=)
                          2: DBA60106EED111F0AB3DEEA1736F56BC.roa (hash: Zm5NVQiX1B1lMh6YYC6ofTBSfpDnYcLSn7pw+rOzSFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8FFF, serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
        Validity
            Not Before: Jun  1 09:07:11 2026 GMT
            Not After : Jun  8 09:07:11 2026 GMT
        Subject: CN=6a1d4bc0-6dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c1:08:01:83:d7:a3:5b:a1:7b:7a:10:f1:1a:
                    b2:83:53:6c:52:0d:3e:c1:51:5f:cb:0d:01:fd:0f:
                    aa:c2:7d:ab:1e:7f:0f:11:b4:81:46:f8:09:9a:16:
                    68:c7:73:7a:7e:ca:2a:b3:9c:f8:5c:f6:f1:3b:06:
                    fd:36:17:13:f2:b2:b5:ee:e9:59:c3:a7:35:4c:1f:
                    62:4a:25:73:d6:a8:68:0b:63:54:f0:49:0d:cf:d8:
                    3b:1d:2a:d3:14:ba:f4:d8:26:7b:3b:1b:78:23:f1:
                    39:9e:a0:a8:1a:5c:99:a4:c5:8f:e6:6c:98:5a:12:
                    31:9e:f7:8f:d8:98:0f:fd:36:73:79:48:9c:6e:82:
                    29:0b:52:c7:46:88:6f:fb:dd:a0:27:47:ac:41:09:
                    f7:21:67:b9:4f:b2:e6:dd:97:0d:ce:36:2d:e9:09:
                    c9:e6:bc:57:d6:34:5d:88:1a:3c:3e:0b:f4:6a:67:
                    fe:c3:b3:a4:ff:2d:be:ea:ed:8c:2a:98:47:68:74:
                    52:9d:1e:2c:74:db:5e:a5:6a:05:13:9f:86:10:b6:
                    8d:f4:f7:2c:5c:ac:a0:6a:9e:ba:e6:c4:40:29:79:
                    36:98:f4:ff:23:f1:07:15:9b:cd:82:d0:92:d0:d3:
                    11:86:94:1a:9f:d8:b9:c4:1f:20:ac:b7:cb:4d:10:
                    06:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F8:0B:14:EB:25:F0:1D:0E:93:61:7A:00:F1:1E:37:25:EA:FE:ED
            X509v3 Authority Key Identifier:
                keyid:CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b4:b5:b0:92:6f:b7:8e:de:c0:c2:c1:8e:d6:3d:71:99:2a:
         0e:9a:e7:e4:a4:2c:ef:70:7b:aa:bb:d3:7c:00:50:75:b8:db:
         a9:b1:98:c0:b9:f8:26:43:09:86:4b:71:af:02:30:c3:43:f1:
         2e:9a:07:20:76:45:1b:9c:6c:49:2e:8d:bd:95:56:53:b2:e4:
         00:08:47:0c:cc:1d:e7:85:7b:f1:61:d1:02:b0:4d:56:a0:f4:
         c7:ce:f8:77:6c:fa:4e:13:6c:44:1b:8e:8d:ce:24:5b:3c:54:
         5e:07:d5:d0:d3:4c:f7:12:01:e0:1b:36:80:93:d1:03:78:2a:
         3e:63:44:c4:bf:48:d1:ec:f4:71:7c:ce:2b:36:af:9b:39:4a:
         79:ad:bc:22:a1:4b:08:af:db:d0:3b:9b:df:fe:36:25:07:6e:
         60:8e:83:b2:0d:be:99:81:0c:96:27:ac:59:4c:0f:cd:f3:77:
         92:24:7a:a8:5a:9c:b4:c8:92:74:99:db:6b:f5:75:27:ee:a9:
         57:b2:cd:b1:dc:97:d4:e9:3f:66:9c:6f:93:b2:bb:3a:30:1c:
         ab:a7:b4:ec:f3:e0:54:2d:37:d1:a9:56:12:a3:ab:43:fa:bb:
         1a:d8:96:91:78:cb:cf:52:5b:8a:7b:30:c7:f2:e7:54:65:59:
         18:b5:f4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:50:51 2026 by rpki-client