Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
File:                     ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json)
Hash identifier:          o3zoFcRSPImVM1J663uJVVTyZNLpyXCfokH68YhVxsM=
Subject key identifier:   42:0D:8F:05:FD:90:E9:CB:4B:9B:EF:AA:DF:35:52:B4:45:5D:B2:33
Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3
Certificate issuer:       /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
Manifest number:          0117
Signing time:             Mon 01 Jun 2026 06:41:07 +0000
Manifest this update:     Mon 01 Jun 2026 06:41:07 +0000
Manifest next update:     Mon 08 Jun 2026 06:41:07 +0000
Files and hashes:         1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: Ik5NcQCaPO4vUqXDlkNpzDC0hOUVcCM9cfj6nyO0dMI=)
                          2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: svfCZY/4ijPFg+GD8JzFGuMZM/fHEdmUD+EacNaNCNg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl
                          rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
        Validity
            Not Before: Jun  1 06:41:07 2026 GMT
            Not After : Jun  8 06:41:07 2026 GMT
        Subject: CN=6a1d2983-0b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:2c:72:39:1c:0a:d6:ca:92:d6:a7:a7:03:
                    b6:82:c9:f3:d5:8d:7f:5a:bf:11:b3:00:cc:10:fa:
                    38:72:e6:51:6f:c2:59:f2:20:f7:7e:20:0b:e2:b5:
                    a8:a2:bf:3c:5a:65:54:db:5d:5f:37:e6:e8:9b:01:
                    1e:44:c0:55:ab:40:5c:60:c2:dc:7b:3e:9b:5e:c3:
                    80:ca:76:a9:17:ad:e9:c6:71:a1:37:30:01:4d:d7:
                    e1:ca:d6:87:50:a5:c4:49:65:cc:f8:1e:d1:40:2c:
                    2e:ef:9f:27:54:8a:a3:bd:23:07:c3:3d:d1:b5:2b:
                    b3:be:7e:16:29:35:a3:8d:86:ac:79:6d:82:0a:43:
                    b8:42:85:a9:4c:e5:1e:70:97:79:fe:3d:92:e0:05:
                    0f:c9:e9:6f:88:ce:11:22:80:a0:59:c4:b0:36:31:
                    7a:66:85:e6:65:2c:bb:6e:aa:eb:a6:01:ee:78:c4:
                    8f:96:fa:a4:9f:c9:fa:e8:12:9e:47:9d:b5:e7:2f:
                    81:58:a3:5d:d3:c8:a9:77:4a:54:2d:7c:eb:8c:82:
                    e2:34:11:88:8e:11:8f:0c:db:2f:eb:5b:75:0b:f4:
                    cb:87:d2:6a:19:93:8a:4e:23:1a:c9:b2:37:1e:0c:
                    ed:2a:a9:e6:ce:ea:91:9b:32:9a:0c:27:a2:24:19:
                    cb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0D:8F:05:FD:90:E9:CB:4B:9B:EF:AA:DF:35:52:B4:45:5D:B2:33
            X509v3 Authority Key Identifier:
                keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:83:c4:a9:3c:df:6f:c4:50:ae:f9:82:7a:e8:e1:d7:f5:d6:
         e5:44:14:5d:6d:69:69:30:34:99:60:ad:e5:14:03:f5:8b:56:
         35:27:65:b7:28:e2:58:da:e7:3d:1e:a6:66:fb:1f:62:e1:b4:
         5b:3b:51:a5:9b:93:fe:93:03:56:34:58:d5:65:65:96:94:5b:
         93:b0:ee:0b:c1:15:d7:f0:a8:ab:d0:b7:5f:b7:f6:35:4e:c4:
         6d:4a:42:f8:aa:65:1e:ed:21:97:bf:7b:2b:b8:27:21:48:ae:
         d5:bd:51:00:2a:ef:82:52:a8:65:26:2a:0e:ed:d8:00:ff:df:
         74:40:1e:6c:5f:95:69:d1:a0:36:93:0d:a3:92:77:79:3f:c4:
         1f:87:3c:87:19:32:de:88:87:7e:ac:4e:bd:8c:46:1f:f7:13:
         ce:05:1c:2b:4e:34:b6:cb:66:6f:9f:3b:e1:f0:59:1b:03:f6:
         53:b5:94:5d:90:46:d8:f8:72:35:c3:1d:35:14:92:26:5c:9a:
         32:a2:5a:2d:d9:65:24:f7:31:57:5c:49:31:e1:f5:5d:02:0b:
         f3:c4:d2:55:26:23:8e:60:97:ce:4d:8d:71:68:9b:5d:a1:09:
         26:eb:d6:16:cb:c5:4a:64:df:24:2b:84:fa:e0:b7:71:f2:bd:
         0a:ed:62:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJDNjExMTAvBgNVBAUTKDY0RDJCM0Q2NUE1QzZDQ0U0RDA4RDc4RkZFREIyODU2
QjY0MUQ2QTMwHhcNMjYwNjAxMDY0MTA3WhcNMjYwNjA4MDY0MTA3WjAYMRYwFAYD
VQQDEw02YTFkMjk4My0wYjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvRAscjkcCtbKktanpwO2gsnz1Y1/Wr8RswDMEPo4cuZRb8JZ8iD3fiAL4rWo
or88WmVU211fN+bomwEeRMBVq0BcYMLcez6bXsOAynapF63pxnGhNzABTdfhytaH
UKXESWXM+B7RQCwu758nVIqjvSMHwz3RtSuzvn4WKTWjjYaseW2CCkO4QoWpTOUe
cJd5/j2S4AUPyelviM4RIoCgWcSwNjF6ZoXmZSy7bqrrpgHueMSPlvqkn8n66BKe
R5215y+BWKNd08ipd0pULXzrjILiNBGIjhGPDNsv61t1C/TLh9JqGZOKTiMaybI3
HgztKqnmzuqRmzKaDCeiJBnLeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEINjwX9
kOnLS5vvqt81UrRFXbIzMB8GA1UdIwQYMBaAFGTSs9ZaXGzOTQjXj/7bKFa2Qdaj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80NDZCRDdBMkI2
QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JNNU5DTmVQX3Rzb1ZyWkIx
cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkM2MS80NDZCRDdBMkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JN
NU5DTmVQX3Rzb1ZyWkIxcU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqIPEqTzfb8RQrvmCeujh1/XW5UQUXW1paTA0mWCt5RQD9YtWNSdltyjiWNrn
PR6mZvsfYuG0WztRpZuT/pMDVjRY1WVllpRbk7DuC8EV1/Coq9C3X7f2NU7EbUpC
+KplHu0hl797K7gnIUiu1b1RACrvglKoZSYqDu3YAP/fdEAebF+VadGgNpMNo5J3
eT/EH4c8hxky3oiHfqxOvYxGH/cTzgUcK040tstmb5874fBZGwP2U7WUXZBG2Phy
NcMdNRSSJlyaMqJaLdllJPcxV1xJMeH1XQIL88TSVSYjjmCXzk2NcWibXaEJJuvW
FsvFSmTfJCuE+uC3cfK9Cu1iDQ==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:03 2026 by rpki-client