Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft
File:                     zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft (raw, json)
Hash identifier:          PhaCT3r2t/VcdlfWFHOKHf5KerKaManKhNwd9WRlAmo=
Subject key identifier:   FF:A4:FA:2E:E2:FB:07:9C:76:95:AA:38:D9:4E:B2:6B:9B:20:B2:E0
Authority key identifier: CC:85:09:D3:1F:B6:3A:8D:DD:6B:F2:D3:D8:4C:7B:C0:B2:BA:3F:C0
Certificate issuer:       /CN=A91EBFB0/serialNumber=CC8509D31FB63A8DDD6BF2D3D84C7BC0B2BA3FC0
Certificate serial:       0D58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft
Manifest number:          0D4A
Signing time:             Tue 02 Jun 2026 18:03:14 +0000
Manifest this update:     Tue 02 Jun 2026 18:03:13 +0000
Manifest next update:     Tue 09 Jun 2026 18:03:13 +0000
Files and hashes:         1: zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl (hash: hQan4thU61PtjErcAzRAgQnlurzPSO0qT5iyYS6m46I=)
                          2: F690CAECF87D11E9A746D05BC4F9AE02.roa (hash: OZ/ioEgGADPRLql8C0CzW0hllIVkp5mAts1YwLX06Vw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl
                          rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3416 (0xd58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBFB0, serialNumber=CC8509D31FB63A8DDD6BF2D3D84C7BC0B2BA3FC0
        Validity
            Not Before: Jun  2 18:03:13 2026 GMT
            Not After : Jun  9 18:03:13 2026 GMT
        Subject: CN=6a1f1ae2-8f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c5:ad:81:07:31:e8:4b:c7:ff:59:71:58:3a:
                    dc:23:fd:e4:be:1a:b8:50:2a:0a:c5:4b:27:42:25:
                    3e:d7:34:32:ac:31:e9:2f:a9:0c:12:70:42:5d:f7:
                    c2:e5:b5:30:e8:97:61:00:23:13:a5:68:99:b5:0c:
                    1b:a8:e2:70:0f:ee:2f:f7:a1:da:91:50:de:89:9a:
                    be:52:98:49:15:85:af:61:1e:89:d4:55:eb:5d:b6:
                    e5:68:87:d8:44:88:2f:66:fb:4b:f1:c2:84:10:b1:
                    39:80:f5:55:57:42:68:d0:e5:4b:de:84:7e:4b:ec:
                    ef:52:ce:3b:28:39:40:0c:24:74:43:00:d5:84:aa:
                    f0:2f:ae:c2:4f:71:a3:de:cf:cc:81:97:10:58:e2:
                    0e:47:c7:be:32:d2:63:31:b3:1e:27:5a:55:d6:9e:
                    0f:00:d5:3d:1a:7e:e3:94:0b:ea:f8:2c:f3:56:5d:
                    9f:50:47:05:41:d7:32:94:ee:4e:a8:dc:0c:96:a8:
                    c2:40:d8:3f:45:01:49:23:9d:43:2e:e7:ba:80:76:
                    15:48:ed:70:f7:86:74:01:2d:86:1a:68:ed:77:de:
                    31:4d:05:0b:6c:a9:c5:df:0c:b4:21:e6:d7:80:e9:
                    13:14:87:8e:73:7f:5d:b1:a2:d4:1e:50:48:ba:71:
                    ed:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A4:FA:2E:E2:FB:07:9C:76:95:AA:38:D9:4E:B2:6B:9B:20:B2:E0
            X509v3 Authority Key Identifier:
                keyid:CC:85:09:D3:1F:B6:3A:8D:DD:6B:F2:D3:D8:4C:7B:C0:B2:BA:3F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3a:9a:cc:32:30:40:00:04:eb:08:9f:8a:65:c7:f2:3f:ff:
         59:8e:bc:a6:f8:d9:24:65:b6:65:7b:1f:e6:90:15:83:2b:37:
         53:10:7c:1d:5e:5a:fe:7e:82:57:14:4d:f7:01:b9:3c:27:93:
         76:d4:44:1d:b5:e0:07:b9:dc:18:3f:22:56:9a:01:17:9d:b6:
         1c:42:d6:68:f7:e5:75:b9:1a:8d:cc:58:2c:ed:bc:2b:34:ea:
         f5:3a:3b:6e:d8:ff:d9:d0:66:ea:61:f9:31:1e:af:fc:ed:de:
         03:cd:4c:29:a4:58:16:2f:c7:10:83:ee:79:d6:90:50:14:e6:
         92:0e:4c:60:38:2f:91:12:60:48:b2:02:53:0f:af:07:d9:e9:
         13:55:2f:88:c1:cb:fa:df:2f:e9:eb:e4:b3:e1:93:c4:c7:96:
         93:57:5e:70:c0:1f:3a:cc:3c:d2:0c:1e:f8:33:fa:05:35:6e:
         91:f2:57:78:b1:ba:ba:e0:9b:27:37:16:2f:b2:f9:10:8c:be:
         b7:2e:b0:55:ad:dc:94:58:cc:44:fa:47:a6:78:e9:84:50:b2:
         fa:bd:6a:b6:01:95:d6:7f:a8:cc:63:42:de:36:0f:54:e1:9c:
         2e:f5:ab:5b:fe:71:73:ec:ec:87:7c:d3:ee:b3:69:52:6c:50:
         d3:a8:4f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:01:00 2026 by rpki-client