Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
File:                     ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json)
Hash identifier:          rfIQvCYyActUNwWBk3x9NRgASaC+GkonOpj2yqLQHsM=
Subject key identifier:   41:38:DA:C9:1E:E0:FB:32:02:B8:EF:7F:28:A8:7C:5C:49:B0:9A:FC
Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
Certificate issuer:       /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
Manifest number:          88
Signing time:             Thu 11 Jun 2026 09:51:10 +0000
Manifest this update:     Thu 11 Jun 2026 09:51:10 +0000
Manifest next update:     Thu 18 Jun 2026 09:51:10 +0000
Files and hashes:         1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: k6/uHlTKOlxHEyTnz3J4jvcTTOEQcTIyUSqpwH95WpU=)
                          2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: ywYpRYCAQwXCZMjr3c7Rlx0ujNmnV92c95uYASJL2t0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
                          rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 09:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
        Validity
            Not Before: Jun 11 09:51:10 2026 GMT
            Not After : Jun 18 09:51:10 2026 GMT
        Subject: CN=6a2a850e-6882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:49:98:b4:27:0e:fd:2f:a1:27:74:68:ba:
                    83:dd:f4:fd:51:ae:bd:11:34:33:e7:69:e3:6f:10:
                    76:75:f8:ae:3b:58:4e:f9:5b:e1:07:2f:a7:11:a8:
                    6f:7c:dc:62:75:40:17:31:a1:12:85:9d:dc:55:56:
                    74:72:b7:a7:45:f9:98:eb:92:85:27:03:da:5d:3e:
                    72:77:86:48:8f:e3:be:42:d6:8d:8e:31:cd:e8:e0:
                    6d:a8:e9:a7:28:fa:bc:08:f5:52:0c:b6:76:78:00:
                    a7:5b:c1:dd:84:ee:d1:e6:f4:ee:44:43:eb:f0:ca:
                    23:7d:c7:ed:1a:bb:94:d1:f5:fd:2b:73:fe:61:54:
                    18:7c:a6:c6:b0:90:04:7e:58:ce:c5:c7:0f:d4:4d:
                    ab:bb:cf:fa:41:62:42:1e:45:6c:86:2b:d4:f5:ac:
                    22:70:11:14:d7:97:c9:70:b1:3a:fe:2d:50:b1:0f:
                    44:b8:78:10:ec:3a:b7:be:e0:51:9e:01:17:59:6d:
                    4a:50:8d:67:e6:42:9a:c5:4b:00:30:48:7b:bc:70:
                    a0:9b:d2:0e:bb:88:76:3c:3c:32:ab:ee:be:80:e0:
                    98:1d:33:7a:37:c4:7b:ea:f6:91:6a:84:bc:e5:62:
                    fc:92:72:65:9c:ed:7c:a9:72:8e:d6:89:48:0d:8f:
                    b3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:38:DA:C9:1E:E0:FB:32:02:B8:EF:7F:28:A8:7C:5C:49:B0:9A:FC
            X509v3 Authority Key Identifier:
                keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:27:6c:d8:6a:b0:57:7b:3e:7d:a9:17:63:60:dd:4b:4a:38:
         c0:9e:5a:c8:cb:8d:08:f8:16:8f:44:db:7e:56:93:cd:80:9a:
         ea:6b:8d:6b:27:6a:0e:18:9d:15:e1:da:a3:6d:df:8b:61:25:
         58:8d:97:3a:e7:75:cc:6e:d0:b4:5f:4b:69:b0:68:e5:07:2a:
         bc:3a:71:f6:e9:fe:60:be:a3:6e:d3:a9:18:67:37:43:b3:c9:
         95:c1:df:21:5e:71:4d:91:22:61:f3:8d:f5:07:4c:97:fa:74:
         bc:d7:68:dc:f3:ce:a7:14:a9:22:73:4f:65:8e:60:98:93:9b:
         1b:22:85:af:a2:97:80:fd:c6:5a:1e:19:f8:9b:98:29:75:27:
         4f:52:1b:69:d9:1b:78:8b:2a:eb:b7:5f:08:c9:eb:cb:22:bf:
         46:9a:d9:a0:e9:98:e7:8d:b3:31:89:e7:99:f7:09:a6:a4:90:
         9c:62:f2:ae:01:a0:02:0c:a3:59:dd:8d:00:a9:0a:96:60:d5:
         90:42:15:77:05:f0:27:58:db:52:0e:e0:88:d7:2c:57:8a:44:
         6c:bc:ad:63:fe:3d:09:98:98:52:52:f2:66:4c:0a:1c:02:77:
         18:7f:57:43:21:fd:9a:fc:b5:a7:c5:03:53:4f:49:07:48:20:
         71:b8:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:28 2026 by rpki-client