Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
File:                     Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json)
Hash identifier:          gri579nOZjrxpbcOoQqzuBKUS0cbAdJ2JHz46F33xS4=
Subject key identifier:   72:B7:B6:3F:34:CA:99:89:9C:66:61:36:8D:02:34:06:3F:1D:6D:1A
Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
Certificate issuer:       /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Certificate serial:       0404
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
Manifest number:          0404
Signing time:             Thu 16 Apr 2026 20:28:36 +0000
Manifest this update:     Thu 16 Apr 2026 20:28:35 +0000
Manifest next update:     Thu 23 Apr 2026 20:28:35 +0000
Files and hashes:         1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: Q/NOa0Ephzns19ayOheuJFXSOxxu8YZ78roIDxruVxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028 (0x404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
        Validity
            Not Before: Apr 16 20:28:35 2026 GMT
            Not After : Apr 23 20:28:35 2026 GMT
        Subject: CN=69e14673-5c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:80:dc:ff:5a:4e:d2:9d:a5:6f:03:fd:87:
                    c8:ad:fc:99:71:4a:5a:26:8d:3f:38:1e:4a:e4:ab:
                    c7:e1:84:0e:34:43:d1:34:80:a7:0a:96:15:7e:2e:
                    26:f0:dc:d7:4e:df:c7:78:da:df:f8:07:8b:a3:ea:
                    42:69:2a:10:41:62:ec:55:02:2f:b6:70:83:a9:86:
                    22:d4:94:d9:1c:d5:f8:31:0f:64:ef:e3:3f:7f:65:
                    a6:4f:81:6f:0e:d8:b6:30:4b:67:31:8c:9b:cc:6a:
                    b5:88:c6:c3:df:15:f0:05:8b:d2:6e:64:4d:51:16:
                    e9:c4:7b:09:b2:b3:c9:e5:82:b5:01:17:2c:1e:59:
                    8a:4a:83:5d:30:47:c9:4a:a9:fd:3c:22:9b:1f:c7:
                    b5:cc:a1:ee:d2:b1:eb:5d:87:8c:8f:fa:dd:39:d6:
                    0b:67:4c:6b:04:64:aa:a0:d4:6a:c9:88:e4:0d:4f:
                    a2:65:ad:72:e3:2c:ac:cd:f2:9f:c5:3b:b5:91:97:
                    a6:60:0f:8a:d3:1e:0f:66:77:1f:6b:7a:9a:42:24:
                    18:df:3c:0d:8b:b8:64:92:c6:3d:92:37:04:b3:6d:
                    08:0a:f3:4e:63:ca:c7:e0:3e:1d:bd:c9:53:8a:2c:
                    76:be:dc:db:c8:63:7e:2e:63:6c:54:98:f9:e2:c5:
                    ca:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B7:B6:3F:34:CA:99:89:9C:66:61:36:8D:02:34:06:3F:1D:6D:1A
            X509v3 Authority Key Identifier:
                keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2b:ff:5d:e7:51:d0:dc:4b:28:87:ed:e3:78:a6:80:dc:5f:
         a6:39:b3:15:70:2e:1f:a6:a9:40:cc:ef:b3:e3:f4:82:23:34:
         17:70:16:c0:0a:70:e2:b9:42:37:bc:0e:51:54:4b:7d:02:03:
         fd:43:c4:75:d2:e6:e7:65:83:12:1d:5b:43:d8:42:14:df:8d:
         f3:0c:e5:c8:34:8a:8a:8a:b9:e2:f5:1a:3b:4b:84:ee:ec:57:
         c6:2f:94:9f:a0:ff:94:16:fb:25:44:c1:dd:61:d4:dd:12:94:
         cf:8d:c2:52:f3:35:a5:d3:4a:86:b1:37:fb:75:22:3f:2b:36:
         7e:3b:2a:39:ba:e4:06:d8:69:86:33:a1:ae:52:3e:12:fa:b8:
         b2:ac:a1:a4:64:f2:de:2b:34:47:c4:6b:86:b2:cd:7e:86:b9:
         1f:5b:89:84:af:45:1e:66:af:94:bc:d5:68:2a:43:1f:5d:8c:
         0c:07:38:f8:94:bd:17:3c:58:57:8c:35:39:0f:7e:68:b2:4d:
         ad:fd:48:3b:19:d7:76:5b:ec:14:b3:c4:73:b2:19:6f:a5:4d:
         eb:b0:7e:18:69:7d:1b:48:5b:b6:f9:03:3c:51:7d:f2:6a:c9:
         29:f6:f0:59:14:fe:ba:89:89:97:ea:f1:e2:69:60:84:07:36:
         96:60:7b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:22:00 2026 by rpki-client