Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
File:                     ZvDB283xq8NO0RtGqQrjIBgCqVw.mft (raw, json)
Hash identifier:          pMspB7hT/EOyUm8tOg5nZosAwZiZMCSRhk7JGmS2xFA=
Subject key identifier:   6F:44:06:E5:EB:92:BC:33:AD:28:D7:0C:89:69:0B:FF:27:EE:54:0C
Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
Certificate issuer:       /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Certificate serial:       18F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
Manifest number:          18D5
Signing time:             Thu 16 Apr 2026 16:24:45 +0000
Manifest this update:     Thu 16 Apr 2026 16:24:45 +0000
Manifest next update:     Thu 23 Apr 2026 16:24:45 +0000
Files and hashes:         1: ZvDB283xq8NO0RtGqQrjIBgCqVw.crl (hash: frV5TcmkXhaSBRsGDXtr0vHjgOKIzSGFXNfZYyWojyI=)
                          2: 2E1E405E712D11EDA8C64C3DC4F9AE02.roa (hash: WT/ztJBPCnRbXAsKTFdhvipVvTOzMSRJMa+AX6jQ8aU=)
                          3: C3C44D22ECA311EEAD3CC112C4F9AE02.roa (hash: pqDSzaWYlQqUrgyay2m9Z4YNozIYTNWuZnCi/imo924=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
                          rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6387 (0x18f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AED4, serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
        Validity
            Not Before: Apr 16 16:24:45 2026 GMT
            Not After : Apr 23 16:24:45 2026 GMT
        Subject: CN=69e10d4d-6b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1d:63:8d:8a:05:8f:14:56:55:9a:ec:3a:83:
                    da:b1:b1:3b:d7:41:0b:9c:56:b9:eb:ad:65:33:84:
                    bd:50:d9:d4:1e:45:76:f0:7f:91:e5:70:f4:21:b8:
                    fc:89:18:d2:3a:67:ff:b9:3d:91:96:af:5d:eb:84:
                    d7:c0:4b:f5:39:78:ba:b5:02:32:67:cc:b8:20:31:
                    ee:a6:5b:39:9f:f9:b5:1e:5f:91:8e:aa:08:6e:58:
                    a1:dc:ad:81:21:fe:e8:f0:c2:3b:9c:7a:50:45:0c:
                    5a:9c:03:b4:d2:33:c8:10:c5:cf:dd:fc:1d:49:ee:
                    a6:89:18:d8:be:9a:1c:c3:a4:b9:cd:36:38:2a:8b:
                    a9:f0:3a:a2:83:2c:68:52:72:f3:02:ef:80:c9:72:
                    1d:0c:19:4d:d0:bd:27:01:d2:6d:c9:92:dd:08:75:
                    c8:d2:78:d2:06:8f:cd:b3:93:cf:7e:01:f6:f7:02:
                    74:81:7d:ce:91:6d:90:79:74:ae:aa:9f:c7:ba:1e:
                    34:84:f1:f0:d1:9e:d3:bf:fd:c1:c9:aa:ba:06:54:
                    1f:e5:7c:e5:9a:8f:3c:4c:d8:fc:64:23:bd:69:81:
                    ca:80:84:0f:f3:29:53:f7:64:49:89:90:56:83:59:
                    f2:b2:a4:04:e4:06:e8:20:e1:b8:fd:6b:98:e9:18:
                    f3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:44:06:E5:EB:92:BC:33:AD:28:D7:0C:89:69:0B:FF:27:EE:54:0C
            X509v3 Authority Key Identifier:
                keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d8:70:41:5f:22:d4:dc:ee:10:a4:db:0d:a8:52:c1:2b:f7:
         0a:9c:81:a4:6a:75:17:f3:65:39:1a:3e:0a:e7:0d:3f:3d:3d:
         33:bc:f4:8e:53:8a:d8:64:f7:4f:f9:61:f2:79:0e:0f:be:1f:
         e4:4d:a6:d7:7e:7b:2f:94:b0:50:81:7e:1b:cf:e3:91:10:8a:
         9e:c3:79:ac:82:9f:88:ec:af:6b:4d:79:2c:94:29:e8:0a:ef:
         5a:75:ec:77:d9:da:66:22:87:7f:ae:97:33:5b:9a:5d:b7:3b:
         b8:63:cc:0c:2c:d1:e9:f4:37:ff:01:71:ac:78:0b:71:d9:e9:
         90:09:8c:01:61:da:cc:1a:e1:eb:71:2d:d0:63:73:ad:a7:43:
         9e:66:31:a4:2f:85:a3:67:57:4f:c8:d3:56:01:57:bd:33:b1:
         8f:1f:b6:1c:cf:49:14:6c:62:14:25:08:f7:dd:ac:58:30:30:
         c7:d8:0a:a9:35:7b:98:51:a4:28:9c:5b:4d:65:bf:b8:9c:1c:
         20:c7:f6:ec:ce:2f:ef:ee:e7:01:09:da:c9:a3:c9:0e:ff:b4:
         a5:00:32:2c:93:2d:b6:0e:56:71:f9:fc:5c:1d:8b:16:49:a3:
         f5:17:94:e4:af:a6:b8:6a:45:8a:39:65:52:1f:d7:15:80:da:
         b7:27:8c:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFFRDQxMTAvBgNVBAUTKDY2RjBDMURCQ0RGMUFCQzM0RUQxMUI0NkE5MEFFMzIw
MTgwMkE5NUMwHhcNMjYwNDE2MTYyNDQ1WhcNMjYwNDIzMTYyNDQ1WjAYMRYwFAYD
VQQDEw02OWUxMGQ0ZC02YjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnh1jjYoFjxRWVZrsOoPasbE710ELnFa5661lM4S9UNnUHkV28H+R5XD0Ibj8
iRjSOmf/uT2Rlq9d64TXwEv1OXi6tQIyZ8y4IDHupls5n/m1Hl+RjqoIblih3K2B
If7o8MI7nHpQRQxanAO00jPIEMXP3fwdSe6miRjYvpocw6S5zTY4Koup8Dqigyxo
UnLzAu+AyXIdDBlN0L0nAdJtyZLdCHXI0njSBo/Ns5PPfgH29wJ0gX3OkW2QeXSu
qp/Huh40hPHw0Z7Tv/3Byaq6BlQf5Xzlmo88TNj8ZCO9aYHKgIQP8ylT92RJiZBW
g1nysqQE5AboIOG4/WuY6RjziwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9EBuXr
krwzrSjXDIlpC/8n7lQMMB8GA1UdIwQYMBaAFGbwwdvN8avDTtEbRqkK4yAYAqlc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVENC9CRUM5QUM4MkIw
QkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4Tk8wUnRHcVFyaklCZ0Nx
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p2REIyODN4cThOTzBSdEdxUXJqSUJnQ3FWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUVENC9CRUM5QUM4MkIwQkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4
Tk8wUnRHcVFyaklCZ0NxVncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXdhwQV8i1NzuEKTbDahSwSv3CpyBpGp1F/NlORo+CucNPz09M7z0jlOK2GT3
T/lh8nkOD74f5E2m1357L5SwUIF+G8/jkRCKnsN5rIKfiOyva015LJQp6ArvWnXs
d9naZiKHf66XM1uaXbc7uGPMDCzR6fQ3/wFxrHgLcdnpkAmMAWHazBrh63Et0GNz
radDnmYxpC+Fo2dXT8jTVgFXvTOxjx+2HM9JFGxiFCUI992sWDAwx9gKqTV7mFGk
KJxbTWW/uJwcIMf27M4v7+7nAQnayaPJDv+0pQAyLJMttg5Wcfn8XB2LFkmj9ReU
5K+muGpFijllUh/XFYDatyeMUw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:25 2026 by rpki-client