Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
File:                     z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json)
Hash identifier:          Ztc9/TpEH1dbwQmboNrwDb5FIYzGg7bjNsB+HbFR0g0=
Subject key identifier:   9A:2D:E6:2C:C3:79:A3:79:15:5E:10:BA:2E:6D:2A:C3:A9:39:3B:A2
Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
Certificate issuer:       /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
Manifest number:          0112
Signing time:             Fri 17 Apr 2026 05:41:13 +0000
Manifest this update:     Fri 17 Apr 2026 05:41:13 +0000
Manifest next update:     Fri 24 Apr 2026 05:41:13 +0000
Files and hashes:         1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: HLbxx3OFjMhq49s1AMPK0eOWmHQxGBvKrAm5zdG0aoE=)
                          2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: 6I64utdnK0TaFg9y+W+RqybL90K1jeQS5liIOPne5so=)
                          3: F2DF64BAD28511F0A20E5C80C4F9AE02.roa (hash: XjB5jPSTt3eJTKS4dRa9T7cx4SalbQsD8ABjmrgjNZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl
                          rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
        Validity
            Not Before: Apr 17 05:41:13 2026 GMT
            Not After : Apr 24 05:41:13 2026 GMT
        Subject: CN=69e1c7f9-3f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:70:ff:46:b0:6c:f1:55:f9:d3:f8:9e:b7:
                    16:e6:85:4f:05:5e:d6:13:31:e4:1f:e0:6e:16:a2:
                    55:8a:3d:97:4a:a2:e7:7a:09:d5:79:51:4b:86:b7:
                    30:21:f4:6b:7e:02:74:f6:33:55:85:92:b3:06:9d:
                    41:51:3b:86:42:28:32:0e:ce:54:eb:37:b9:9c:b2:
                    73:83:87:19:86:bd:84:56:00:f6:45:fc:29:88:d1:
                    af:a0:a9:f2:5b:2b:a2:03:e0:c1:30:d3:e1:d9:69:
                    b5:b6:eb:82:9b:ad:c5:f7:dd:73:3e:56:25:f7:ee:
                    00:38:8c:80:3d:e2:4b:a0:52:b5:59:fe:dc:d4:18:
                    7d:74:91:5f:5e:51:e9:d4:eb:ad:c8:12:3f:53:89:
                    42:54:77:35:ca:f1:30:3e:77:88:08:cb:ca:80:90:
                    8e:57:72:e4:13:b0:88:02:e0:4b:67:b3:16:88:25:
                    1e:9a:98:0e:16:3a:26:7c:1b:aa:d7:68:67:b3:e3:
                    b6:bc:84:2a:be:8d:a1:90:85:0d:91:a2:54:5a:00:
                    51:78:0a:b7:bd:ae:77:c8:9a:dc:f8:2c:52:31:cc:
                    f9:36:4d:ab:ce:d3:f4:f3:fe:bc:1e:8b:fd:f7:bf:
                    1a:92:43:0c:1b:cd:bf:09:74:24:27:a0:b7:0c:78:
                    0e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2D:E6:2C:C3:79:A3:79:15:5E:10:BA:2E:6D:2A:C3:A9:39:3B:A2
            X509v3 Authority Key Identifier:
                keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ca:34:8b:63:50:98:fa:1d:08:71:97:42:5c:1a:ab:0d:04:
         b9:4d:f4:79:9d:01:84:05:fb:7f:a3:dd:f5:d8:9e:b2:da:24:
         f2:e6:26:72:30:fe:c3:27:b2:6d:fc:b4:10:34:31:ba:59:92:
         48:2d:39:ce:c2:9a:da:e5:b3:d1:ae:ae:32:7c:54:26:0c:c8:
         05:11:c6:80:28:a9:50:f6:05:b4:95:02:36:7f:a3:58:70:14:
         43:20:db:2d:4a:34:e3:d7:45:d8:e7:a5:5d:8a:d1:6e:bd:6d:
         44:d3:47:97:24:56:af:af:79:86:3b:a0:c1:ca:e3:9a:51:f7:
         64:45:e1:b7:60:1d:bb:af:3d:7e:8a:73:8a:6d:4c:e9:ea:3e:
         69:bb:19:b5:f5:44:0b:35:ec:f2:a9:eb:60:fb:d1:f8:4c:cc:
         a3:3f:55:8c:c6:c1:09:35:c9:53:11:8b:57:6d:7e:f8:42:e2:
         58:20:3a:eb:25:6c:00:b3:ff:a3:81:11:b1:45:f7:73:83:74:
         ff:3b:57:03:0e:1d:13:fd:a2:55:87:fb:7e:39:c5:a4:a9:0b:
         76:5e:19:6e:5c:52:c1:74:3f:53:9c:8a:79:2c:90:99:8f:e5:
         8f:34:61:1f:7a:d6:8f:54:37:e2:0a:2f:e0:c3:f5:ed:20:2d:
         20:47:f4:5b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU4N0UxMTAvBgNVBAUTKENGNzlDNjVGNEI1NTAxMEZCMjVDRTZDNDVCOEM5MTlE
QjA5M0EzMkQwHhcNMjYwNDE3MDU0MTEzWhcNMjYwNDI0MDU0MTEzWjAYMRYwFAYD
VQQDEw02OWUxYzdmOS0zZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApOFw/0awbPFV+dP4nrcW5oVPBV7WEzHkH+BuFqJVij2XSqLnegnVeVFLhrcw
IfRrfgJ09jNVhZKzBp1BUTuGQigyDs5U6ze5nLJzg4cZhr2EVgD2RfwpiNGvoKny
WyuiA+DBMNPh2Wm1tuuCm63F991zPlYl9+4AOIyAPeJLoFK1Wf7c1Bh9dJFfXlHp
1OutyBI/U4lCVHc1yvEwPneICMvKgJCOV3LkE7CIAuBLZ7MWiCUempgOFjomfBuq
12hns+O2vIQqvo2hkIUNkaJUWgBReAq3va53yJrc+CxSMcz5Nk2rztP08/68Hov9
978akkMMG82/CXQkJ6C3DHgORwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJot5izD
eaN5FV4Qui5tKsOpOTuiMB8GA1UdIwQYMBaAFM95xl9LVQEPslzmxFuMkZ2wk6Mt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS84NDI4QjlFNkEx
Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFRLXlYT2JFVzR5Um5iQ1Rv
eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTg3RS84NDI4QjlFNkExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFR
LXlYT2JFVzR5Um5iQ1RveTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG8o0i2NQmPodCHGXQlwaqw0EuU30eZ0BhAX7f6Pd9diestok8uYmcjD+wyey
bfy0EDQxulmSSC05zsKa2uWz0a6uMnxUJgzIBRHGgCipUPYFtJUCNn+jWHAUQyDb
LUo049dF2OelXYrRbr1tRNNHlyRWr695hjugwcrjmlH3ZEXht2Adu689fopzim1M
6eo+absZtfVECzXs8qnrYPvR+EzMoz9VjMbBCTXJUxGLV21++ELiWCA66yVsALP/
o4ERsUX3c4N0/ztXAw4dE/2iVYf7fjnFpKkLdl4ZblxSwXQ/U5yKeSyQmY/ljzRh
H3rWj1Q34gov4MP17SAtIEf0Ww==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:54:54 2026 by rpki-client