Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
File:                     zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json)
Hash identifier:          xzwYCMRrgwTyJQoFOoOTcauvrAg7/gmhhDnCBgmrmgc=
Subject key identifier:   BF:C6:AC:7C:7B:A9:1A:81:09:73:35:1C:2F:74:34:FF:FF:18:E8:27
Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
Certificate issuer:       /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
Manifest number:          0191
Signing time:             Fri 17 Apr 2026 04:07:11 +0000
Manifest this update:     Fri 17 Apr 2026 04:07:11 +0000
Manifest next update:     Fri 24 Apr 2026 04:07:11 +0000
Files and hashes:         1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: FVmU72HM9NKdFiNZoXbL++ym7C7DRZwEy13KO2MMKXM=)
                          2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: mDopMfVTaRsFnm6rlLIEGyxqISgf4DxErZsfORfZaA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
                          rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
        Validity
            Not Before: Apr 17 04:07:11 2026 GMT
            Not After : Apr 24 04:07:11 2026 GMT
        Subject: CN=69e1b1ef-cb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c4:9b:0f:5d:9c:79:9e:a8:1b:4e:8e:93:c3:
                    29:03:16:e1:00:c2:0f:0e:63:2c:8c:21:1b:7e:d7:
                    55:c5:b6:da:d2:47:aa:5b:46:19:f6:40:16:39:2f:
                    26:83:d6:28:e5:92:56:cf:fd:1f:bf:a0:62:7f:81:
                    8f:6d:14:7c:dc:83:66:97:9d:28:1a:86:c7:70:f9:
                    cf:a3:ae:16:89:1b:d0:cf:72:d1:b8:12:5a:d9:4c:
                    6e:9a:0e:33:c5:c6:91:e8:58:e8:7b:95:ba:3b:45:
                    5a:14:d0:a9:da:de:1d:95:6b:1c:84:d5:f1:d6:d4:
                    c6:4f:75:33:61:93:bf:43:91:ae:f8:3a:ce:10:b8:
                    77:ef:49:42:99:d5:9b:ca:01:96:1b:58:7f:ab:c0:
                    6b:4a:23:01:3c:36:0b:34:48:6c:9e:88:a1:af:05:
                    36:94:21:f2:b1:14:13:4e:64:dd:57:99:e7:1e:f7:
                    53:f5:ff:f5:65:92:a5:d0:5e:59:e6:3d:c2:92:d8:
                    d1:fc:95:90:f6:77:83:fa:3b:2f:6c:f8:64:93:75:
                    e3:9b:17:30:c9:8a:5a:15:37:ec:17:9a:2e:ae:c7:
                    2d:41:2c:c6:6e:83:08:ee:97:1b:2d:a7:6f:b6:e7:
                    70:d9:33:fb:8c:94:c8:cb:70:d5:23:fe:01:f6:59:
                    d3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C6:AC:7C:7B:A9:1A:81:09:73:35:1C:2F:74:34:FF:FF:18:E8:27
            X509v3 Authority Key Identifier:
                keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3b:74:ed:49:73:a3:48:f9:45:c8:70:d8:f9:4b:1f:d8:80:
         58:d4:96:eb:ea:99:04:71:85:d8:53:d8:d8:3b:26:26:67:40:
         9b:6c:84:4b:6a:94:22:6c:ed:9f:31:86:81:c1:cb:e4:9c:dc:
         4c:63:3d:a2:88:c8:2a:8c:03:c8:80:48:06:0a:88:76:ee:af:
         d1:c2:33:bc:89:da:f8:31:18:17:f8:fb:0a:23:46:e2:d4:3c:
         b3:a7:a4:be:be:9f:c9:3c:0b:22:ee:13:ea:b6:00:6a:a2:ec:
         ca:e1:68:c3:a0:9b:1d:a5:4a:61:e8:81:90:c6:60:9d:1b:06:
         6d:b3:c6:d4:34:15:4c:1a:ae:12:22:77:6c:70:fc:34:a3:2b:
         91:2d:15:c0:19:1a:f7:1c:02:19:f3:2d:d7:70:5c:5e:cb:4c:
         4f:59:84:ab:6f:cf:35:3b:47:24:fd:6e:b9:37:13:ca:e4:08:
         af:b5:4f:69:b6:b0:9f:9e:86:d9:81:63:09:b5:fd:cf:cb:47:
         30:2d:33:48:0f:93:74:20:a1:4d:04:1f:fb:96:1a:4c:bd:05:
         e4:17:05:98:b0:45:9a:7b:72:95:59:8c:eb:65:43:95:68:8e:
         6f:b8:e6:b5:66:b0:53:f8:98:31:6c:b8:be:c6:b5:45:af:5a:
         a8:55:c1:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQwMEUxMTAvBgNVBAUTKENFNkM0NkY4MDJCMTVCOENGNEFEQTM0NUE4Mjg4QUQ2
RTdGQTUzNUUwHhcNMjYwNDE3MDQwNzExWhcNMjYwNDI0MDQwNzExWjAYMRYwFAYD
VQQDEw02OWUxYjFlZi1jYjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA38SbD12ceZ6oG06Ok8MpAxbhAMIPDmMsjCEbftdVxbba0keqW0YZ9kAWOS8m
g9Yo5ZJWz/0fv6Bif4GPbRR83INml50oGobHcPnPo64WiRvQz3LRuBJa2Uxumg4z
xcaR6Fjoe5W6O0VaFNCp2t4dlWschNXx1tTGT3UzYZO/Q5Gu+DrOELh370lCmdWb
ygGWG1h/q8BrSiMBPDYLNEhsnoihrwU2lCHysRQTTmTdV5nnHvdT9f/1ZZKl0F5Z
5j3CktjR/JWQ9neD+jsvbPhkk3XjmxcwyYpaFTfsF5oursctQSzGboMI7pcbLadv
tudw2TP7jJTIy3DVI/4B9lnTswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/GrHx7
qRqBCXM1HC90NP//GOgnMB8GA1UdIwQYMBaAFM5sRvgCsVuM9K2jRagoitbn+lNe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DNTJCMDI2NEQ5
NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0ejByYU5GcUNpSzF1ZjZV
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3pteEctQUt4VzR6MHJhTkZxQ2lLMXVmNlUxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDAwRS9DNTJCMDI2NEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0
ejByYU5GcUNpSzF1ZjZVMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANzt07Ulzo0j5Rchw2PlLH9iAWNSW6+qZBHGF2FPY2DsmJmdAm2yES2qUImzt
nzGGgcHL5JzcTGM9oojIKowDyIBIBgqIdu6v0cIzvIna+DEYF/j7CiNG4tQ8s6ek
vr6fyTwLIu4T6rYAaqLsyuFow6CbHaVKYeiBkMZgnRsGbbPG1DQVTBquEiJ3bHD8
NKMrkS0VwBka9xwCGfMt13BcXstMT1mEq2/PNTtHJP1uuTcTyuQIr7VPabawn56G
2YFjCbX9z8tHMC0zSA+TdCChTQQf+5YaTL0F5BcFmLBFmntylVmM62VDlWiOb7jm
tWawU/iYMWy4vsa1Ra9aqFXBKA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:23 2026 by rpki-client