Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
File:                     z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json)
Hash identifier:          QruLx5F4MgJbZUttuZ7tqwXeB20TEFh8A4WcTMRUqp8=
Subject key identifier:   4D:F0:B4:14:FB:80:EB:15:39:CB:F6:45:6A:6B:61:79:AC:4F:7F:88
Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B
Certificate issuer:       /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B
Certificate serial:       020D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
Manifest number:          03B0
Signing time:             Sun 19 Apr 2026 02:43:40 +0000
Manifest this update:     Sun 19 Apr 2026 02:43:39 +0000
Manifest next update:     Sun 26 Apr 2026 02:43:39 +0000
Files and hashes:         1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: LK/oIVF1kPTmIgwCqsyWOCv0zWU4TRxk2oBpi6VOaXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl
                          rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B
        Validity
            Not Before: Apr 19 02:43:39 2026 GMT
            Not After : Apr 26 02:43:39 2026 GMT
        Subject: CN=69e4415c-c6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4f:15:c8:94:38:55:dd:13:95:c4:51:20:fb:
                    27:5d:da:e4:d5:c1:fb:75:dd:70:ea:d1:6f:ae:2d:
                    5e:fa:cf:aa:28:cb:26:20:1a:9f:1b:40:77:b0:52:
                    c1:0b:7d:df:f9:d0:83:4c:6b:0c:99:37:e7:02:21:
                    d8:56:44:5f:bc:db:e4:d6:5c:6e:a1:8d:02:d8:25:
                    d4:a4:d6:32:3d:d3:87:d4:62:ff:fa:bf:1a:53:45:
                    3b:f9:d0:ca:f0:63:16:85:d2:0f:1a:3a:a7:bd:26:
                    e3:64:68:b6:6d:f6:d7:8f:e7:75:6a:b2:0b:f2:b7:
                    04:a1:a4:c5:4e:da:06:ad:ab:76:9e:d1:0a:33:2e:
                    46:26:ef:4a:d8:66:1a:30:93:d3:bc:55:5f:96:5c:
                    82:80:bc:56:91:99:74:95:6a:fd:86:fa:bc:03:2c:
                    0b:38:01:54:c0:f5:3a:51:59:a6:98:d1:21:a6:a0:
                    6e:3a:c8:3e:32:d6:7b:ac:07:06:62:e3:7b:0a:7f:
                    c0:12:5c:38:63:b2:0d:55:b4:b0:0c:a4:e1:32:8b:
                    85:d7:4a:0d:3d:b2:7d:43:bb:5a:95:a8:fa:59:29:
                    2a:2e:14:83:e6:21:fe:f1:cb:4a:f0:ec:76:8d:44:
                    51:f6:30:ad:6d:a9:e5:8a:b8:11:55:d5:e0:f2:a3:
                    5a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F0:B4:14:FB:80:EB:15:39:CB:F6:45:6A:6B:61:79:AC:4F:7F:88
            X509v3 Authority Key Identifier:
                keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:0e:f2:2c:da:e4:3b:18:d0:10:a1:a3:78:34:f8:19:d8:a2:
         31:1f:93:e4:89:50:a0:a4:90:e3:e1:44:d6:8d:c3:e7:13:fc:
         63:56:a5:6d:ea:d4:51:77:d4:fa:39:b0:53:6f:bd:e5:7b:a5:
         ee:66:9c:b6:90:81:2b:18:bf:5f:81:2e:ee:5a:80:f6:5c:b7:
         49:74:3f:64:28:8c:f5:bf:75:56:f7:f5:d6:19:0b:e4:f5:a3:
         35:37:21:3e:86:7e:d7:6b:97:f1:48:16:2c:95:46:ed:78:f3:
         a7:22:16:32:b1:fc:db:cc:42:52:cb:55:67:d2:b7:73:ac:ad:
         78:11:42:f0:df:6b:8d:bf:75:1a:b8:e3:24:bf:e0:65:bd:64:
         b0:e6:de:e5:88:0d:78:64:5c:5b:35:18:2d:5f:89:35:de:24:
         f5:06:51:a6:0a:71:79:a5:06:b7:8f:cf:80:42:e6:01:7f:76:
         f2:86:64:9e:71:d4:8c:87:b8:8a:c3:bc:20:aa:76:70:74:ee:
         91:56:00:d4:55:f7:79:67:0a:69:b0:16:82:33:62:b8:8f:db:
         1e:19:1e:56:1e:43:3c:ce:8e:3d:cc:17:d6:3b:ff:3a:a7:ba:
         fc:83:05:c8:d1:f7:3f:7d:68:8c:dc:d5:44:6f:0a:da:65:4f:
         45:07:65:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYzRUQxMTAvBgNVBAUTKENGQjZGNjI4OTdFNzRCMEQwN0VGOTYwMEJBNzcwOTM5
MDVDQjg3NUIwHhcNMjYwNDE5MDI0MzM5WhcNMjYwNDI2MDI0MzM5WjAYMRYwFAYD
VQQDEw02OWU0NDE1Yy1jNmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzk8VyJQ4Vd0TlcRRIPsnXdrk1cH7dd1w6tFvri1e+s+qKMsmIBqfG0B3sFLB
C33f+dCDTGsMmTfnAiHYVkRfvNvk1lxuoY0C2CXUpNYyPdOH1GL/+r8aU0U7+dDK
8GMWhdIPGjqnvSbjZGi2bfbXj+d1arIL8rcEoaTFTtoGrat2ntEKMy5GJu9K2GYa
MJPTvFVfllyCgLxWkZl0lWr9hvq8AywLOAFUwPU6UVmmmNEhpqBuOsg+MtZ7rAcG
YuN7Cn/AElw4Y7INVbSwDKThMouF10oNPbJ9Q7talaj6WSkqLhSD5iH+8ctK8Ox2
jURR9jCtbanlirgRVdXg8qNarwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3wtBT7
gOsVOcv2RWprYXmsT3+IMB8GA1UdIwQYMBaAFM+29iiX50sNB++WALp3CTkFy4db
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE
N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3MEg3NVlBdW5jSk9RWExo
MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3o3YjJLSmZuU3cwSDc1WUF1bmNKT1FYTGgxcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3
MEg3NVlBdW5jSk9RWExoMXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdA7yLNrkOxjQEKGjeDT4GdiiMR+T5IlQoKSQ4+FE1o3D5xP8Y1alberUUXfU
+jmwU2+95Xul7mactpCBKxi/X4Eu7lqA9ly3SXQ/ZCiM9b91Vvf11hkL5PWjNTch
PoZ+12uX8UgWLJVG7XjzpyIWMrH828xCUstVZ9K3c6yteBFC8N9rjb91GrjjJL/g
Zb1ksObe5YgNeGRcWzUYLV+JNd4k9QZRpgpxeaUGt4/PgELmAX928oZknnHUjIe4
isO8IKp2cHTukVYA1FX3eWcKabAWgjNiuI/bHhkeVh5DPM6OPcwX1jv/Oqe6/IMF
yNH3P31ojNzVRG8K2mVPRQdlGg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:18:52 2026 by rpki-client