Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
File:                     Z0fEVgFDfWEgWyv7QGfO0i6358E.mft (raw, json)
Hash identifier:          7GTsV0CBaH6U6b/5k+pWYK/vqkm/PEpUMB4JqKl1P2E=
Subject key identifier:   DD:73:CA:4A:F3:A8:F5:F8:F4:F4:CB:27:48:4D:F6:76:A5:29:57:0D
Authority key identifier: 67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1
Certificate issuer:       /CN=A914AA99/serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
Manifest number:          53
Signing time:             Fri 17 Apr 2026 07:53:41 +0000
Manifest this update:     Fri 17 Apr 2026 07:53:41 +0000
Manifest next update:     Fri 24 Apr 2026 07:53:41 +0000
Files and hashes:         1: Z0fEVgFDfWEgWyv7QGfO0i6358E.crl (hash: Rb8wg7a+yEm4h5wbwZ19I0IysHwSoc5UOO0vNqApy1w=)
                          2: 734D9ACCC2D711F09CE49A22C4F9AE02.roa (hash: oYZWWWudX6hmiWeAE8vtLuoPPfGME7k5YKBNL4ygl9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl
                          rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AA99, serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
        Validity
            Not Before: Apr 17 07:53:41 2026 GMT
            Not After : Apr 24 07:53:41 2026 GMT
        Subject: CN=69e1e705-805f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:82:63:20:74:6f:96:d4:7f:47:5a:83:42:
                    ec:0f:0d:18:be:cc:ac:bc:fc:72:e5:47:46:17:bb:
                    18:dc:d8:1f:d3:71:48:7b:01:76:15:73:a8:3e:c3:
                    5e:2f:6e:d4:47:e9:42:30:37:68:ce:9d:0b:5e:f1:
                    7e:7e:b7:0f:4c:95:6a:51:4f:22:7f:1d:84:86:ad:
                    f9:f7:fb:da:7e:f9:b9:05:d7:50:18:a6:fd:bf:9d:
                    d7:82:2f:81:c3:b6:71:9e:9b:5f:e2:37:e6:ab:10:
                    fe:00:98:49:df:4a:10:4b:81:c2:c7:9a:c6:80:35:
                    b4:40:dd:14:91:5f:03:12:7b:ac:c0:f8:25:5b:1a:
                    9c:45:40:a4:5e:40:bc:a8:f8:16:a1:0a:c6:6b:78:
                    32:95:b3:c2:57:db:f3:f7:e3:ab:ef:6d:5e:ef:86:
                    eb:30:c1:43:33:22:b1:7c:1d:76:cb:1e:1d:f0:ab:
                    87:d7:ad:18:23:81:ee:c6:44:c8:79:8c:11:22:80:
                    93:e0:f8:a5:53:a7:9e:02:4b:83:50:73:12:9f:d4:
                    3d:bc:59:e3:55:0a:61:1b:58:b6:4b:2f:1d:4b:24:
                    f2:d7:59:c9:48:53:58:0e:bd:f3:cd:1b:66:67:ad:
                    e5:21:bf:ca:2b:cc:97:80:5a:db:1d:76:39:07:e5:
                    a9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:73:CA:4A:F3:A8:F5:F8:F4:F4:CB:27:48:4D:F6:76:A5:29:57:0D
            X509v3 Authority Key Identifier:
                keyid:67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:6c:9c:59:1f:8c:bf:58:63:6d:22:a6:a6:93:5d:c3:46:45:
         df:51:a9:ed:6d:82:b1:a0:d2:c8:ba:ba:d0:ee:5e:6d:0a:a4:
         3e:59:f6:51:de:cc:c7:17:41:2d:22:a8:e0:ed:d4:59:9d:0d:
         12:c0:57:db:a0:3e:4a:16:14:48:c1:4f:6a:2c:87:03:16:83:
         70:a0:2e:27:68:64:7a:02:4a:07:66:c6:aa:65:7b:30:dd:a8:
         2c:2b:5c:4f:fd:75:0d:46:e8:ca:eb:6c:c1:51:bc:c9:fb:66:
         49:af:47:66:0b:a3:df:6a:ea:99:58:b0:87:3b:34:cb:38:bc:
         3d:5a:91:15:bf:49:f7:3e:a6:79:83:63:92:03:ca:4e:48:d3:
         af:b2:b8:35:d0:42:37:2f:84:05:b7:9e:17:ea:4e:98:4f:f8:
         45:ba:c0:01:cf:1c:f0:aa:af:21:18:47:2c:77:ef:8a:06:40:
         42:dd:14:e9:f7:c8:04:57:ba:01:fd:83:19:b2:01:41:2d:43:
         34:0b:54:4a:32:dd:73:d2:b9:1e:d6:6d:01:a7:e7:3e:49:de:
         c9:00:29:95:14:02:21:28:5e:32:60:64:d9:74:7f:c1:9a:a0:
         da:27:98:77:0d:41:94:34:1a:53:3f:d4:b0:d8:d3:f2:e5:4d:
         52:85:c9:da
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QUE5OTExMC8GA1UEBRMoNjc0N0M0NTYwMTQzN0Q2MTIwNUIyQkZCNDA2N0NFRDIy
RUI3RTdDMTAeFw0yNjA0MTcwNzUzNDFaFw0yNjA0MjQwNzUzNDFaMBgxFjAUBgNV
BAMTDTY5ZTFlNzA1LTgwNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDG04JjIHRvltR/R1qDQuwPDRi+zKy8/HLlR0YXuxjc2B/TcUh7AXYVc6g+w14v
btRH6UIwN2jOnQte8X5+tw9MlWpRTyJ/HYSGrfn3+9p++bkF11AYpv2/ndeCL4HD
tnGem1/iN+arEP4AmEnfShBLgcLHmsaANbRA3RSRXwMSe6zA+CVbGpxFQKReQLyo
+BahCsZreDKVs8JX2/P346vvbV7vhuswwUMzIrF8HXbLHh3wq4fXrRgjge7GRMh5
jBEigJPg+KVTp54CS4NQcxKf1D28WeNVCmEbWLZLLx1LJPLXWclIU1gOvfPNG2Zn
reUhv8orzJeAWtsddjkH5aldAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3XPKSvOo
9fj09MsnSE32dqUpVw0wHwYDVR0jBBgwFoAUZ0fEVgFDfWEgWyv7QGfO0i6358Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBQTk5LzBGMzdDODg2QzJE
MzExRjA5OUMwNjM4NkM0RjlBRTAyL1owZkVWZ0ZEZldFZ1d5djdRR2ZPMGk2MzU4
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWjBmRVZnRkRmV0VnV3l2N1FHZk8waTYzNThFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB
QTk5LzBGMzdDODg2QzJEMzExRjA5OUMwNjM4NkM0RjlBRTAyL1owZkVWZ0ZEZldF
Z1d5djdRR2ZPMGk2MzU4RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBhbJxZH4y/WGNtIqamk13DRkXfUantbYKxoNLIurrQ7l5tCqQ+WfZR3szHF0Et
Iqjg7dRZnQ0SwFfboD5KFhRIwU9qLIcDFoNwoC4naGR6AkoHZsaqZXsw3agsK1xP
/XUNRujK62zBUbzJ+2ZJr0dmC6PfauqZWLCHOzTLOLw9WpEVv0n3PqZ5g2OSA8pO
SNOvsrg10EI3L4QFt54X6k6YT/hFusABzxzwqq8hGEcsd++KBkBC3RTp98gEV7oB
/YMZsgFBLUM0C1RKMt1z0rke1m0Bp+c+Sd7JACmVFAIhKF4yYGTZdH/BmqDaJ5h3
DUGUNBpTP9Sw2NPy5U1Shcna
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:38:17 2026 by rpki-client