Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
File:                     A0ZyQIbx848yyqFygmhZGcfIu28.mft (raw, json)
Hash identifier:          6tMZMsijTpfgXCfND6/HiYLLPsR1j2hus+PMzO45oCo=
Subject key identifier:   43:EC:88:DC:0E:86:B7:9D:A9:2A:BE:E5:D3:1C:9D:A0:7F:27:8D:FF
Authority key identifier: 03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F
Certificate issuer:       /CN=A9173591/serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F
Certificate serial:       0C6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
Manifest number:          0C68
Signing time:             Thu 16 Apr 2026 18:34:00 +0000
Manifest this update:     Thu 16 Apr 2026 18:33:59 +0000
Manifest next update:     Thu 23 Apr 2026 18:33:59 +0000
Files and hashes:         1: A0ZyQIbx848yyqFygmhZGcfIu28.crl (hash: gaqo+M+dwv9JoYfnRz+UbwiSPPxpWLGDO7u/8rnbXNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl
                          rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3178 (0xc6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173591, serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F
        Validity
            Not Before: Apr 16 18:33:59 2026 GMT
            Not After : Apr 23 18:33:59 2026 GMT
        Subject: CN=69e12b97-5ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b0:da:1e:30:a6:ff:fc:6a:1e:0f:51:99:95:
                    93:7f:88:92:77:c4:63:05:c1:d1:9d:99:b5:68:77:
                    0b:df:3f:02:02:fa:57:94:af:31:f5:3c:40:99:8a:
                    31:de:31:8d:c4:76:77:15:e7:42:1b:4a:24:5b:be:
                    83:f6:e6:44:3d:6f:ab:8d:7f:5e:5b:28:33:70:d9:
                    b0:a9:0b:8e:7c:23:42:a9:bb:80:ee:19:07:4f:ed:
                    23:27:88:ae:67:8d:a7:6c:e9:ff:d5:3f:05:f3:b8:
                    b4:b6:b4:d0:b5:15:93:2b:40:b6:bd:8c:31:ab:be:
                    79:fb:83:c8:ba:26:ff:af:eb:50:96:5d:a2:17:92:
                    d9:b2:71:f0:66:6d:b2:49:6a:a2:ca:c3:13:9d:4c:
                    11:c5:f7:d0:d7:71:9e:94:4b:c4:75:46:10:b3:fa:
                    a3:9c:4e:97:f8:50:c9:b7:3a:cf:13:96:cc:22:7b:
                    6c:22:02:f0:8d:10:a0:6e:bf:52:d6:56:eb:c3:bf:
                    3e:e8:23:f8:58:30:93:3c:54:c4:79:66:54:60:c6:
                    c5:2d:c7:83:67:55:14:f8:2d:29:87:21:27:e3:32:
                    2b:22:36:97:0d:c9:8e:0c:4d:8f:37:86:3f:c8:c3:
                    20:e3:d2:6b:57:6f:b2:c4:95:ea:32:4d:ec:23:59:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EC:88:DC:0E:86:B7:9D:A9:2A:BE:E5:D3:1C:9D:A0:7F:27:8D:FF
            X509v3 Authority Key Identifier:
                keyid:03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:dd:43:e8:ea:1b:28:96:8e:ee:c4:0d:53:58:f4:8e:41:6a:
         67:3a:b2:e4:d6:c1:e9:46:10:a3:cf:fb:52:61:31:fc:74:30:
         b1:77:f7:bb:41:fc:74:ff:33:21:7a:bd:e7:1c:f4:c0:c2:25:
         f1:d9:d9:7b:cf:c4:89:dc:4e:d1:c3:81:2e:ea:77:e3:5a:ef:
         20:00:95:e4:50:37:fb:56:ff:3a:e5:42:ec:e4:70:6f:24:f9:
         56:f9:39:ae:36:42:e7:28:07:d7:8f:65:88:97:6f:d1:d2:57:
         a8:55:21:2a:92:93:cd:b5:a1:1b:79:47:26:ac:88:9c:5e:af:
         48:71:8c:5a:24:c1:63:51:fc:a6:db:f3:51:3c:68:0d:ec:28:
         6f:84:ad:e6:fe:02:f4:dc:1c:f4:b4:54:42:7d:a4:33:3e:29:
         24:8f:21:1f:60:1b:f3:5f:05:a4:be:d0:99:b3:c6:e9:fd:da:
         7f:71:d5:33:46:41:e1:f2:93:38:cb:39:33:94:ac:20:5e:77:
         22:27:c9:13:a6:17:d0:34:b3:a5:4e:9e:58:8f:67:d9:6d:2a:
         31:5a:45:0a:3e:44:8f:5d:17:f2:f9:2f:38:4e:bf:11:fb:2a:
         f3:c3:94:61:2a:c2:39:f9:e0:c7:47:ad:f1:10:04:11:5e:86:
         c1:ff:c8:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM1OTExMTAvBgNVBAUTKDAzNDY3MjQwODZGMUYzOEYzMkNBQTE3MjgyNjg1OTE5
QzdDOEJCNkYwHhcNMjYwNDE2MTgzMzU5WhcNMjYwNDIzMTgzMzU5WjAYMRYwFAYD
VQQDEw02OWUxMmI5Ny01ZWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAirDaHjCm//xqHg9RmZWTf4iSd8RjBcHRnZm1aHcL3z8CAvpXlK8x9TxAmYox
3jGNxHZ3FedCG0okW76D9uZEPW+rjX9eWygzcNmwqQuOfCNCqbuA7hkHT+0jJ4iu
Z42nbOn/1T8F87i0trTQtRWTK0C2vYwxq755+4PIuib/r+tQll2iF5LZsnHwZm2y
SWqiysMTnUwRxffQ13GelEvEdUYQs/qjnE6X+FDJtzrPE5bMIntsIgLwjRCgbr9S
1lbrw78+6CP4WDCTPFTEeWZUYMbFLceDZ1UU+C0phyEn4zIrIjaXDcmODE2PN4Y/
yMMg49JrV2+yxJXqMk3sI1l/qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPsiNwO
hredqSq+5dMcnaB/J43/MB8GA1UdIwQYMBaAFANGckCG8fOPMsqhcoJoWRnHyLtv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU5MS8yNzY4RkJBNjFE
NkYxMUVBOUI1NkU3MjZDNEY5QUUwMi9BMFp5UUlieDg0OHl5cUZ5Z21oWkdjZkl1
MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0EwWnlRSWJ4ODQ4eXlxRnlnbWhaR2NmSXUyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzU5MS8yNzY4RkJBNjFENkYxMUVBOUI1NkU3MjZDNEY5QUUwMi9BMFp5UUlieDg0
OHl5cUZ5Z21oWkdjZkl1MjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsd1D6OobKJaO7sQNU1j0jkFqZzqy5NbB6UYQo8/7UmEx/HQwsXf3u0H8dP8z
IXq95xz0wMIl8dnZe8/EidxO0cOBLup341rvIACV5FA3+1b/OuVC7ORwbyT5Vvk5
rjZC5ygH149liJdv0dJXqFUhKpKTzbWhG3lHJqyInF6vSHGMWiTBY1H8ptvzUTxo
Dewob4St5v4C9Nwc9LRUQn2kMz4pJI8hH2Ab818FpL7QmbPG6f3af3HVM0ZB4fKT
OMs5M5SsIF53IifJE6YX0DSzpU6eWI9n2W0qMVpFCj5Ej10X8vkvOE6/Efsq88OU
YSrCOfngx0et8RAEEV6Gwf/Irw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:40 2026 by rpki-client