Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
File:                     zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json)
Hash identifier:          lJolGXum64lczgKMwfiIXtAJbOLjqQhFim68r4egLNw=
Subject key identifier:   AB:87:E1:8C:42:85:F9:DC:07:6D:68:13:AF:D1:FB:E1:3B:3A:C2:0B
Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34
Certificate issuer:       /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
Certificate serial:       287F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
Manifest number:          286C
Signing time:             Thu 16 Apr 2026 15:34:39 +0000
Manifest this update:     Thu 16 Apr 2026 15:34:38 +0000
Manifest next update:     Thu 23 Apr 2026 15:34:38 +0000
Files and hashes:         1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: QGtjyRnJeN8/t3+M5K9xgYm1YLBFR8gn8pSlrcU9g74=)
                          2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: VmiDWWZcXS/8NwiQU0Cj011GwuJY7i5hDmIVSX2ZEao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl
                          rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10367 (0x287f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
        Validity
            Not Before: Apr 16 15:34:38 2026 GMT
            Not After : Apr 23 15:34:38 2026 GMT
        Subject: CN=69e1018f-7747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fe:67:79:bf:75:6e:75:a8:ee:63:76:8f:0c:
                    96:a5:1e:c1:c3:0a:90:46:da:43:1c:a9:2b:ba:b0:
                    31:8b:a9:91:74:42:da:8b:0b:10:8b:ba:82:3c:e1:
                    3e:75:08:bd:b2:a7:1f:38:3e:81:2b:2a:88:9d:40:
                    e4:ae:37:05:c0:72:d4:14:9c:65:9d:56:c6:5f:9a:
                    d9:74:21:f1:4f:25:d4:c0:eb:c6:99:3a:78:28:63:
                    cd:3d:ee:d6:ac:9e:4a:7f:b5:35:02:ca:66:08:f1:
                    88:1d:ed:11:89:87:76:d6:60:fb:47:7e:e3:9e:ab:
                    a5:3b:33:b1:fe:70:e4:8e:b2:5d:82:2c:62:a0:58:
                    36:e4:71:4c:72:c7:e4:77:c4:84:b8:2b:50:02:ed:
                    ca:07:35:29:2b:d1:b2:a4:45:d4:98:15:83:fc:77:
                    5e:39:7c:d8:b9:fd:d6:67:fe:2b:cd:d8:90:54:df:
                    4f:bd:90:0c:64:2b:8b:82:ae:56:0f:39:29:e7:99:
                    55:3b:50:41:1c:a1:05:60:fd:a8:8c:93:b1:24:16:
                    e0:21:ae:78:9a:83:4c:f6:1d:24:60:76:10:b6:7a:
                    76:4b:7b:5c:8c:44:bb:16:46:f4:b2:90:da:65:b4:
                    11:f9:f2:1f:0a:6e:15:40:17:ae:b9:e3:4c:af:92:
                    75:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:87:E1:8C:42:85:F9:DC:07:6D:68:13:AF:D1:FB:E1:3B:3A:C2:0B
            X509v3 Authority Key Identifier:
                keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:83:72:a0:d3:69:ee:e2:11:03:ee:17:a0:e7:12:12:b4:
         e4:0a:03:da:d1:b4:84:c4:9e:a3:bd:13:77:c3:b2:95:40:c7:
         60:fb:d1:24:c4:fb:d7:d5:fd:b3:ca:7d:41:f3:69:fe:97:eb:
         22:2e:7d:98:70:5e:fd:d9:ce:b5:ca:60:62:38:af:8d:75:92:
         b2:3b:80:fe:8d:bc:17:9d:39:e4:d5:7d:18:f5:8c:fd:e8:96:
         bc:7d:97:9f:12:f3:03:36:4d:92:1f:14:6a:ae:b4:23:9c:32:
         80:c9:b4:ba:57:16:9b:fb:a0:70:0f:94:d2:a0:d1:4d:f6:89:
         c0:be:d1:a5:25:b1:c2:8d:90:b2:96:6a:78:f6:41:09:aa:aa:
         54:12:de:db:62:f7:99:04:dd:e3:91:4b:80:22:61:12:d5:c3:
         60:5a:67:59:c7:18:e7:fc:fa:8f:02:82:a2:ba:a5:31:76:39:
         9d:ec:a8:ff:aa:af:e3:69:5f:3e:6e:d1:f3:18:40:5d:87:88:
         3c:f1:54:f1:84:09:00:44:00:a3:ac:1a:1d:e6:da:54:08:fb:
         46:ca:43:92:32:1e:af:05:9a:c1:10:72:c8:3b:c5:fc:1c:63:
         45:c6:b0:f7:4b:6f:71:e4:bc:f7:59:3f:1b:21:7f:08:d1:c7:
         f7:3a:63:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU1MjkxMTAvBgNVBAUTKENFRTY5MzBGNDhENzc0RDY0M0Q1NUNGRkU5OEIxRTYz
QTRENjM1MzQwHhcNMjYwNDE2MTUzNDM4WhcNMjYwNDIzMTUzNDM4WjAYMRYwFAYD
VQQDEw02OWUxMDE4Zi03NzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAof5neb91bnWo7mN2jwyWpR7BwwqQRtpDHKkrurAxi6mRdELaiwsQi7qCPOE+
dQi9sqcfOD6BKyqInUDkrjcFwHLUFJxlnVbGX5rZdCHxTyXUwOvGmTp4KGPNPe7W
rJ5Kf7U1AspmCPGIHe0RiYd21mD7R37jnqulOzOx/nDkjrJdgixioFg25HFMcsfk
d8SEuCtQAu3KBzUpK9GypEXUmBWD/HdeOXzYuf3WZ/4rzdiQVN9PvZAMZCuLgq5W
Dzkp55lVO1BBHKEFYP2ojJOxJBbgIa54moNM9h0kYHYQtnp2S3tcjES7Fkb0spDa
ZbQR+fIfCm4VQBeuueNMr5J1wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKuH4YxC
hfncB21oE6/R++E7OsILMB8GA1UdIwQYMBaAFM7mkw9I13TWQ9Vc/+mLHmOk1jU0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyOS8wQjY2MDA0MEEy
MDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGROWkQxVnpfNllzZVk2VFdO
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p1YVREMGpYZE5aRDFWel82WXNlWTZUV05UUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTUyOS8wQjY2MDA0MEEyMDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGRO
WkQxVnpfNllzZVk2VFdOVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASC+DcqDTae7iEQPuF6DnEhK05AoD2tG0hMSeo70Td8OylUDHYPvRJMT719X9
s8p9QfNp/pfrIi59mHBe/dnOtcpgYjivjXWSsjuA/o28F5055NV9GPWM/eiWvH2X
nxLzAzZNkh8Uaq60I5wygMm0ulcWm/ugcA+U0qDRTfaJwL7RpSWxwo2QspZqePZB
CaqqVBLe22L3mQTd45FLgCJhEtXDYFpnWccY5/z6jwKCorqlMXY5neyo/6qv42lf
Pm7R8xhAXYeIPPFU8YQJAEQAo6waHebaVAj7RspDkjIerwWawRByyDvF/BxjRcaw
90tvceS891k/GyF/CNHH9zpjvg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:41:58 2026 by rpki-client