Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
File:                     Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json)
Hash identifier:          VI76kEe8pMPV2jsRFMcRE4WNr+NmwU04tBJWGaRo1ZY=
Subject key identifier:   D5:59:D2:7D:E7:1B:87:D2:86:D1:F2:BE:E0:10:75:B6:0F:97:19:5F
Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D
Certificate issuer:       /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
Certificate serial:       1DC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
Manifest number:          1DB5
Signing time:             Thu 16 Apr 2026 16:03:55 +0000
Manifest this update:     Thu 16 Apr 2026 16:03:55 +0000
Manifest next update:     Thu 23 Apr 2026 16:03:55 +0000
Files and hashes:         1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: e+a2T0XrZPcLaSeYhZjcLL9GzAfDP9jC/+d6UphVR14=)
                          2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: aoK1qMo+XLiglTyrOyoKUd3w0AOhsSnhUEAZl5VjK2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl
                          rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7621 (0x1dc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
        Validity
            Not Before: Apr 16 16:03:55 2026 GMT
            Not After : Apr 23 16:03:55 2026 GMT
        Subject: CN=69e1086b-2e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d0:85:72:bd:2a:0c:6b:a0:99:d0:57:5c:48:
                    b4:c1:ec:18:6a:dc:51:47:3d:d4:3d:86:6e:11:a5:
                    cb:f4:95:1f:5e:69:54:ba:96:14:40:9e:a6:3b:e6:
                    81:15:46:59:1f:2a:ec:a6:63:20:19:5b:a8:50:9f:
                    93:5e:0a:6b:d0:d3:78:af:05:f7:2d:f0:e6:b0:a1:
                    9f:8b:88:23:2d:80:ec:71:18:79:5d:22:fc:28:63:
                    88:b7:41:66:92:d3:e2:25:5c:de:e8:d9:16:d8:2a:
                    3f:5e:cc:ef:75:49:5a:ec:9d:fd:fc:11:a2:19:12:
                    73:4c:6a:ea:a8:f8:82:39:15:34:fe:fe:67:7c:75:
                    05:8d:bd:99:c0:8f:24:c0:b9:a7:d8:c3:2d:65:d8:
                    c9:a5:43:3c:7a:7b:d7:20:8a:b7:23:da:80:b6:8c:
                    b8:2f:28:cd:db:70:a6:85:e7:be:44:43:09:66:23:
                    21:30:79:fc:93:bc:7d:45:35:86:c5:4a:f0:a2:21:
                    ef:14:b9:ba:6d:49:c9:4f:8e:ba:b3:24:76:e5:c5:
                    9f:76:de:d4:2b:6a:bd:79:07:7c:aa:98:1b:27:ac:
                    cb:42:0f:73:1b:3f:49:b7:97:7d:81:15:b4:1c:6d:
                    70:32:9b:49:8b:04:d0:3f:85:62:d9:ea:98:56:8f:
                    3d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:59:D2:7D:E7:1B:87:D2:86:D1:F2:BE:E0:10:75:B6:0F:97:19:5F
            X509v3 Authority Key Identifier:
                keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a8:24:48:57:4a:7e:04:fc:a9:a4:5f:52:36:dd:ee:15:40:
         ed:83:7c:86:86:dd:b3:d3:69:75:40:c6:01:a2:c7:61:c5:64:
         fc:ff:c4:06:c8:f4:5c:9a:3a:5f:2d:c2:50:36:d2:29:7e:9f:
         b1:ef:a1:c6:e6:e8:9e:2f:5a:b3:1b:b3:9d:97:ee:7a:54:a2:
         68:64:c7:a8:21:d6:25:b4:b7:cd:72:6c:7c:60:90:2e:e0:0a:
         bd:66:58:a4:54:7e:65:a5:da:5c:25:12:37:b5:d5:e3:40:43:
         1f:a8:64:a0:5a:f0:15:83:1d:f7:7c:70:4f:72:0b:01:0d:14:
         5d:51:2f:13:3f:cf:95:63:0b:94:14:77:64:23:79:d2:e9:06:
         4c:e0:18:85:60:5c:67:16:0c:60:3f:14:4d:a3:74:d3:25:30:
         b6:45:3b:58:80:72:88:86:51:dd:5b:e0:9a:33:de:ae:06:7a:
         a8:99:b9:71:90:0a:ef:75:ae:98:30:eb:fe:b8:a6:32:2f:9a:
         1d:0b:e1:62:0c:63:38:08:35:c2:20:f1:ef:28:3d:03:ac:aa:
         a6:8c:9e:75:1a:34:71:fc:b0:b2:83:50:3a:35:5b:4e:46:5c:
         0b:c1:95:f8:a6:d9:ca:cf:1e:14:a8:a9:cb:9a:35:07:5b:3e:
         5a:1a:e6:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND
MUM2OEFBNUQwHhcNMjYwNDE2MTYwMzU1WhcNMjYwNDIzMTYwMzU1WjAYMRYwFAYD
VQQDEw02OWUxMDg2Yi0yZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjtCFcr0qDGugmdBXXEi0wewYatxRRz3UPYZuEaXL9JUfXmlUupYUQJ6mO+aB
FUZZHyrspmMgGVuoUJ+TXgpr0NN4rwX3LfDmsKGfi4gjLYDscRh5XSL8KGOIt0Fm
ktPiJVze6NkW2Co/XszvdUla7J39/BGiGRJzTGrqqPiCORU0/v5nfHUFjb2ZwI8k
wLmn2MMtZdjJpUM8envXIIq3I9qAtoy4LyjN23Cmhee+REMJZiMhMHn8k7x9RTWG
xUrwoiHvFLm6bUnJT466syR25cWfdt7UK2q9eQd8qpgbJ6zLQg9zGz9Jt5d9gRW0
HG1wMptJiwTQP4Vi2eqYVo89iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNVZ0n3n
G4fShtHyvuAQdbYPlxlfMB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC
NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MUVBQS84ODI4RDBGNEJCNzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5O
Q3NOVjNadGxEZlBCeG9xbDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEKgkSFdKfgT8qaRfUjbd7hVA7YN8hobds9NpdUDGAaLHYcVk/P/EBsj0XJo6
Xy3CUDbSKX6fse+hxuboni9asxuznZfuelSiaGTHqCHWJbS3zXJsfGCQLuAKvWZY
pFR+ZaXaXCUSN7XV40BDH6hkoFrwFYMd93xwT3ILAQ0UXVEvEz/PlWMLlBR3ZCN5
0ukGTOAYhWBcZxYMYD8UTaN00yUwtkU7WIByiIZR3VvgmjPergZ6qJm5cZAK73Wu
mDDr/rimMi+aHQvhYgxjOAg1wiDx7yg9A6yqpoyedRo0cfywsoNQOjVbTkZcC8GV
+KbZys8eFKipy5o1B1s+WhrmNA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:24:22 2026 by rpki-client