Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
File:                     ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft (raw, json)
Hash identifier:          qu0Sm7VZZsDZB16rOZb67vJqvuvgeadIUn7Dz1Na6iQ=
Subject key identifier:   DD:F3:BB:EA:C2:78:0D:D4:3E:F0:31:A0:E2:A5:57:F4:CC:41:D6:15
Authority key identifier: 66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
Certificate issuer:       /CN=A918969C/serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
Manifest number:          7E
Signing time:             Fri 17 Apr 2026 07:26:41 +0000
Manifest this update:     Fri 17 Apr 2026 07:26:40 +0000
Manifest next update:     Fri 24 Apr 2026 07:26:40 +0000
Files and hashes:         1: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl (hash: arXthaF6EtsTv76Guf9FK8MJVRHoUtA5tu+gwAKRMLs=)
                          2: 33B40FB8826D11F095A2E27BC4F9AE02.roa (hash: jrSaLDXaVnrCw36ElXQQUz6hClTnDoHk+UBFzoNoFW4=)
                          3: 16732F92826D11F0B439C27BC4F9AE02.roa (hash: /8I8Zl9zABqU4+Q0lEicmvA/CfmxVOpsQeYe0vDKQbg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
                          rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918969C, serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
        Validity
            Not Before: Apr 17 07:26:40 2026 GMT
            Not After : Apr 24 07:26:40 2026 GMT
        Subject: CN=69e1e0b1-2a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1c:c6:b2:b3:57:a6:b8:f0:61:3d:55:eb:0d:
                    6a:ce:3f:18:0d:24:09:28:cd:15:e2:43:be:85:7f:
                    2d:75:d1:6f:b8:5f:93:ce:a4:62:d6:9a:f3:18:5a:
                    c6:13:1f:bc:6b:6a:85:a0:4a:cb:44:50:b9:5f:71:
                    19:db:94:34:99:b3:76:7e:4f:ea:88:9a:36:96:f0:
                    15:f4:21:d5:42:80:06:be:53:de:90:90:e9:0b:9f:
                    f2:e7:48:b8:ea:24:81:32:fe:36:fb:8f:64:ca:4f:
                    a8:48:b0:fd:90:26:85:0e:a0:57:08:4d:da:64:31:
                    b1:fc:55:7b:91:49:5d:87:3f:9c:f0:7b:d2:44:61:
                    62:78:8c:2d:fa:dd:8e:10:2e:28:12:49:fa:d8:c4:
                    77:1d:5d:f6:01:85:9c:3c:e7:ba:e1:b0:4a:dc:dd:
                    2f:d4:fb:f3:02:88:4f:97:b6:87:18:d4:d4:90:cd:
                    0b:c6:df:48:89:ae:d9:09:09:0e:7e:88:d7:72:df:
                    c6:0b:6c:d4:11:5e:b8:09:fb:a9:6f:41:90:9b:73:
                    e3:86:55:3c:f6:b5:ed:60:15:26:87:de:81:71:92:
                    bd:49:03:d1:d2:3b:eb:7f:fb:26:31:93:0c:49:20:
                    8d:56:5d:31:fc:78:70:31:52:a0:1c:7d:92:33:86:
                    49:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F3:BB:EA:C2:78:0D:D4:3E:F0:31:A0:E2:A5:57:F4:CC:41:D6:15
            X509v3 Authority Key Identifier:
                keyid:66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:50:03:a7:fa:64:29:17:50:44:a2:9e:7d:50:a8:31:e5:
         ba:af:1d:2c:56:66:71:ac:b6:ef:55:26:3f:47:da:43:dd:b8:
         f5:c1:14:71:f6:bc:57:d1:11:99:4f:28:6e:90:b5:de:e3:c6:
         72:6a:b1:4d:c3:6b:1c:24:7b:35:f2:dc:e6:54:16:be:d2:23:
         ae:83:c7:73:8c:a3:6f:ec:b0:b9:81:83:a4:6f:c2:f9:1e:ac:
         a1:a2:ff:7b:ae:cd:6d:56:eb:56:76:01:65:1c:5e:52:8b:89:
         2b:31:06:65:7c:ec:03:a2:5a:50:2e:54:8a:1f:b5:13:37:c5:
         fe:10:da:e3:97:45:a6:63:e8:3a:50:00:6a:67:11:9c:3e:83:
         b9:db:db:51:c7:79:d1:cb:aa:de:c4:9c:0f:9e:eb:f8:fc:ed:
         34:c4:cb:ba:b3:e6:04:f8:33:18:7a:64:7f:db:80:a4:21:5b:
         c2:9f:c8:b4:3a:30:7d:1d:01:bf:2b:95:0a:36:26:e0:c3:9c:
         cf:47:a5:3a:2c:4c:02:9f:9f:2e:12:50:5e:84:4d:fb:21:f2:
         64:ca:43:28:54:b0:36:a4:7a:d6:98:61:2e:9d:48:a9:f3:1e:
         30:6b:b2:1b:c9:4e:2d:f8:56:a6:3b:8d:3f:39:68:54:1a:a8:
         aa:d3:e3:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk2OUMxMTAvBgNVBAUTKDY2QUI0RUI5NjI5RDI2Rjk3RTI0OEE4QzMyNDQ1ODcz
QjdFM0MwRjgwHhcNMjYwNDE3MDcyNjQwWhcNMjYwNDI0MDcyNjQwWjAYMRYwFAYD
VQQDEw02OWUxZTBiMS0yYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoRzGsrNXprjwYT1V6w1qzj8YDSQJKM0V4kO+hX8tddFvuF+TzqRi1przGFrG
Ex+8a2qFoErLRFC5X3EZ25Q0mbN2fk/qiJo2lvAV9CHVQoAGvlPekJDpC5/y50i4
6iSBMv42+49kyk+oSLD9kCaFDqBXCE3aZDGx/FV7kUldhz+c8HvSRGFieIwt+t2O
EC4oEkn62MR3HV32AYWcPOe64bBK3N0v1PvzAohPl7aHGNTUkM0Lxt9Iia7ZCQkO
fojXct/GC2zUEV64Cfupb0GQm3PjhlU89rXtYBUmh96BcZK9SQPR0jvrf/smMZMM
SSCNVl0x/HhwMVKgHH2SM4ZJSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN3zu+rC
eA3UPvAxoOKlV/TMQdYVMB8GA1UdIwQYMBaAFGarTrlinSb5fiSKjDJEWHO348D4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTY5Qy85QThGQjU0RTgy
NkMxMUYwQjkzQTBFN0JDNEY5QUUwMi9acXRPdVdLZEp2bC1KSXFNTWtSWWM3Zmp3
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pxdE91V0tkSnZsLUpJcU1Na1JZYzdmandQZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTY5Qy85QThGQjU0RTgyNkMxMUYwQjkzQTBFN0JDNEY5QUUwMi9acXRPdVdLZEp2
bC1KSXFNTWtSWWM3Zmp3UGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdJpQA6f6ZCkXUESinn1QqDHluq8dLFZmcay271UmP0faQ9249cEUcfa8V9ER
mU8obpC13uPGcmqxTcNrHCR7NfLc5lQWvtIjroPHc4yjb+ywuYGDpG/C+R6soaL/
e67NbVbrVnYBZRxeUouJKzEGZXzsA6JaUC5Uih+1EzfF/hDa45dFpmPoOlAAamcR
nD6DudvbUcd50cuq3sScD57r+PztNMTLurPmBPgzGHpkf9uApCFbwp/ItDowfR0B
vyuVCjYm4MOcz0elOixMAp+fLhJQXoRN+yHyZMpDKFSwNqR61phhLp1IqfMeMGuy
G8lOLfhWpjuNPzloVBqoqtPjQw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:36 2026 by rpki-client