Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
File:                     Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft (raw, json)
Hash identifier:          8kj0yn+7AbJIJ1abTG5Kcz1BftVXeAPUmrRG3P1kTk4=
Subject key identifier:   C4:0F:91:B4:6D:80:90:29:C2:D3:4B:F7:EB:57:A5:11:68:F2:86:13
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Certificate issuer:       /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial:       0588
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
Manifest number:          0564
Signing time:             Thu 16 Apr 2026 23:23:36 +0000
Manifest this update:     Thu 16 Apr 2026 23:23:35 +0000
Manifest next update:     Thu 23 Apr 2026 23:23:35 +0000
Files and hashes:         1: Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl (hash: osXKzq14A8TDxobB9bRYuagHCmkURj/k+0L0XcVrtVA=)
                          2: 2C1F43848B5C11EFBFDAC30DC4F9AE02.roa (hash: QNIHjHWUNqsiL/hSt5OfIvTQlLC3HuVRGoPLRDJ/ZTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1416 (0x588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A7F, serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
        Validity
            Not Before: Apr 16 23:23:35 2026 GMT
            Not After : Apr 23 23:23:35 2026 GMT
        Subject: CN=69e16f78-488b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1f:9c:e9:3d:be:a6:e2:74:1b:5f:ef:d3:48:
                    ed:e7:ef:0b:77:91:2e:90:9c:f3:6a:8d:cd:11:d5:
                    04:cb:0d:25:f6:d5:5b:dd:ec:a7:29:29:1d:d1:e0:
                    92:5b:6f:ff:f4:22:c8:1f:38:01:1a:10:10:8d:09:
                    ca:6d:dd:ae:06:c8:16:b1:ad:aa:44:0e:9c:ad:0a:
                    b7:c2:d9:b3:82:4e:fe:50:68:04:5f:25:0b:1c:06:
                    d8:b7:92:41:b4:fb:7e:ba:39:a5:2d:b4:7c:ef:30:
                    ab:7c:a7:fa:b4:dc:56:f9:88:df:e1:48:14:7e:fd:
                    8a:22:cb:60:a5:4a:d1:4a:7c:3d:8d:ab:91:5b:a3:
                    3f:05:83:04:21:b0:68:ca:a6:75:96:c3:ec:ee:b2:
                    80:8a:75:bd:dc:51:99:16:31:ae:3a:28:42:bb:75:
                    46:88:d5:77:ed:82:a9:95:43:a8:26:ae:ac:64:22:
                    ac:39:eb:1f:8c:89:28:f1:7e:3d:44:1a:e9:1c:11:
                    b5:64:1e:73:16:76:21:e4:6d:1d:e9:d2:45:07:0c:
                    a9:c6:a4:fb:d0:d3:bf:53:07:9b:eb:ec:9e:25:2e:
                    47:1f:8d:1d:87:fb:52:cb:4a:30:29:2a:8e:44:71:
                    83:96:8d:af:c2:67:27:55:cb:38:f1:b7:d3:09:d5:
                    5b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0F:91:B4:6D:80:90:29:C2:D3:4B:F7:EB:57:A5:11:68:F2:86:13
            X509v3 Authority Key Identifier:
                keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:a9:d2:b4:f0:a9:e5:d8:11:5e:5a:bd:6d:5b:8e:fe:12:b9:
         33:18:65:48:60:bb:c1:fd:5c:83:8a:47:22:26:50:7e:c6:3b:
         26:38:cf:ae:bf:73:dd:a5:f7:d7:92:90:a1:db:35:5b:48:1d:
         03:49:d4:dd:72:5f:68:50:e3:d6:e7:a8:11:81:83:97:55:28:
         ed:dd:c4:60:a9:9d:24:86:e0:78:75:b3:5e:f0:7e:e9:8f:65:
         ef:97:08:8d:37:60:6c:04:d8:48:9b:d0:76:94:8d:71:cc:1d:
         c8:ee:48:20:d4:cb:88:83:c2:c5:2f:13:14:b9:de:60:49:34:
         d2:78:cc:be:ea:f4:76:a2:81:d8:b0:bd:7b:f1:20:d9:46:2f:
         38:1e:59:13:fd:5b:3c:67:bf:b6:d6:3c:a3:90:8b:47:7e:49:
         2d:5b:68:1c:52:cb:d5:10:e3:89:6f:15:ec:ae:09:66:67:59:
         d1:77:39:40:81:87:92:c8:2d:80:f2:fd:4d:3d:ff:d5:e5:c2:
         99:d3:0c:be:34:c6:a5:37:22:72:68:a0:63:0c:f8:0a:a5:b8:
         ce:3b:63:f5:57:0d:e0:9d:e5:a4:a4:20:f6:c7:6d:06:58:b2:
         0f:09:35:31:2d:47:43:b5:a4:bf:e8:a1:92:15:a4:b2:d5:5d:
         f4:07:3f:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJBN0YxMTAvBgNVBAUTKDY3RjM3QzUwQ0EzM0NGNEY1MDg1NzhEM0FDQ0M2REFB
NEM1MThDQjQwHhcNMjYwNDE2MjMyMzM1WhcNMjYwNDIzMjMyMzM1WjAYMRYwFAYD
VQQDEw02OWUxNmY3OC00ODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlx+c6T2+puJ0G1/v00jt5+8Ld5EukJzzao3NEdUEyw0l9tVb3eynKSkd0eCS
W2//9CLIHzgBGhAQjQnKbd2uBsgWsa2qRA6crQq3wtmzgk7+UGgEXyULHAbYt5JB
tPt+ujmlLbR87zCrfKf6tNxW+Yjf4UgUfv2KIstgpUrRSnw9jauRW6M/BYMEIbBo
yqZ1lsPs7rKAinW93FGZFjGuOihCu3VGiNV37YKplUOoJq6sZCKsOesfjIko8X49
RBrpHBG1ZB5zFnYh5G0d6dJFBwypxqT70NO/Uweb6+yeJS5HH40dh/tSy0owKSqO
RHGDlo2vwmcnVcs48bfTCdVbQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQPkbRt
gJApwtNL9+tXpRFo8oYTMB8GA1UdIwQYMBaAFGfzfFDKM89PUIV406zMbapMUYy0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE3Ri83NjBFMjI4RTM3
REMxMUVDQjU3MjBBMjhDNEY5QUUwMi9aX044VU1venowOVFoWGpUck14dHFreFJq
TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pfTjhVTW96ejA5UWhYalRyTXh0cWt4UmpMUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkE3Ri83NjBFMjI4RTM3REMxMUVDQjU3MjBBMjhDNEY5QUUwMi9aX044VU1venow
OVFoWGpUck14dHFreFJqTFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1anStPCp5dgRXlq9bVuO/hK5MxhlSGC7wf1cg4pHIiZQfsY7JjjPrr9z3aX3
15KQods1W0gdA0nU3XJfaFDj1ueoEYGDl1Uo7d3EYKmdJIbgeHWzXvB+6Y9l75cI
jTdgbATYSJvQdpSNccwdyO5IINTLiIPCxS8TFLneYEk00njMvur0dqKB2LC9e/Eg
2UYvOB5ZE/1bPGe/ttY8o5CLR35JLVtoHFLL1RDjiW8V7K4JZmdZ0Xc5QIGHksgt
gPL9TT3/1eXCmdMMvjTGpTcicmigYwz4CqW4zjtj9VcN4J3lpKQg9sdtBliyDwk1
MS1HQ7Wkv+ihkhWkstVd9Ac/VQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:41:19 2026 by rpki-client