Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
File:                     zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json)
Hash identifier:          2uUGpjPLrRm9/7FD8x/BHaOZloTtETcZx+O1Y2PE7a0=
Subject key identifier:   41:EC:2B:81:0A:13:2F:9D:C5:56:9C:98:70:C2:DB:A2:00:44:D7:E4
Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02
Certificate issuer:       /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
Manifest number:          C1
Signing time:             Wed 15 Apr 2026 06:31:36 +0000
Manifest this update:     Wed 15 Apr 2026 06:31:36 +0000
Manifest next update:     Wed 22 Apr 2026 06:31:36 +0000
Files and hashes:         1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: Tt9Oa+A9rl3NcC4Ukf0VKq90RJAL0Al5T4/wWfUlTVQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl
                          rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02
        Validity
            Not Before: Apr 15 06:31:36 2026 GMT
            Not After : Apr 22 06:31:36 2026 GMT
        Subject: CN=69df30c8-4189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:76:5d:50:7f:c6:71:bf:ca:da:f1:28:9a:
                    4b:b8:db:b7:c2:51:dd:ce:f7:12:08:31:9b:15:73:
                    c7:92:46:c4:00:74:a1:dc:a5:41:88:9a:dd:da:78:
                    d8:aa:8a:86:cb:ce:6f:38:c2:2e:ea:5f:88:50:25:
                    11:5a:6b:20:da:90:0c:e9:2d:b0:f1:d2:bb:b7:92:
                    79:fc:6c:3c:a1:0b:a9:d5:53:c6:d9:5a:5a:c7:58:
                    e2:0f:5b:00:7a:c4:84:e9:c4:19:4b:ba:ee:34:54:
                    c1:4c:d5:36:2b:f4:9b:37:2d:6e:a0:c9:b7:45:a0:
                    fa:2d:dd:4e:90:43:1c:81:5d:7e:00:88:04:d1:85:
                    76:a6:9d:87:bf:b9:c6:8b:ef:f7:aa:ba:53:43:07:
                    e4:6c:52:9c:86:a8:ca:67:70:a5:8b:d3:9c:aa:99:
                    d4:9a:2c:53:46:db:a2:69:69:0f:55:7e:2b:47:1e:
                    2d:72:7f:af:0d:ec:4f:01:4e:a7:90:a2:3c:d6:11:
                    c9:36:27:d2:15:3d:2a:79:87:47:d7:fc:8c:ba:53:
                    f0:54:3e:42:1b:88:68:c9:6a:59:d4:79:f9:9b:5b:
                    7d:ad:3b:48:a5:ea:f8:71:e9:7c:2c:b2:d0:51:08:
                    11:75:d0:b5:55:e8:b0:44:43:5f:a2:1b:7e:c8:1a:
                    bf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EC:2B:81:0A:13:2F:9D:C5:56:9C:98:70:C2:DB:A2:00:44:D7:E4
            X509v3 Authority Key Identifier:
                keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0e:4a:d4:0f:0e:79:54:f0:a1:ce:f2:fa:cb:19:6c:be:1c:
         af:4b:34:03:24:bb:62:64:c8:78:eb:a7:84:85:78:fd:f1:e2:
         2f:8a:01:a3:93:47:24:a1:e9:02:d8:4a:e7:85:75:a6:04:09:
         24:d8:49:15:e2:f2:26:b8:a7:a5:c5:15:35:2a:ee:54:8e:a9:
         94:a4:ab:1e:14:26:71:48:26:df:a1:95:71:3e:87:81:14:bf:
         de:56:ef:4f:eb:41:b1:da:f9:67:4a:78:de:4b:b0:88:bd:b0:
         23:29:71:5f:51:a8:e0:ed:10:fe:45:6a:58:d8:24:a3:a4:a3:
         c2:2a:b4:75:5b:42:a2:08:84:1b:b7:53:ee:bd:b5:c2:b4:66:
         2c:cd:3c:53:88:0d:05:7e:36:3f:47:a0:d3:47:dc:4d:41:1d:
         f3:14:b1:2c:2e:2e:b3:bd:12:fb:ae:da:15:22:3b:38:f0:ec:
         8c:ef:05:d8:51:14:f4:8c:6d:6a:f4:36:a0:38:f8:52:de:a9:
         aa:93:0f:a0:2f:16:ba:10:ab:a6:0c:62:40:31:df:4e:8a:06:
         14:e9:2e:7f:42:72:24:41:a5:9b:d1:cf:6e:0a:5d:18:63:59:
         59:9b:2e:2d:b8:d9:ef:67:b4:e1:9e:15:78:ca:25:f8:bc:5a:
         36:dd:c3:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlCQ0MxMTAvBgNVBAUTKENFNkU5MkZDQTAwMTdGNzVBNjJERjkyODVFOEQ3QzIx
MEI3QUJDMDIwHhcNMjYwNDE1MDYzMTM2WhcNMjYwNDIyMDYzMTM2WjAYMRYwFAYD
VQQDEw02OWRmMzBjOC00MTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqQN2XVB/xnG/ytrxKJpLuNu3wlHdzvcSCDGbFXPHkkbEAHSh3KVBiJrd2njY
qoqGy85vOMIu6l+IUCURWmsg2pAM6S2w8dK7t5J5/Gw8oQup1VPG2Vpax1jiD1sA
esSE6cQZS7ruNFTBTNU2K/SbNy1uoMm3RaD6Ld1OkEMcgV1+AIgE0YV2pp2Hv7nG
i+/3qrpTQwfkbFKchqjKZ3Cli9OcqpnUmixTRtuiaWkPVX4rRx4tcn+vDexPAU6n
kKI81hHJNifSFT0qeYdH1/yMulPwVD5CG4hoyWpZ1Hn5m1t9rTtIper4cel8LLLQ
UQgRddC1VeiwRENfoht+yBq/AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHsK4EK
Ey+dxVacmHDC26IARNfkMB8GA1UdIwQYMBaAFM5ukvygAX91pi35KF6NfCELerwC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJDQy9EOEJFOTJEQzE0
MDIxMUYwODg5RTVFMTJDNEY5QUUwMi96bTZTX0tBQmYzV21MZmtvWG8xOElRdDZ2
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ptNlNfS0FCZjNXbUxma29YbzE4SVF0NnZBSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUJDQy9EOEJFOTJEQzE0MDIxMUYwODg5RTVFMTJDNEY5QUUwMi96bTZTX0tBQmYz
V21MZmtvWG8xOElRdDZ2QUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiw5K1A8OeVTwoc7y+ssZbL4cr0s0AyS7YmTIeOunhIV4/fHiL4oBo5NHJKHp
AthK54V1pgQJJNhJFeLyJrinpcUVNSruVI6plKSrHhQmcUgm36GVcT6HgRS/3lbv
T+tBsdr5Z0p43kuwiL2wIylxX1Go4O0Q/kVqWNgko6Sjwiq0dVtCogiEG7dT7r21
wrRmLM08U4gNBX42P0eg00fcTUEd8xSxLC4us70S+67aFSI7OPDsjO8F2FEU9Ixt
avQ2oDj4Ut6pqpMPoC8WuhCrpgxiQDHfTooGFOkuf0JyJEGlm9HPbgpdGGNZWZsu
LbjZ72e04Z4VeMol+LxaNt3DIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:42 2026 by rpki-client