Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
File:                     pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft (raw, json)
Hash identifier:          lAPeFBBzDBhLr1iINyWOAR5fJfDO+zh73vgvayZ4G4g=
Subject key identifier:   80:14:F8:31:B0:6A:2C:91:24:B6:32:D3:68:E3:7E:F6:A6:7B:AB:D5
Authority key identifier: A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF
Certificate issuer:       /CN=A91A3AD9/serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
Manifest number:          35
Signing time:             Wed 15 Apr 2026 08:16:46 +0000
Manifest this update:     Wed 15 Apr 2026 08:16:46 +0000
Manifest next update:     Wed 22 Apr 2026 08:16:46 +0000
Files and hashes:         1: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl (hash: ttevs35oBYefV3nFeU98dZnJ8wTqIXC85R0mAhODOjY=)
                          2: 8B10B888061111F18D858310203D8C67.roa (hash: qh+VyOJbj+ug4XtQyEZqsUr8GU3LhsaDi56G0+/mtA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF
        Validity
            Not Before: Apr 15 08:16:46 2026 GMT
            Not After : Apr 22 08:16:46 2026 GMT
        Subject: CN=69df496e-9da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:da:73:47:02:56:f6:a3:a3:64:04:f7:28:
                    31:50:0c:30:a6:36:57:f0:38:da:77:aa:44:9b:d1:
                    fd:3d:80:63:0c:df:15:fe:84:65:e6:c1:83:89:64:
                    4c:7a:9b:07:73:3e:0a:7e:a4:a7:bc:24:bb:dd:77:
                    d9:c4:df:09:d9:87:24:99:83:ae:ff:2d:c9:fd:fc:
                    c2:e6:0c:0c:96:e0:70:cc:c6:23:a8:aa:98:3b:10:
                    af:18:89:b8:79:3f:73:b0:f4:58:f8:86:d4:08:55:
                    20:f0:95:d2:96:62:21:da:c1:fa:e8:a8:3d:be:6d:
                    56:b4:93:5a:58:34:37:79:a2:55:86:3f:d7:89:72:
                    9f:22:7c:87:a3:67:b7:84:e4:4f:ad:b8:a4:9d:3b:
                    7a:71:4c:f6:5b:22:54:0c:34:9c:45:8a:e0:88:dc:
                    46:6f:2e:b3:c3:f9:be:d1:68:2b:1c:95:da:aa:ab:
                    01:99:5c:7b:f7:30:d7:cd:b7:93:e4:78:c6:0e:75:
                    6a:49:a5:e2:d2:e1:a2:b5:2c:ee:09:f8:a6:d3:9c:
                    4d:68:c8:83:3f:d4:92:d9:79:9b:fe:2f:f6:e2:1c:
                    30:8b:4c:ee:f7:cc:67:f6:d3:fa:44:0c:c2:71:0d:
                    3d:90:c1:8b:e0:38:1c:74:bc:28:ad:31:45:66:72:
                    be:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:14:F8:31:B0:6A:2C:91:24:B6:32:D3:68:E3:7E:F6:A6:7B:AB:D5
            X509v3 Authority Key Identifier:
                keyid:A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:65:95:00:98:e9:fe:3c:04:17:a8:71:ff:e0:15:cd:ce:d4:
         c1:99:80:52:89:cc:4d:77:4b:a2:c0:43:e3:e5:43:53:28:35:
         d9:84:9f:0e:2a:05:5e:2e:37:e0:0a:d9:d0:9f:b7:21:50:ab:
         d8:98:24:ad:ba:1f:95:2e:fe:41:a2:9c:43:3d:bf:1a:f6:67:
         64:3b:82:f3:c6:4d:87:10:ae:67:d1:4a:96:0d:89:00:fc:35:
         ee:c8:14:b9:95:e0:25:f8:80:e5:14:b8:a0:16:6b:98:d8:b5:
         11:1b:8b:d9:68:7a:39:f1:be:57:29:66:28:d1:3c:75:8f:5a:
         99:48:d3:16:6c:a9:b6:68:bc:62:99:90:f2:b5:be:23:1b:60:
         66:6c:10:29:3e:91:74:c8:74:93:7d:a4:c2:c7:d8:9b:8f:a3:
         ec:da:02:d1:10:4f:93:b2:0a:9f:99:b1:d3:b4:fe:6e:b8:6f:
         62:55:f9:d5:f7:69:4f:4a:33:3a:73:54:20:13:a4:77:8c:00:
         3f:75:33:de:60:ad:60:d1:ff:03:91:45:96:95:15:1a:6f:7f:
         e3:c5:b7:ed:23:e1:1f:d3:71:1b:97:13:b5:a5:ea:a4:e7:50:
         d0:05:dc:9f:d8:d3:f0:3a:1c:ff:82:fd:a6:04:76:29:69:7d:
         90:d3:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:13 2026 by rpki-client