Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft
File:                     d0ZKhG930cTTZqMGuAaTn88qYBo.mft (raw, json)
Hash identifier:          trzCw9DOgNbINe6YV4dIhX0iZKRuean1b0bj53NU/Vo=
Subject key identifier:   2C:36:7C:75:14:FB:F8:C4:D6:BA:65:A7:17:B2:68:C9:A6:2A:FF:10
Authority key identifier: 77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A
Certificate issuer:       /CN=A91B74D6/serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft
Manifest number:          0173
Signing time:             Fri 17 Apr 2026 04:28:03 +0000
Manifest this update:     Fri 17 Apr 2026 04:28:03 +0000
Manifest next update:     Fri 24 Apr 2026 04:28:03 +0000
Files and hashes:         1: d0ZKhG930cTTZqMGuAaTn88qYBo.crl (hash: 9XR5vaFIGhKpUBPUK9HC0fBRDWFu5bYk3gQqpW7Gvng=)
                          2: ABD84FB00F8A11EF943CC917C4F9AE02.roa (hash: pG6Zn0Fg273gHL0Q1D0WBR6oD/KGcYvvimAkz1OUMoM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl
                          rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B74D6, serialNumber=77464A846F77D1C4D366A306B806939FCF2A601A
        Validity
            Not Before: Apr 17 04:28:03 2026 GMT
            Not After : Apr 24 04:28:03 2026 GMT
        Subject: CN=69e1b6d3-021f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:6e:bc:0c:0e:d5:51:1f:36:4b:43:95:c0:
                    25:c0:cf:6d:5f:e9:c6:97:dc:c5:6b:d6:ce:3c:ac:
                    34:6a:d0:4a:bc:ab:7c:26:79:c0:a0:b8:1e:39:bd:
                    d1:50:be:bb:f4:7d:aa:13:29:21:9a:da:fe:38:26:
                    a1:a8:08:99:2d:c9:3a:01:b9:91:3d:6a:d0:ed:b5:
                    24:6a:d1:7d:25:57:a3:48:43:18:90:21:c8:08:f5:
                    bc:3a:bd:94:8d:81:72:79:f5:61:af:23:fc:4d:75:
                    f6:06:2c:f4:9a:07:01:2e:90:3f:db:0a:c8:06:fb:
                    ea:81:d2:07:76:4a:a0:40:d6:9c:45:4a:05:51:06:
                    6c:05:7c:70:be:a0:b8:27:50:33:86:47:de:93:55:
                    1e:9d:4d:6e:55:9f:4c:f6:ec:b3:bf:24:39:b7:70:
                    b8:1d:97:13:27:0d:4b:48:49:86:d5:d2:76:72:f7:
                    cd:97:fb:a0:19:12:05:e5:8f:4d:54:c8:7b:21:63:
                    8c:a2:12:cb:78:ca:2d:64:f7:d7:45:10:74:db:de:
                    ec:fc:cb:e3:88:10:57:b4:00:95:e3:bd:45:1a:a2:
                    38:14:44:58:c5:38:a3:b9:8a:d1:09:9c:2a:f8:70:
                    fa:6e:49:9c:c8:3f:aa:27:60:cc:d5:3a:1e:9f:f0:
                    28:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:36:7C:75:14:FB:F8:C4:D6:BA:65:A7:17:B2:68:C9:A6:2A:FF:10
            X509v3 Authority Key Identifier:
                keyid:77:46:4A:84:6F:77:D1:C4:D3:66:A3:06:B8:06:93:9F:CF:2A:60:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0ZKhG930cTTZqMGuAaTn88qYBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74D6/DE22AD240CDF11EF9484E62AC4F9AE02/d0ZKhG930cTTZqMGuAaTn88qYBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2c:a5:14:d7:1a:75:33:92:5a:4b:7b:ae:a1:c5:36:1a:a1:
         74:1e:0f:c8:32:75:ee:29:f8:b6:51:08:73:18:2d:03:c0:02:
         f7:ea:95:e9:e3:fc:2b:67:f3:e5:82:54:58:0e:4f:e2:6f:8d:
         f4:37:92:8f:b1:68:82:e6:45:31:6a:22:4a:0a:94:b5:53:d9:
         a5:f8:7d:ea:ac:d0:b0:d9:d7:0d:ec:9f:3b:ae:c5:2c:44:44:
         3c:a6:af:b6:0e:53:ca:62:f2:1b:cc:2e:0c:77:7d:be:c8:3a:
         65:1c:2c:6a:b1:51:81:80:1e:2c:b9:9a:70:20:be:07:c9:41:
         21:e6:6a:92:b3:eb:62:c2:36:47:47:77:e3:aa:ab:b5:d1:0c:
         06:b8:f1:bb:f2:ba:f3:dc:d8:ce:c4:7c:93:05:1f:41:86:23:
         c1:4b:6d:3b:d7:6e:00:ea:c0:0e:ca:13:73:8c:91:2e:27:86:
         fb:10:0a:5c:43:0c:39:e1:bf:a5:d6:c2:4f:5d:23:6d:8d:77:
         57:df:89:cf:85:d7:1a:49:cf:40:81:5b:aa:be:eb:6f:45:ec:
         83:fb:e1:a4:b4:67:62:a6:48:6e:f2:40:da:db:72:2a:25:88:
         23:2e:75:bf:92:4f:b4:ed:7f:c5:e4:9b:1c:3c:9e:7b:82:1b:
         1c:16:55:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:38:18 2026 by rpki-client