Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
File:                     ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json)
Hash identifier:          DWSTKz5xzHnR/MFFr2S9iSnK7otYqhuKLQXaQ9D3yoQ=
Subject key identifier:   B8:7D:24:8C:B8:3E:E7:5A:26:4C:A8:E5:8F:28:EE:A6:7B:3E:C2:36
Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76
Certificate issuer:       /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
Manifest number:          01D4
Signing time:             Fri 17 Apr 2026 03:38:02 +0000
Manifest this update:     Fri 17 Apr 2026 03:38:01 +0000
Manifest next update:     Fri 24 Apr 2026 03:38:01 +0000
Files and hashes:         1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: 4AGbK+wWJ0G/02awAFJygTqnuwXtHSdJ1TU+7efXNoE=)
                          2: AD0C045C8C8511F0B59F1C60C4F9AE02.roa (hash: HGdDjcoTsUm7kJL5rC6tXKA4D2ZhJnskWqB8F3KifFs=)
                          3: 2B9ED7AE8C8611F093C24B78C4F9AE02.roa (hash: bi2iG9oBsC/hNTwCVoxLS7RAbzRZyqyTqSKMjtrttUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl
                          rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276
        Validity
            Not Before: Apr 17 03:38:01 2026 GMT
            Not After : Apr 24 03:38:01 2026 GMT
        Subject: CN=69e1ab1a-f5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:02:23:7e:47:e3:97:b4:a8:1d:49:e3:ac:3d:
                    0d:74:8d:11:3a:32:4e:50:a7:47:1a:68:09:1a:59:
                    70:0d:df:05:27:60:72:23:5a:d6:25:2b:37:ea:b7:
                    19:37:b2:8d:c2:aa:d7:1e:97:46:3f:40:77:8c:b1:
                    4c:ad:5e:27:e0:5d:73:e2:2f:f2:cc:cb:e1:39:30:
                    6a:58:27:a7:22:80:2f:50:53:fd:40:f5:c3:63:3c:
                    16:2e:e1:bd:b6:08:dd:eb:01:f0:f7:e8:65:e6:da:
                    ed:93:95:42:61:51:83:72:81:30:0d:f8:ef:6d:e8:
                    71:79:51:b9:94:1c:0d:30:ff:80:12:34:bb:2b:25:
                    1b:4a:d0:cc:ba:c4:72:1b:8e:f1:a5:03:c9:8d:68:
                    9c:04:97:dd:ad:1b:58:43:50:7d:80:aa:06:96:a7:
                    25:e5:17:9b:70:90:f6:82:35:22:e5:0a:2f:e4:49:
                    d2:ea:74:5c:00:40:00:9a:57:9c:e0:71:b4:45:9d:
                    10:9e:1c:18:cb:5e:d6:f6:64:eb:f1:8b:f5:c7:34:
                    64:bb:46:05:17:55:99:58:4c:2f:c6:59:2f:0c:82:
                    27:06:a3:1c:9c:9b:91:22:8b:cf:3f:d3:5c:af:e5:
                    10:9d:27:54:69:cd:58:26:45:4f:0d:02:6f:52:f8:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7D:24:8C:B8:3E:E7:5A:26:4C:A8:E5:8F:28:EE:A6:7B:3E:C2:36
            X509v3 Authority Key Identifier:
                keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:35:92:fb:b7:82:53:cb:19:4b:49:4b:23:74:3d:c8:12:bd:
         56:9f:39:6d:da:18:01:b8:9e:c3:f4:8e:61:2a:7e:e3:6d:ae:
         eb:84:63:be:19:5c:d4:f2:bb:3b:c1:95:16:db:3f:12:39:65:
         b7:eb:6e:69:05:11:dc:23:35:14:c8:14:5d:6b:76:2c:bf:07:
         df:e6:fc:98:39:69:ec:36:86:ff:1d:57:a0:b4:f3:a1:ef:77:
         a4:61:75:b5:55:9e:01:e9:13:79:27:dc:10:cb:ff:67:04:0a:
         a5:14:7a:ba:18:46:81:89:42:57:f4:4c:e6:9d:8c:66:16:1f:
         e0:0b:ab:56:00:c3:b5:01:c2:d1:c4:d9:02:28:de:f3:9a:ff:
         65:94:e1:0c:ce:8b:9f:81:66:a7:e7:81:c1:3e:f4:84:ca:32:
         e8:ca:ba:3c:45:af:24:34:e8:60:02:69:d7:08:4e:3c:29:8e:
         71:b0:cd:83:42:55:d4:ab:3c:0c:7c:46:2f:5f:96:eb:6f:01:
         3e:ae:89:9d:7c:c7:79:e7:84:33:51:90:bf:26:f3:c4:bd:2f:
         3f:5b:9e:67:32:16:54:79:45:9c:ba:52:78:af:0a:3e:12:4c:
         58:3b:fa:55:6d:27:28:78:88:10:e8:ec:dc:0a:7b:32:72:ee:
         55:16:3b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:16:59 2026 by rpki-client