Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
File:                     Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft (raw, json)
Hash identifier:          zsqMb9OJhG73zRvF6ITu0s0LxWyb43mqqX291Ilpm78=
Subject key identifier:   E1:25:BD:BA:5F:67:88:2E:11:D7:F5:10:9C:A0:B2:CB:05:D9:20:DA
Authority key identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
Certificate issuer:       /CN=A91C146D/serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
Manifest number:          D4
Signing time:             Wed 15 Apr 2026 06:22:43 +0000
Manifest this update:     Wed 15 Apr 2026 06:22:42 +0000
Manifest next update:     Wed 22 Apr 2026 06:22:42 +0000
Files and hashes:         1: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl (hash: v/Y/rwbRoE1AFK82ACRCr0rEoRDzgonYIBQbbEmMt8k=)
                          2: 992A7358004211F0AC90656CC4F9AE02.roa (hash: p1iNzs7m8iHrfQ8AnJhFGKvDY9F4t1QWaHIUzSsJTWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl
                          rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C146D, serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
        Validity
            Not Before: Apr 15 06:22:42 2026 GMT
            Not After : Apr 22 06:22:42 2026 GMT
        Subject: CN=69df2eb3-deea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:0d:bf:f7:5b:33:7e:49:b4:39:67:4f:66:
                    10:06:d1:a5:b6:01:a7:20:01:28:5b:59:7c:0d:72:
                    1e:82:8d:02:a1:3f:db:73:b6:a1:f5:ce:a0:03:27:
                    bc:ce:71:c7:f0:eb:28:95:74:0f:27:f1:21:df:60:
                    35:c1:9e:4d:51:2f:42:c2:e9:97:48:d8:1b:c4:78:
                    83:95:52:68:ed:e3:9b:6b:5c:02:99:68:cb:93:47:
                    f6:a2:98:b2:4f:42:6e:36:0d:e8:d1:36:e7:d4:b1:
                    b8:03:df:e8:87:95:74:8e:74:6e:14:a0:b6:a9:a1:
                    00:d1:45:f1:82:4c:76:27:b5:53:c9:85:54:44:8a:
                    13:31:8a:42:35:81:48:47:ec:b8:de:4f:b7:24:0f:
                    b0:91:f5:a7:11:6a:19:5f:7c:0a:0c:50:e5:21:4e:
                    01:7e:43:0f:89:4e:51:3b:12:36:c0:d3:e8:2e:03:
                    b2:58:b9:d7:ad:9d:42:32:0a:c7:46:20:32:3d:29:
                    01:9b:0c:12:d2:97:78:8c:f7:f8:3d:b5:b0:84:bc:
                    f3:df:46:9d:6a:f5:67:d4:a4:c4:9c:14:08:fa:c6:
                    45:25:93:93:37:ed:7d:c4:59:2a:a9:16:92:71:cb:
                    af:97:43:a1:36:d1:5d:3e:40:20:07:af:3c:e4:e2:
                    dd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:25:BD:BA:5F:67:88:2E:11:D7:F5:10:9C:A0:B2:CB:05:D9:20:DA
            X509v3 Authority Key Identifier:
                keyid:66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0a:1f:4f:bc:83:4e:e5:fb:20:26:05:94:03:cd:06:c4:13:
         3c:11:b4:e8:02:6a:08:6f:09:1d:5a:a7:12:c2:e9:db:18:63:
         e7:b2:f4:d0:27:c0:8c:f3:5d:47:40:28:0e:8b:ef:fd:7e:c5:
         63:9f:3e:fc:dc:c1:33:e2:d6:ce:b4:ad:e1:36:bf:47:be:2a:
         1a:10:44:16:40:a8:dd:df:73:f5:9f:af:d3:24:17:f8:26:f1:
         72:c5:83:07:30:52:1e:0a:d6:a5:b8:82:4e:61:93:3d:56:44:
         05:66:82:db:d3:9a:61:7d:2a:50:ba:84:ba:43:21:93:c3:f5:
         8e:11:c7:15:14:31:1e:ed:53:51:82:83:39:53:e4:0e:bc:a0:
         ef:0a:b7:6a:5e:2b:48:c5:dd:62:ce:9f:1b:79:d7:43:d8:b3:
         46:01:18:76:21:c7:ba:af:ed:b1:06:9d:ce:fd:a4:3a:eb:45:
         0b:b6:a1:c8:df:00:76:e5:52:89:00:63:17:36:63:43:76:f5:
         3c:3f:8e:cd:e6:40:93:a6:2e:52:23:ec:f6:2b:95:89:d4:1b:
         fd:f5:61:f9:10:44:cd:0f:fb:25:c7:0c:64:58:b8:54:ea:32:
         89:ab:14:42:32:9e:af:30:ed:ed:f6:f6:29:52:5e:9e:f6:7c:
         73:1f:d3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:58 2026 by rpki-client