Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
File:                     zIQ-FAouPvvguUneDtgDg5BgVB0.mft (raw, json)
Hash identifier:          622k++nFqEhC3sawho6V5e6Ppz4COgbiW3tltXBXQ6o=
Subject key identifier:   62:FE:12:91:BD:50:BA:09:0A:D5:C3:A1:A5:B6:2C:A8:7E:32:53:16
Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D
Certificate issuer:       /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D
Certificate serial:       3156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
Manifest number:          313C
Signing time:             Sat 18 Apr 2026 15:23:34 +0000
Manifest this update:     Sat 18 Apr 2026 15:23:34 +0000
Manifest next update:     Sat 25 Apr 2026 15:23:34 +0000
Files and hashes:         1: zIQ-FAouPvvguUneDtgDg5BgVB0.crl (hash: fvOtq85W4wgIMzJQyXQSi4r35tyBciMO4mI2d734CV0=)
                          2: C3F53A0654F011E7BE4A6431C4F9AE02.roa (hash: uTzcih1KaqTWD5o3aEAbBRCjnKgSsq3hesblpLVQM8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl
                          rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 15:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12630 (0x3156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1A37, serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D
        Validity
            Not Before: Apr 18 15:23:34 2026 GMT
            Not After : Apr 25 15:23:34 2026 GMT
        Subject: CN=69e3a1f6-d7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:dc:be:e4:f1:14:75:13:a5:cc:32:01:24:
                    f3:dc:29:b4:55:e2:7e:82:8e:1a:ae:d3:91:81:d3:
                    e2:9c:86:50:53:0d:c1:4a:b2:0a:7e:ba:5a:eb:b0:
                    d0:f3:b5:b0:a7:57:af:12:c2:8b:47:b5:4a:98:15:
                    19:a7:1c:4a:0f:f1:4d:b5:8b:5d:00:0d:a8:ec:2f:
                    e5:42:8d:e6:c5:b6:4a:98:04:98:94:a6:25:a7:b7:
                    51:01:1c:4c:e8:8f:9f:de:8a:f5:c4:18:37:19:81:
                    82:24:53:40:1f:72:70:d5:68:cb:9c:6d:d4:b9:28:
                    82:90:15:f8:c9:a3:4f:60:a1:43:be:55:2b:e3:ff:
                    75:a5:b5:c2:7d:e8:7c:48:21:8f:28:8c:40:f4:96:
                    6a:e7:ff:88:3e:56:2b:89:74:44:62:87:c0:1c:47:
                    c9:a2:0e:cb:f1:7a:a4:7d:41:7e:3f:0f:b9:f6:ca:
                    1e:56:0b:75:ee:31:0b:9d:30:a7:e4:43:ae:ea:c5:
                    27:7a:d1:1f:19:06:fb:63:39:fa:1d:5c:08:87:0f:
                    dc:10:cd:9d:e5:3b:14:3e:c4:53:a0:9f:e6:2d:80:
                    af:d9:ee:2d:8f:c9:70:d6:35:10:19:7d:38:53:52:
                    ca:58:60:03:56:b5:1a:dc:a0:41:3d:05:64:c8:7e:
                    f5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FE:12:91:BD:50:BA:09:0A:D5:C3:A1:A5:B6:2C:A8:7E:32:53:16
            X509v3 Authority Key Identifier:
                keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:15:48:8d:28:1a:c4:fd:7e:77:1e:bd:2d:a1:0f:6f:73:dd:
         0a:a4:ca:21:5c:20:43:4e:64:37:c0:be:5b:3f:7c:71:77:70:
         cc:52:73:68:32:4c:f4:28:79:73:4e:63:ba:32:e5:d7:15:d5:
         16:9f:86:2f:c3:86:67:f7:da:0c:e6:3e:46:43:0e:3c:12:75:
         41:3c:0c:06:e6:87:ee:d5:b0:a9:49:c3:d4:ca:d2:34:99:d9:
         52:c7:0b:45:67:36:49:bb:eb:14:15:6f:cc:88:10:83:4f:2f:
         f1:58:da:ae:4b:60:a2:80:0c:bf:87:1b:f9:49:87:e7:fa:71:
         fc:b0:61:88:54:ec:62:f3:5c:ce:a6:8f:82:c3:f3:0a:f7:6e:
         22:65:08:04:a6:e2:b4:47:bd:ec:70:96:e8:5d:9d:d8:7f:d5:
         a3:77:c0:f5:f2:34:fd:79:6d:64:bf:82:53:b8:8b:83:ca:da:
         10:40:73:89:05:f8:55:f1:e8:00:b3:78:7c:d9:65:c3:7b:00:
         d0:02:1b:55:fb:77:f2:fc:9c:33:f6:4b:f5:03:14:8c:32:63:
         5c:f1:89:7b:39:ef:5b:6b:ea:ed:fd:53:be:41:f2:3a:50:bd:
         98:4a:c2:ad:39:63:1f:c5:b6:5a:03:af:13:fc:4f:ff:32:8f:
         a4:4e:bb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:52 2026 by rpki-client