Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
File:                     0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json)
Hash identifier:          c699rOb4BLiasCooH0AkQC0wMKWkYzj6DVgerXf6Hb4=
Subject key identifier:   67:AD:DB:0F:24:3F:01:89:B2:73:D3:DD:65:23:92:2C:EC:01:A1:DB
Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
Certificate issuer:       /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
Manifest number:          64
Signing time:             Fri 17 Apr 2026 07:41:25 +0000
Manifest this update:     Fri 17 Apr 2026 07:41:24 +0000
Manifest next update:     Fri 24 Apr 2026 07:41:24 +0000
Files and hashes:         1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: AYDPBCH5UaEaX6oztXsYzUf5Gbi95Tx8w113HLTjkR0=)
                          2: 06ED25D2A7CF11F0927DA829C4F9AE02.roa (hash: x1p58QyGOEEZzvkP+F1o5eBxOfZdy5EZehyc+fW6wlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
        Validity
            Not Before: Apr 17 07:41:24 2026 GMT
            Not After : Apr 24 07:41:24 2026 GMT
        Subject: CN=69e1e424-32f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8c:17:2c:f0:82:3e:59:bf:73:a1:33:3c:8e:
                    b9:cc:4b:d3:15:eb:b3:7f:19:17:8b:c8:f2:8c:9a:
                    4a:3b:17:38:8a:ae:5f:ef:58:1b:17:2f:01:db:a6:
                    eb:65:57:7d:a5:5e:66:d1:4b:6e:9a:d1:df:8b:f0:
                    90:41:00:74:86:74:50:ce:fd:46:64:53:ff:63:0c:
                    09:23:34:6d:fb:d8:cd:c8:5f:19:75:5f:91:c7:17:
                    04:5c:17:3c:0e:27:74:6d:38:4e:f5:46:c3:1c:18:
                    4b:05:e3:32:82:ab:e1:a1:07:bf:1e:02:9d:70:18:
                    82:e2:3e:4e:3e:5b:0f:cc:91:8f:03:c9:21:53:c3:
                    f8:40:d8:9e:ce:af:5c:f6:1f:b1:87:80:d6:ca:19:
                    07:ad:ce:a8:94:7e:3d:fe:e6:06:2a:c6:4d:aa:e5:
                    15:ac:f4:e2:d1:60:0f:bd:c8:52:23:00:26:40:4e:
                    ee:7f:c0:06:5a:31:8c:18:a6:59:a4:3e:2f:70:d1:
                    7c:f3:0b:4e:ed:26:ce:07:06:0a:14:67:1e:e9:24:
                    b9:81:ee:5b:5e:5e:43:41:54:79:67:88:b6:f2:9f:
                    a9:5c:2e:0b:7f:93:8e:91:cc:99:44:fb:e2:b2:94:
                    fc:6a:dc:72:31:9b:5d:03:70:e4:1f:37:92:cb:08:
                    ad:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AD:DB:0F:24:3F:01:89:B2:73:D3:DD:65:23:92:2C:EC:01:A1:DB
            X509v3 Authority Key Identifier:
                keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:47:26:0b:40:95:b8:6c:f7:37:fe:04:d0:df:a5:c6:8d:b9:
         79:f5:50:bc:80:64:f2:09:db:e5:ff:ef:c2:f3:9d:f2:90:93:
         11:f1:38:5f:32:82:2e:16:e4:cb:a0:5e:6a:7e:d3:8b:f6:97:
         1d:b9:71:5a:f7:f5:b6:f5:84:43:e7:56:27:82:1f:86:59:90:
         31:35:98:3e:07:02:6d:a4:c4:f8:00:72:b7:d7:e2:e0:f3:50:
         97:34:c5:e9:b5:d9:e8:d3:64:fb:28:d7:48:32:92:fc:96:99:
         52:a7:6a:e0:3c:e3:08:d2:26:e9:c7:bc:68:07:8b:30:00:da:
         fb:7e:c9:fb:c1:39:aa:bb:f9:9e:d6:03:fc:79:71:47:93:0e:
         0f:89:52:1e:88:da:04:ea:dc:83:7e:c5:bd:81:fe:c2:b4:f9:
         16:bd:1d:2a:b5:62:e4:fc:9f:0b:81:b3:b7:68:f2:54:d9:dc:
         d0:47:9d:30:57:0d:fe:fe:93:40:74:82:03:8c:02:58:cc:bf:
         90:99:e5:0f:b6:79:0e:88:4b:c3:a2:73:3f:62:10:b7:f4:63:
         c4:8e:96:b9:bc:f8:a7:8b:3a:c8:42:8f:a8:3c:96:85:b3:aa:
         e5:66:cc:1d:d4:11:29:e5:79:3e:dd:9a:23:6b:b5:c2:6e:32:
         bb:89:06:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:03:02 2026 by rpki-client