Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
File:                     ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft (raw, json)
Hash identifier:          VHyODUF+kemJIDrUOKGIb8GPuVRVlk3JOg4wygfvij8=
Subject key identifier:   3D:D3:BA:09:67:2C:52:1B:65:CE:F3:49:6B:4C:94:D3:7E:C5:83:EE
Authority key identifier: 64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61
Certificate issuer:       /CN=A91CE0FB/serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361
Certificate serial:       0577
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
Manifest number:          056F
Signing time:             Thu 16 Apr 2026 23:13:29 +0000
Manifest this update:     Thu 16 Apr 2026 23:13:28 +0000
Manifest next update:     Thu 23 Apr 2026 23:13:28 +0000
Files and hashes:         1: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl (hash: 1bvhLe98BDjcybk978+9usmWT32iJEs9X6SJ07SfdRc=)
                          2: 47170244259D11ECA74AC10AC4F9AE02.roa (hash: TifDEeF2JOdL8j7fTV6ymoUhmjRmDa6hW57MtSf6qzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl
                          rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE0FB, serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361
        Validity
            Not Before: Apr 16 23:13:28 2026 GMT
            Not After : Apr 23 23:13:28 2026 GMT
        Subject: CN=69e16d18-348d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:92:b5:a2:01:d1:1f:61:c4:23:82:81:ab:
                    92:ea:a9:18:57:e8:28:9c:f1:f9:c7:33:62:5b:2a:
                    b9:2c:de:2a:56:23:7e:22:62:41:5a:78:ff:a8:0a:
                    6b:0b:e1:4b:c1:41:d8:69:9a:f6:82:81:6b:63:fd:
                    94:f8:6a:e8:31:05:8e:4c:77:40:e8:d3:aa:e0:7b:
                    61:d1:f7:84:8d:94:5a:2e:1f:78:f3:66:e4:27:9e:
                    38:61:c6:a6:0c:b8:f2:c2:f6:eb:89:d1:c9:a1:23:
                    32:ed:73:6f:b4:61:e0:3c:d6:52:c7:fd:42:69:f3:
                    07:1c:d5:25:46:57:18:11:0b:48:c4:ae:fc:ec:d9:
                    2c:ae:f8:16:7e:2c:19:3e:ae:5e:76:f4:d8:99:59:
                    6f:e9:b2:4b:d0:45:c3:a2:e2:9b:ff:9d:0a:7c:cd:
                    ea:61:30:aa:d3:0b:e5:19:13:4f:d1:ac:31:b5:dd:
                    4f:9b:ce:fe:7e:3b:64:73:d4:86:69:f8:66:34:68:
                    19:75:fa:5c:1d:86:11:6d:f2:99:91:d3:90:a8:ed:
                    ce:8f:82:30:ef:12:7f:fb:32:95:27:17:2b:7c:45:
                    d2:51:53:43:69:4d:a0:c3:b1:99:d5:51:bd:9a:18:
                    d8:b7:6d:03:a5:a7:0a:ea:01:92:a2:ed:89:4c:60:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D3:BA:09:67:2C:52:1B:65:CE:F3:49:6B:4C:94:D3:7E:C5:83:EE
            X509v3 Authority Key Identifier:
                keyid:64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d4:3f:f5:43:13:76:3d:53:bd:0e:8f:09:81:ad:a2:1b:b1:
         fd:78:d6:3b:a3:20:56:0a:bf:06:96:f2:a0:fc:31:6b:3d:8b:
         b4:01:6b:31:5c:73:92:fe:f5:fa:99:b4:76:1c:c1:42:5c:75:
         00:e4:6c:ca:7c:5b:f5:3b:28:07:20:f3:d6:54:3f:c9:88:85:
         f0:d5:8c:50:e8:bc:5a:9e:ec:bc:bf:0f:5f:57:e2:86:ed:1b:
         2a:ea:23:45:ae:f2:a5:1f:81:d8:09:51:9c:1e:af:4b:28:32:
         05:6b:fc:59:ca:e3:1a:a7:d2:d8:54:a2:0b:21:3a:e7:a0:1a:
         17:39:e4:a7:7c:87:28:20:d7:74:3a:c9:fb:69:91:b6:f8:55:
         44:fa:94:bc:3a:36:6d:b8:df:46:f4:03:f2:dc:ce:a1:2a:f7:
         06:2d:89:4c:c0:ff:67:fd:fd:49:1f:c0:d9:41:e8:6c:12:99:
         e5:fd:71:ec:87:a6:51:17:88:06:57:9c:1a:16:3c:2a:6b:1b:
         69:f9:42:40:86:17:b8:02:41:a3:70:2d:6c:97:08:23:2d:d3:
         7d:d2:92:d7:72:4b:3e:e9:d4:84:6c:fc:a4:74:03:5f:6d:d1:
         49:2e:4e:ed:ec:89:c7:4b:95:b0:f7:da:66:b9:d9:09:bc:6b:
         35:40:75:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UwRkIxMTAvBgNVBAUTKDY0QjFCQjg3MDI0RERGQkRCNDQxNUE5MDFEODA3RTNE
REQ4QTczNjEwHhcNMjYwNDE2MjMxMzI4WhcNMjYwNDIzMjMxMzI4WjAYMRYwFAYD
VQQDEw02OWUxNmQxOC0zNDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtOeStaIB0R9hxCOCgauS6qkYV+gonPH5xzNiWyq5LN4qViN+ImJBWnj/qApr
C+FLwUHYaZr2goFrY/2U+GroMQWOTHdA6NOq4Hth0feEjZRaLh9482bkJ544Ycam
DLjywvbridHJoSMy7XNvtGHgPNZSx/1CafMHHNUlRlcYEQtIxK787NksrvgWfiwZ
Pq5edvTYmVlv6bJL0EXDouKb/50KfM3qYTCq0wvlGRNP0awxtd1Pm87+fjtkc9SG
afhmNGgZdfpcHYYRbfKZkdOQqO3Oj4Iw7xJ/+zKVJxcrfEXSUVNDaU2gw7GZ1VG9
mhjYt20DpacK6gGSou2JTGBNywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD3Tugln
LFIbZc7zSWtMlNN+xYPuMB8GA1UdIwQYMBaAFGSxu4cCTd+9tEFakB2Afj3dinNh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTBGQi84NkY2ODlCQTI1
OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3MjBRVnFRSFlCLVBkMktj
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pMRzdod0pOMzcyMFFWcVFIWUItUGQyS2MyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTBGQi84NkY2ODlCQTI1OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3
MjBRVnFRSFlCLVBkMktjMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM9Q/9UMTdj1TvQ6PCYGtohux/XjWO6MgVgq/BpbyoPwxaz2LtAFrMVxzkv71
+pm0dhzBQlx1AORsynxb9TsoByDz1lQ/yYiF8NWMUOi8Wp7svL8PX1fihu0bKuoj
Ra7ypR+B2AlRnB6vSygyBWv8WcrjGqfS2FSiCyE656AaFznkp3yHKCDXdDrJ+2mR
tvhVRPqUvDo2bbjfRvQD8tzOoSr3Bi2JTMD/Z/39SR/A2UHobBKZ5f1x7IemUReI
BlecGhY8KmsbaflCQIYXuAJBo3AtbJcIIy3TfdKS13JLPunUhGz8pHQDX23RSS5O
7eyJx0uVsPfaZrnZCbxrNUB1xg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:53 2026 by rpki-client