Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
File:                     zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json)
Hash identifier:          YPEAhpgPG5JrQAogvbJE4u5Oi65NUD90DT8rLAOO9po=
Subject key identifier:   88:D0:A0:3E:5B:40:34:29:73:01:36:EA:F5:A1:EB:BA:B7:41:FF:49
Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78
Certificate issuer:       /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
Certificate serial:       0970
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
Manifest number:          0967
Signing time:             Thu 16 Apr 2026 20:00:13 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:12 +0000
Manifest next update:     Thu 23 Apr 2026 20:00:12 +0000
Files and hashes:         1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: An/M3iTYHcSlruJSzho2zw8XidctqIHxZhs1BxA2E5o=)
                          2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: btWhLsIlBOf2tg8he8N8TkXFlRcB/qhbfq1KBXFZbYg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl
                          rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2416 (0x970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D624F, serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
        Validity
            Not Before: Apr 16 20:00:12 2026 GMT
            Not After : Apr 23 20:00:12 2026 GMT
        Subject: CN=69e13fcd-2a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:ae:48:3e:7d:45:12:19:6d:42:1a:7e:6e:
                    3e:46:dc:12:72:54:c4:3e:09:c7:6d:9f:ce:72:ef:
                    65:f0:76:b3:0c:c9:2f:66:97:4c:11:81:08:ad:53:
                    7b:75:5f:ae:92:61:25:1b:38:d7:3c:eb:9e:8d:e8:
                    e7:b4:67:34:2c:b8:d7:89:73:00:c6:b5:87:d4:4f:
                    84:67:f6:fc:e2:4f:41:52:94:f9:f0:30:d5:e6:c6:
                    c9:a6:b6:42:7e:62:75:7b:e6:e7:af:96:12:b9:30:
                    b0:40:e0:eb:0b:ad:53:7c:4a:97:7a:67:29:5b:fd:
                    45:12:1d:b5:df:62:a7:0b:22:ad:3f:48:5a:ba:0b:
                    41:60:69:eb:b0:f2:05:9a:05:c3:cf:c5:17:8a:62:
                    e7:ce:46:2a:1e:fd:11:08:c2:ee:94:2c:c1:23:44:
                    62:d7:a2:3f:ff:87:1b:93:16:cb:22:64:04:72:fa:
                    32:f0:dc:49:be:b3:90:b0:57:a3:db:84:a5:e9:99:
                    14:ab:7c:ee:b1:1c:b5:33:00:c0:12:27:f9:38:64:
                    04:5e:5d:f6:c7:3c:0a:87:a6:d4:e6:d4:39:f1:88:
                    79:65:e8:81:0e:99:7e:27:99:2f:86:a8:48:c8:26:
                    f7:54:f0:4e:c2:5a:b4:dc:3c:17:a0:57:08:1e:36:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D0:A0:3E:5B:40:34:29:73:01:36:EA:F5:A1:EB:BA:B7:41:FF:49
            X509v3 Authority Key Identifier:
                keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ab:1c:70:ba:67:2a:77:48:9f:7a:2b:6b:43:35:ba:2f:93:
         5d:d4:6d:50:dd:c5:c5:45:14:5e:a9:50:ec:35:a9:23:8d:90:
         b3:cf:16:aa:f5:b7:b5:c0:ab:90:6c:01:cf:bd:4c:23:c0:e9:
         5f:d3:37:f8:da:48:8a:7b:b0:90:89:76:9a:69:03:80:35:e0:
         6b:6b:54:38:f3:93:17:8e:36:91:0c:ab:30:b9:10:ff:4b:51:
         bc:0d:64:a6:a9:a0:86:47:85:be:36:43:72:c8:e2:36:52:5c:
         07:50:37:ae:c1:d7:0d:ee:5d:95:2c:d6:ed:ad:49:07:be:9a:
         b8:92:b8:c3:ff:a4:95:44:01:43:b5:a8:a4:b2:f4:db:6c:ff:
         36:60:38:6e:d0:4d:d6:2f:c5:81:94:bf:53:29:a8:3d:29:b8:
         48:15:d4:5c:59:dd:a8:28:d5:0e:d9:5d:e1:7d:e9:89:6a:4d:
         74:9e:ba:af:10:fb:08:98:60:a9:38:48:93:f6:7a:51:99:66:
         20:d1:4b:4c:8c:e9:bb:8f:06:32:1c:76:88:48:d3:dc:d8:34:
         fb:7e:14:45:d9:b4:72:19:4e:79:dc:81:da:71:c6:b4:e9:95:
         df:1b:ca:5b:a5:e7:df:93:e0:5b:0b:16:c4:a9:3a:b9:29:8e:
         b8:ac:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:03:31 2026 by rpki-client