Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
File:                     Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json)
Hash identifier:          X8QsemIWxofzLj+OCH8KvkVEhLvJoLQA77ZLyRe+r6s=
Subject key identifier:   47:44:5F:D8:8D:21:DB:3C:25:34:D7:AE:8F:71:8A:04:2D:1F:D8:08
Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14
Certificate issuer:       /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
Certificate serial:       0413
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
Manifest number:          040D
Signing time:             Fri 17 Apr 2026 00:19:36 +0000
Manifest this update:     Fri 17 Apr 2026 00:19:36 +0000
Manifest next update:     Fri 24 Apr 2026 00:19:36 +0000
Files and hashes:         1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: ivq0XUp9Hxj9k+vvxmcGai85fRVdBxjmWAB/mmroPb4=)
                          2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: o6OFH1sCW4R513sBjIGYHh+VlzbKsDp8XgFdEfgai4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043 (0x413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
        Validity
            Not Before: Apr 17 00:19:36 2026 GMT
            Not After : Apr 24 00:19:36 2026 GMT
        Subject: CN=69e17c98-cf15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:79:b5:89:ca:98:31:5e:a8:77:3d:57:02:18:
                    b3:16:91:5b:76:e1:ab:3b:00:9b:86:cc:35:5c:73:
                    ff:4b:db:ab:fc:51:c1:d5:33:53:29:95:5e:cc:41:
                    2a:fb:ca:44:c1:54:63:09:49:47:2f:70:41:c3:15:
                    e6:b4:52:1d:8e:c0:35:f3:d1:1c:28:70:9a:42:bf:
                    ad:87:61:e9:7b:8b:81:15:5d:c1:f8:53:8a:da:70:
                    4d:e6:4e:56:ca:82:9d:e8:cb:71:72:a4:1a:12:9d:
                    60:4d:73:96:c8:1e:e5:41:37:16:91:d9:fa:c3:18:
                    53:8e:7d:5f:3b:8e:cb:5d:1f:54:98:52:d4:2d:8f:
                    24:6d:cb:ae:a9:ef:64:e6:03:9b:6e:53:4b:36:5f:
                    f3:58:0c:e5:76:41:2b:f5:5a:31:f3:9b:4f:17:ea:
                    7d:f1:bf:a6:ab:b0:55:5c:02:04:8b:28:40:ff:0b:
                    b5:96:16:a4:f1:fd:ec:1b:b9:2c:ba:5a:1e:aa:e4:
                    31:cb:f4:6b:e7:a9:76:81:b8:60:16:62:37:6b:da:
                    ac:1f:60:53:7a:72:8a:0c:ab:04:e5:97:ef:e3:65:
                    7c:15:6c:d1:92:59:3a:90:c3:2a:df:b5:d6:bb:82:
                    aa:93:83:07:ab:af:a3:1c:a6:d6:22:d9:cc:ba:7f:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:44:5F:D8:8D:21:DB:3C:25:34:D7:AE:8F:71:8A:04:2D:1F:D8:08
            X509v3 Authority Key Identifier:
                keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:07:06:91:3c:cd:8b:4b:f7:82:42:8e:73:69:80:df:2e:94:
         7e:a6:f8:74:fe:f8:72:26:5b:8f:29:24:31:62:a7:24:4b:33:
         3f:22:65:88:ad:d5:00:99:d7:94:98:69:36:e0:20:6c:d4:5c:
         24:75:0a:30:ff:db:fb:9f:23:a9:ae:80:c5:ec:ba:15:f6:a8:
         bc:8b:98:c5:de:83:d2:45:d7:e2:03:8e:74:f6:13:79:14:de:
         d1:c4:37:8f:c4:23:d5:0a:ca:a8:f5:70:3c:bf:bf:e6:c1:bc:
         4c:19:5b:b6:69:fe:1f:e7:ab:79:1f:52:df:10:03:50:e5:89:
         d5:7a:3a:f5:5d:4a:fc:96:34:79:9e:1a:d8:e9:18:49:48:b8:
         f9:76:04:f4:1c:51:32:d1:40:36:cf:89:bb:ed:a3:71:25:0a:
         1a:64:89:5d:f5:6d:e8:c9:e3:83:82:48:35:93:13:93:b1:91:
         63:7d:d6:94:bb:59:2f:2b:5c:dc:f6:82:d4:92:25:2d:05:b0:
         b1:4b:f7:e9:18:c7:ef:24:08:51:29:bd:87:ce:43:f5:c4:4b:
         de:c7:63:73:3d:45:37:91:f8:8c:11:bd:56:5c:c8:0d:35:c7:
         e0:0b:97:ff:0a:c9:f6:41:01:d6:88:4f:41:71:d5:dc:91:ac:
         15:f9:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:12 2026 by rpki-client