Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
File:                     ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft (raw, json)
Hash identifier:          2e1m0V9OscjKsvVu2GMvz/SpXx9iLFb3nGXiTFNJMiI=
Subject key identifier:   62:54:80:B9:6D:6B:B9:B3:F1:6D:55:22:ED:58:E0:68:3E:BD:D1:4D
Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA
Certificate issuer:       /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
Manifest number:          098B
Signing time:             Thu 16 Apr 2026 20:08:46 +0000
Manifest this update:     Thu 16 Apr 2026 20:08:45 +0000
Manifest next update:     Thu 23 Apr 2026 20:08:45 +0000
Files and hashes:         1: ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl (hash: Q71DgstXvUZSosF5YmF3xJ5yMmXD5BEx7Xtgu6XyT3M=)
                          2: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (hash: 5RbDYlZaIKQenAR20w6lc3nfzj9SDGCtSWGXdzXfTX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl
                          rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA
        Validity
            Not Before: Apr 16 20:08:45 2026 GMT
            Not After : Apr 23 20:08:45 2026 GMT
        Subject: CN=69e141cd-2ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:af:5f:e7:19:97:69:2e:c0:27:53:a2:39:
                    db:ae:9d:99:4c:a9:1d:44:48:6c:e3:c5:ad:a2:46:
                    81:83:ee:fd:64:29:74:ad:d3:1c:55:36:8c:47:cc:
                    00:2b:b3:49:fb:e5:b1:94:9a:6e:73:dc:e5:81:15:
                    b7:a7:c9:4b:12:02:f8:83:5e:5c:f3:41:e9:a4:f6:
                    12:9b:d4:83:70:cb:19:b8:44:b4:c3:01:22:2d:56:
                    2e:27:6e:4c:62:7a:c6:8d:97:f3:d4:b2:2a:33:ab:
                    5e:c1:30:ed:a8:be:fe:be:0b:0d:5f:25:df:26:43:
                    1b:a1:37:13:56:34:8d:20:ea:e9:7a:bf:db:40:18:
                    ad:35:59:4f:a7:cd:64:a1:b1:27:74:e7:9f:dd:aa:
                    cb:e8:ed:f3:10:0b:82:85:98:b6:35:6e:62:a9:7b:
                    3a:da:e7:f2:88:77:6e:f6:e7:34:c4:6d:6c:f0:cb:
                    64:dc:4e:a4:f4:0b:9a:5e:1d:2c:a2:e6:6d:f9:74:
                    09:eb:89:1c:0e:fd:12:d8:36:97:77:67:a1:f1:1d:
                    80:2e:34:28:63:a6:76:2b:d3:1d:ab:d3:85:69:48:
                    63:74:5d:e5:32:6d:8c:f8:be:31:f3:dc:47:b1:a3:
                    82:39:72:9c:b4:75:2d:30:24:38:18:48:0a:42:81:
                    74:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:54:80:B9:6D:6B:B9:B3:F1:6D:55:22:ED:58:E0:68:3E:BD:D1:4D
            X509v3 Authority Key Identifier:
                keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:73:b1:81:36:0d:c6:91:35:c5:e8:f1:65:f7:68:c6:30:9e:
         e4:05:d4:fa:cc:80:f3:38:c1:82:37:2f:c8:1c:2b:d7:b5:32:
         49:1a:22:82:ab:18:21:d2:c6:85:28:dc:88:c3:75:0a:27:db:
         16:f4:cb:52:ed:80:e9:f1:c7:10:c0:81:46:2b:72:56:ab:50:
         43:65:1c:54:14:75:1b:46:76:46:3e:1b:cc:1d:1b:19:2c:1a:
         d8:98:c7:7c:ac:49:1c:7e:69:51:1a:5c:51:04:33:82:ef:06:
         4e:a9:b9:65:03:dc:83:6b:bf:0a:e7:ae:1d:55:37:0d:7b:11:
         f6:57:82:8c:5c:e9:8e:b5:8f:0f:a8:57:63:14:1c:48:21:a1:
         50:2f:bf:75:49:67:d6:e8:57:2e:bf:61:b0:e6:fb:70:b5:fb:
         09:e0:88:e9:0d:ba:df:0f:dc:63:00:4a:33:2e:67:31:69:48:
         eb:51:5f:fb:7b:a1:52:b5:21:79:5f:c9:f6:48:b3:44:9b:7d:
         c1:aa:21:e8:9b:18:64:f2:87:69:fd:ec:85:f4:56:fa:91:e3:
         80:13:b8:dd:16:40:2e:0c:56:97:17:06:55:c9:ff:d7:45:10:
         91:6f:02:68:57:e3:0c:ed:ad:c3:73:ae:bf:b4:d1:47:47:81:
         29:89:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:03 2026 by rpki-client