Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft
File:                     ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft (raw, json)
Hash identifier:          10AABKZMQsvfIpZ7oc9aZ/QpFl9n/LOhtgvUXX5wQrI=
Subject key identifier:   B3:09:9D:34:28:0E:AA:DE:C2:66:6E:EC:04:42:89:12:66:51:CF:40
Authority key identifier: 65:54:2C:EC:28:11:1F:C5:4B:A3:D2:AE:E3:3F:4C:E8:7B:7F:90:AD
Certificate issuer:       /CN=A91E4743/serialNumber=65542CEC28111FC54BA3D2AEE33F4CE87B7F90AD
Certificate serial:       0957
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft
Manifest number:          0981
Signing time:             Thu 16 Apr 2026 20:04:05 +0000
Manifest this update:     Thu 16 Apr 2026 20:04:05 +0000
Manifest next update:     Thu 23 Apr 2026 20:04:05 +0000
Files and hashes:         1: ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl (hash: 70nFEtAOmDerW1eX2CCLVrLXbaFZlBYA2rMz52jf1lk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl
                          rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2391 (0x957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4743, serialNumber=65542CEC28111FC54BA3D2AEE33F4CE87B7F90AD
        Validity
            Not Before: Apr 16 20:04:05 2026 GMT
            Not After : Apr 23 20:04:05 2026 GMT
        Subject: CN=69e140b5-9c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:2e:91:a4:e1:6d:3f:0c:d1:84:3c:ba:f9:
                    8a:c8:7b:be:0c:74:28:92:31:e2:c5:84:c1:65:4b:
                    c2:b7:ac:cb:b5:c6:41:71:b9:0a:37:bf:4a:3d:56:
                    45:92:ac:42:1c:f0:2d:2c:41:a7:52:88:a9:3b:f0:
                    08:18:e6:21:1b:69:8c:e4:a2:2e:1b:32:c3:b9:36:
                    9e:bd:1d:06:2a:f6:2a:4e:2e:60:80:9c:68:23:07:
                    00:b1:6f:14:68:34:49:8f:ae:70:5d:21:1a:9e:81:
                    9e:40:30:1c:99:5f:54:01:9a:0b:60:20:9b:78:41:
                    94:4b:19:b2:73:89:14:2b:33:e0:03:cc:94:a8:68:
                    66:06:9a:2d:4c:6a:3f:cf:43:9a:fe:72:c7:2c:06:
                    56:20:59:20:d8:90:eb:d7:e2:20:3a:a7:b7:fa:83:
                    ad:0a:a5:9b:5e:41:0d:ac:35:dd:d2:6c:e4:2a:fd:
                    32:8b:af:3d:15:26:19:5b:c7:68:0f:e8:e9:19:d2:
                    1b:f4:a3:e1:b2:25:00:5e:e6:02:a9:89:61:81:39:
                    5a:0a:fd:5b:30:65:9c:08:3f:c1:33:26:d0:41:c7:
                    0a:0d:6f:57:90:6b:a0:15:2e:50:aa:7b:8f:2f:f1:
                    fd:ce:5e:12:8b:68:a2:f0:cb:01:d5:a5:ef:28:3d:
                    83:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:09:9D:34:28:0E:AA:DE:C2:66:6E:EC:04:42:89:12:66:51:CF:40
            X509v3 Authority Key Identifier:
                keyid:65:54:2C:EC:28:11:1F:C5:4B:A3:D2:AE:E3:3F:4C:E8:7B:7F:90:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6d:c3:26:d8:c0:82:7f:fd:83:29:e7:75:ec:af:47:23:57:
         4b:7f:0e:e5:68:bd:a4:0c:bd:63:6b:d3:a6:f5:bb:38:07:eb:
         6f:d7:cf:37:1f:37:ec:95:91:e5:17:f0:64:a2:1d:c5:94:c8:
         bc:09:00:6b:8e:19:7a:ad:ec:78:91:fe:3d:66:e0:74:a5:b7:
         82:bc:b3:ab:80:89:66:85:16:61:14:28:26:da:8c:a7:b1:81:
         3f:b2:ae:57:d1:aa:e3:c6:c0:f1:39:0d:fe:d8:cc:fe:71:af:
         e9:47:b2:cd:9d:11:f7:c7:19:67:2a:9c:7a:72:0c:4f:7d:4f:
         85:1c:f9:19:cf:eb:34:21:bd:f1:07:9b:9f:a9:8a:d0:01:ea:
         ab:21:98:5b:ca:5e:47:1d:47:69:51:d8:f1:99:09:90:39:5d:
         f2:57:9a:4a:d7:eb:b4:76:16:f0:8f:18:65:36:a3:1f:da:ec:
         e0:63:db:a9:b8:94:f8:cb:8b:52:ce:d6:02:14:e6:68:f0:a5:
         e5:85:1e:fe:4e:f1:bd:a5:7a:f8:b8:6e:c4:e9:b6:52:7a:5e:
         a6:b5:e1:3f:21:a7:37:80:24:46:3b:78:5a:88:f2:a3:57:e8:
         2d:2c:a9:57:d5:31:75:4d:38:60:3f:b0:81:db:01:15:81:df:
         1f:d6:71:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:54 2026 by rpki-client