Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
File:                     Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json)
Hash identifier:          rz0m+o6DJ/ONYg3uIKjXBO8dfQPKLWSSDmSSHb86iZQ=
Subject key identifier:   43:2B:79:90:C5:F3:A7:72:AF:4E:10:30:65:BC:C0:D7:9D:71:D1:EB
Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
Certificate issuer:       /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Certificate serial:       060F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
Manifest number:          0601
Signing time:             Thu 16 Apr 2026 22:50:12 +0000
Manifest this update:     Thu 16 Apr 2026 22:50:11 +0000
Manifest next update:     Thu 23 Apr 2026 22:50:11 +0000
Files and hashes:         1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: cKuD1gVnwfbXxW2OF6WcQ7RTbeRScJSKw6HKT7n+5MI=)
                          2: 0FAA7244A7D211F0BEE84D58C4F9AE02.roa (hash: AlymbExV8oEUR9AGjMS6/XmXiFrOWjjjg6e09oggXfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
                          rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6194, serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
        Validity
            Not Before: Apr 16 22:50:11 2026 GMT
            Not After : Apr 23 22:50:11 2026 GMT
        Subject: CN=69e167a3-bbc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:ce:13:c9:76:26:f1:66:c6:62:0f:2d:dc:
                    23:1a:f4:38:14:ab:13:ba:96:55:b7:47:de:34:4a:
                    47:e6:57:18:5a:02:06:32:c9:42:d9:cd:3f:c6:6c:
                    1f:bc:f0:e5:ba:14:a5:14:9a:65:58:8d:cc:02:72:
                    f8:fb:48:b7:7a:1a:ed:4c:d8:4c:87:22:0a:6f:43:
                    d5:18:c7:a1:0c:18:cc:be:21:14:4c:0f:9b:64:eb:
                    ee:57:a1:01:20:69:cc:a0:e4:79:38:39:62:94:e5:
                    65:21:5c:07:ec:39:51:fb:d5:9c:0d:43:f9:9a:91:
                    c3:d6:62:42:08:a2:3d:39:d1:02:ef:4a:ea:98:d7:
                    bb:db:08:d3:b3:a2:f8:89:53:d1:6a:16:84:80:82:
                    32:ed:5a:62:04:07:33:ba:20:df:86:e6:57:a4:bb:
                    3c:68:ff:b1:73:8e:01:5d:d8:01:d4:72:28:8c:97:
                    b7:fe:cf:88:d9:8d:09:63:b5:25:17:59:00:d6:d9:
                    22:43:6d:b2:36:6c:40:f8:9e:75:fb:b6:d6:4c:8a:
                    24:c6:61:86:a8:51:81:1a:c4:30:25:af:80:a4:a9:
                    6f:e7:27:04:d8:e4:5a:cd:46:7b:1f:46:91:b4:2e:
                    e7:2f:b4:c7:85:6b:c0:83:b8:83:2f:f0:04:95:72:
                    27:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2B:79:90:C5:F3:A7:72:AF:4E:10:30:65:BC:C0:D7:9D:71:D1:EB
            X509v3 Authority Key Identifier:
                keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e0:4a:2f:e7:cd:11:9d:d8:bc:80:0e:84:9c:7d:b0:d0:32:
         02:43:ef:3f:ff:1c:f0:c2:27:f9:de:d1:bf:50:bf:dc:1a:8a:
         f0:e8:7e:42:21:72:49:a0:79:78:70:c0:59:99:45:d1:63:8a:
         5f:74:e1:0b:72:97:8f:c4:68:7d:e5:b9:a5:e7:90:bf:18:c9:
         91:9f:98:12:85:64:c9:46:76:6d:65:b7:7a:6c:41:4f:fc:de:
         7f:15:3e:72:ff:0f:b0:74:13:46:51:d6:b3:29:f4:4e:bf:e4:
         c4:d1:33:17:e1:7e:e4:57:3c:50:62:55:9d:26:3a:94:e5:76:
         08:95:69:a2:78:40:ba:c3:e4:22:f4:00:66:df:24:9d:4a:29:
         56:54:cc:d9:fd:1c:b4:1f:4b:36:08:49:91:ea:62:89:99:0f:
         c9:10:1b:2e:c6:d5:13:bd:30:48:55:48:c7:d4:6d:dd:46:6c:
         3e:8c:2e:1a:3a:7c:e4:e2:e0:d5:6c:15:e9:79:c7:34:da:e9:
         5c:ca:48:ec:30:86:cd:1a:aa:73:bd:64:f3:5a:12:df:40:79:
         21:75:4e:8c:0a:15:bc:d2:07:d1:e4:e8:f6:44:72:da:f6:24:
         a9:ba:93:be:9b:9b:e1:d0:ee:37:96:a3:4b:b2:d1:84:ad:0f:
         7b:5d:d2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:16:00 2026 by rpki-client