Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
File:                     iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json)
Hash identifier:          lTiVP5EnPZt28MjxkLHppXr5HkV50tOM1lZZyKetLXo=
Subject key identifier:   09:52:00:CF:2E:71:4A:F1:6E:82:47:1C:86:8D:DE:33:48:BC:6C:D2
Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A
Certificate issuer:       /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
Manifest number:          0292
Signing time:             Fri 17 Apr 2026 01:29:00 +0000
Manifest this update:     Fri 17 Apr 2026 01:28:59 +0000
Manifest next update:     Fri 24 Apr 2026 01:28:59 +0000
Files and hashes:         1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: 6gpnvGOk0AcVcb892KJLKD8zC4K4GUqziOqbku39S1M=)
                          2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: lsL1bzm7xgDwCWDuOlZQ/MIqVfUaWity48F6FNEzoq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl
                          rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A
        Validity
            Not Before: Apr 17 01:28:59 2026 GMT
            Not After : Apr 24 01:28:59 2026 GMT
        Subject: CN=69e18cdc-623b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:05:07:e8:26:c6:ee:57:be:aa:e9:fd:93:6e:
                    40:e5:1d:88:dd:d1:cb:08:5a:e2:ea:02:f9:b8:43:
                    a8:f9:1e:59:be:07:6f:bb:64:70:b3:d2:b4:0b:4f:
                    aa:c2:15:63:3d:dd:e8:12:cd:41:99:8f:56:39:a3:
                    79:a2:e6:6a:fa:22:70:46:29:52:01:66:38:fd:4c:
                    ac:9e:66:31:30:98:72:ff:50:14:60:75:41:3d:a1:
                    1a:d7:da:8d:f9:ce:0b:e8:0b:e2:43:cb:5d:14:18:
                    3c:5f:de:1a:9f:d4:54:a0:81:91:06:86:92:94:15:
                    ab:56:b0:25:bb:62:35:62:bc:f7:3f:0d:bf:30:44:
                    d6:93:c0:9a:9f:4c:ab:e7:d1:3d:30:4c:44:67:6b:
                    c9:67:3c:ac:aa:09:d0:14:8e:b2:45:49:fa:b4:a0:
                    4d:75:74:d3:a1:36:91:11:26:05:41:e2:1d:24:f9:
                    9f:9a:e0:a5:30:39:31:6a:f3:19:43:e7:b0:1f:e6:
                    11:69:be:e8:b4:f6:be:91:eb:cd:35:55:0b:7c:50:
                    b6:fa:2d:00:a6:d7:32:1d:7c:22:a9:07:0d:0e:6d:
                    c2:b3:67:8b:2d:ba:6c:17:8d:de:da:d2:41:26:26:
                    3c:41:9e:a6:2e:c6:50:5c:0e:f9:c1:5f:61:c2:79:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:52:00:CF:2E:71:4A:F1:6E:82:47:1C:86:8D:DE:33:48:BC:6C:D2
            X509v3 Authority Key Identifier:
                keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a2:dd:5c:75:e8:82:12:79:8b:29:29:54:f1:c6:92:2d:9a:
         5a:97:71:fc:e9:74:36:7c:a7:93:69:02:1b:a4:0a:b4:02:b3:
         39:fd:a0:a4:5f:e6:14:d9:98:a2:73:d3:57:df:f1:a3:64:8c:
         24:97:54:dc:44:5d:a4:56:67:6e:bc:ac:42:ea:38:f4:5b:61:
         71:d6:21:bd:18:8c:f8:4a:ff:e3:c1:5b:af:b0:d7:ea:34:ac:
         39:c5:ac:87:47:61:cf:d4:70:c4:89:4a:e1:2d:95:dd:34:5e:
         cf:a3:7a:63:2d:83:02:d6:03:03:29:4a:f6:d1:c4:bb:47:ef:
         31:47:4e:d0:47:c1:73:6a:83:0e:84:2a:d2:31:1d:9b:e2:bd:
         6c:7b:30:f1:37:64:27:e1:f1:98:4b:d5:5a:f0:d0:1a:77:05:
         5a:bd:7f:74:82:43:a0:8e:51:39:06:65:ff:6d:c9:44:4f:f1:
         3e:3e:9e:e1:4f:49:8b:78:1a:cd:6c:73:18:56:6e:45:45:e2:
         b6:99:54:aa:33:eb:2c:2b:3d:f9:bb:8a:5f:6e:61:bd:45:32:
         55:d2:d8:bf:0c:51:bf:1a:db:17:46:c2:1b:cd:7d:b2:64:88:
         f6:a2:d1:26:7b:ae:55:2a:95:20:94:64:ee:73:e2:96:ff:24:
         ce:28:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:51 2026 by rpki-client