Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
File:                     Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft (raw, json)
Hash identifier:          0mLSDveGwiYUpxbYQLq9OSMh+PH6zde1eQP3NbKiWdo=
Subject key identifier:   61:21:46:43:6B:AC:46:39:C6:8F:69:F6:7C:5F:E8:AF:BC:01:DD:C4
Authority key identifier: 09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF
Certificate issuer:       /CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
Certificate serial:       0596
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
Manifest number:          058D
Signing time:             Thu 16 Apr 2026 23:09:11 +0000
Manifest this update:     Thu 16 Apr 2026 23:09:10 +0000
Manifest next update:     Thu 23 Apr 2026 23:09:10 +0000
Files and hashes:         1: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl (hash: sFX9LE/nn3SxH7zAJduuhYd2YRVyhcm8kfn9c4damHo=)
                          2: 630BCB6E1A1D11EC99B84C20C4F9AE02.roa (hash: 7sdaRztYfffuMPbpIvWHbP2AaEjIDw99pX3bZR2f4wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl
                          rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9D0C, serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF
        Validity
            Not Before: Apr 16 23:09:10 2026 GMT
            Not After : Apr 23 23:09:10 2026 GMT
        Subject: CN=69e16c17-787d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:22:4d:f7:73:91:f3:0e:86:a3:13:2a:d2:
                    65:2b:71:eb:55:b9:b2:87:40:60:d4:c1:97:84:54:
                    86:3d:40:45:db:4d:b3:f4:fe:4d:64:e2:01:79:43:
                    5f:94:24:5b:a6:9c:3e:1b:5c:b3:1b:08:66:34:c6:
                    a9:06:28:8f:75:54:a5:95:a0:26:ba:27:3c:4b:a7:
                    63:6c:49:93:df:61:d2:a3:d6:7b:dc:eb:3d:9f:bf:
                    4b:b5:b8:b4:50:4e:ab:73:45:81:74:93:8c:b5:d0:
                    7c:0c:35:9a:47:dd:b3:c4:d4:ce:7c:45:af:21:37:
                    37:7d:ec:91:b9:4c:0a:01:ac:1d:ec:e7:12:19:a9:
                    4e:18:59:a9:d3:dd:f3:1d:18:23:d5:2e:8a:4c:6d:
                    fe:2a:f7:69:c1:a5:49:e1:da:3e:43:2f:5b:5c:c3:
                    78:bc:15:75:67:67:b8:d7:c8:6c:26:36:7e:a0:fc:
                    39:1c:c2:c3:81:cd:40:dc:6e:90:79:8f:db:fb:76:
                    a1:01:a3:ff:05:ac:65:2e:d9:be:ad:de:91:bd:3d:
                    de:c1:10:46:53:2a:b1:f9:19:4b:fe:51:bf:fa:da:
                    a2:29:bf:59:da:79:38:ba:5e:fc:fb:f0:5e:b5:38:
                    2e:66:f3:6d:12:22:6e:52:8c:be:60:e3:9d:bb:77:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:21:46:43:6B:AC:46:39:C6:8F:69:F6:7C:5F:E8:AF:BC:01:DD:C4
            X509v3 Authority Key Identifier:
                keyid:09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ba:68:d8:b8:28:88:ca:6c:b8:07:4f:da:8d:dc:77:2c:54:
         f6:47:61:96:9b:74:25:83:d7:a9:2f:f7:95:5a:fc:2f:74:1e:
         e2:0b:04:b5:0f:fb:d0:87:7c:b1:0c:fe:e8:fe:eb:d4:30:ea:
         ca:69:ae:e2:a3:b9:49:c8:92:9e:da:2e:83:56:84:de:6d:19:
         93:32:23:10:c8:d3:e6:74:79:74:62:19:85:ee:ed:b4:28:59:
         8d:cc:8f:47:b0:53:6f:45:88:05:48:5d:7f:47:51:51:7b:b5:
         97:0c:26:ce:44:8d:7c:8f:69:7d:12:e5:a1:43:94:70:cd:c3:
         63:1c:8b:98:21:55:3a:d3:d4:9c:77:54:16:69:95:cb:5a:30:
         64:44:fe:d4:dc:b9:c7:30:fc:ee:03:fa:d6:ba:a6:17:70:e1:
         03:63:b1:3f:37:6a:9a:35:8d:74:00:4e:92:a8:01:51:21:fc:
         fc:9c:25:d3:10:ac:c0:3c:41:82:5f:7b:15:d6:05:e5:b4:1d:
         5e:c4:c8:b0:69:eb:84:1b:95:f8:50:89:af:09:9e:14:5b:af:
         19:e6:46:0a:e5:48:3c:52:63:95:02:03:0f:bf:c0:91:46:f5:
         dc:20:16:bd:95:8b:58:af:29:05:50:b0:6a:44:43:3a:60:c6:
         77:48:80:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:36 2026 by rpki-client