Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
File:                     ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json)
Hash identifier:          XtCO2fgeqhC+5qM5tx2T4plhSpOJfL52BhnuQEcE9ic=
Subject key identifier:   9D:B7:BD:66:5D:85:5A:10:C8:1D:31:1A:87:A8:BF:91:1C:96:58:4D
Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
Certificate issuer:       /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Certificate serial:       1231
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
Manifest number:          1226
Signing time:             Thu 16 Apr 2026 17:04:15 +0000
Manifest this update:     Thu 16 Apr 2026 17:04:15 +0000
Manifest next update:     Thu 23 Apr 2026 17:04:15 +0000
Files and hashes:         1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: kxdT71vGFhi+CGWnAODE9nhg/lbh7R6xBvnqYAYh028=)
                          2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 6P0QZul7deP/5azgpjbHdDKzo/8UCrH1J+Uoz59/kWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl
                          rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4657 (0x1231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
        Validity
            Not Before: Apr 16 17:04:15 2026 GMT
            Not After : Apr 23 17:04:15 2026 GMT
        Subject: CN=69e1168f-9584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c2:ff:fe:54:36:0b:1b:e5:20:ae:e0:02:60:
                    af:c2:a9:60:73:97:24:cb:49:38:67:32:76:39:8f:
                    61:1f:80:cc:92:37:26:2c:94:52:f2:72:28:6d:04:
                    3e:cb:25:6f:b0:43:d9:e6:dc:d0:22:ac:e3:7d:b9:
                    5c:45:d4:6f:e2:5d:a0:25:c5:c9:0b:0e:98:4e:b6:
                    f3:f8:b7:80:13:a8:89:77:c9:20:af:d3:a5:7a:2d:
                    b9:75:84:ea:7a:a8:66:9c:5c:d9:3d:c0:50:cc:c0:
                    b9:68:24:20:5e:0d:e6:7d:2a:70:d4:4d:87:a2:d7:
                    f2:4b:7f:42:25:b9:13:3b:1b:31:bf:81:f9:cb:9f:
                    b1:99:65:c2:a2:7f:2a:2d:9b:a2:22:69:e2:0b:5e:
                    94:0f:d3:11:3c:0b:18:fa:06:87:e3:50:4e:e2:85:
                    df:aa:1b:a3:63:04:51:0e:ab:0e:83:29:bd:32:ce:
                    7c:4c:11:4d:65:fa:4e:28:94:a6:0c:02:32:49:02:
                    80:d0:70:0c:4b:f5:cd:c3:b1:1f:6d:bd:7d:3c:c3:
                    b3:f8:0b:c7:19:80:68:4b:0e:06:b7:b6:7b:75:94:
                    dc:16:e9:44:40:1e:2a:3d:ac:bd:6f:4a:bb:4e:fa:
                    4b:57:36:db:f5:a5:db:42:48:44:dd:66:06:91:44:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B7:BD:66:5D:85:5A:10:C8:1D:31:1A:87:A8:BF:91:1C:96:58:4D
            X509v3 Authority Key Identifier:
                keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:bc:5e:30:9d:e7:96:c6:6b:ff:51:9e:2a:4f:31:cd:31:1a:
         8c:ff:88:ef:9f:1e:81:51:79:d2:67:15:aa:07:16:71:4a:b0:
         dc:8f:69:ac:c1:10:00:48:7c:0c:de:2f:61:74:b3:45:37:58:
         41:1b:7f:e3:86:a6:6b:ac:92:9c:27:e4:46:fb:57:14:d9:ff:
         8b:02:f1:65:3a:8d:5b:ed:83:4a:2b:c9:73:eb:9d:63:35:44:
         c9:2c:4e:76:28:39:40:6d:e2:6b:fd:f5:06:8c:41:64:dc:40:
         4e:a0:0c:a0:a4:da:08:a4:6f:f2:13:9f:79:d0:dc:53:f9:33:
         c8:cb:eb:ed:5b:9f:2b:81:49:cb:26:ef:97:0e:c6:28:86:7c:
         5f:8d:e2:e2:0f:a5:e0:68:5a:6b:07:65:79:c9:3e:d4:9d:8e:
         a5:20:a7:79:9e:7a:9c:49:f5:43:22:c2:5e:6d:30:73:f2:35:
         08:8e:80:cb:f0:0a:a2:16:5d:88:cc:0b:91:c2:25:ce:d8:bb:
         df:6d:b3:2f:4f:a7:e2:77:a4:24:96:28:2d:fb:e5:b1:12:4b:
         86:cf:75:12:41:d2:1d:e0:6f:37:1f:e9:e7:f1:d9:ac:90:29:
         fb:d2:57:ba:e3:9d:38:4a:80:0d:6a:ec:80:85:ed:31:a5:e2:
         4d:cc:eb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:51 2026 by rpki-client