Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
File:                     zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json)
Hash identifier:          pa5X5GHFcL6HTpKYnQJ3QiGkKZ91bqLelwfdGWJ9YU0=
Subject key identifier:   66:EF:BC:CC:A3:6A:A5:C5:F0:6D:EE:F1:6D:44:45:1B:21:D9:55:15
Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49
Certificate issuer:       /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049
Certificate serial:       0976
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
Manifest number:          095C
Signing time:             Thu 16 Apr 2026 20:02:18 +0000
Manifest this update:     Thu 16 Apr 2026 20:02:17 +0000
Manifest next update:     Thu 23 Apr 2026 20:02:17 +0000
Files and hashes:         1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: 4zhjjOBcUC1CBTEu4FCbJ80GJe7hdgSxPrq1U1j/D9o=)
                          2: 2BEC62FA5DA011EF8E541175C4F9AE02.roa (hash: PDPdfJs3Sp/L4O6BvH4/f/PfyDghykuDm6tMTYKRkIk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl
                          rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2422 (0x976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED8E0, serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049
        Validity
            Not Before: Apr 16 20:02:17 2026 GMT
            Not After : Apr 23 20:02:17 2026 GMT
        Subject: CN=69e1404a-dc5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5e:57:c4:00:c7:a1:47:e7:76:81:29:f7:11:
                    25:b9:d3:65:6e:06:9a:65:a0:b1:7e:d9:a0:32:a4:
                    ce:f8:d5:9f:73:8a:e4:96:b8:06:3e:dc:46:32:3f:
                    e3:f3:71:66:f6:6c:a6:97:ea:8c:dd:10:6a:51:cb:
                    87:af:36:49:4f:e1:ca:3b:23:dd:46:36:5f:77:66:
                    39:9d:36:c1:a6:bb:fe:b4:73:c7:f2:f1:b6:fc:ec:
                    4e:8d:46:7b:7f:eb:cd:3d:ec:44:05:a7:65:f1:f8:
                    8a:46:17:23:83:f4:1a:a7:e7:35:18:cd:14:04:55:
                    3a:be:bf:fd:53:1e:c6:b8:33:fd:e9:4c:2f:c1:77:
                    e1:db:19:37:ea:8e:37:df:92:e0:60:2f:30:df:4d:
                    e2:83:a7:8a:b6:f4:55:f0:91:e5:92:5e:e3:50:26:
                    c0:0b:2e:8f:70:2b:55:28:51:e5:7a:58:5b:4c:b2:
                    3d:34:73:81:f8:18:46:00:bb:e7:da:da:2d:0c:f0:
                    20:0d:2a:67:f8:ea:ca:c7:07:dc:45:15:a9:4d:8e:
                    d2:50:62:c6:ef:84:36:9d:e4:39:e4:80:78:1a:f4:
                    8d:f2:07:22:42:f5:a1:fe:cc:ff:6e:fe:af:b4:ae:
                    e6:74:05:56:41:c4:3c:16:6c:95:6a:ef:fe:f1:23:
                    03:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EF:BC:CC:A3:6A:A5:C5:F0:6D:EE:F1:6D:44:45:1B:21:D9:55:15
            X509v3 Authority Key Identifier:
                keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3d:5e:84:cc:22:de:18:a2:05:d1:99:ea:3b:7b:a8:4b:a1:
         0a:6a:0f:ba:2a:06:d7:b4:4e:28:cd:7f:32:0b:ee:19:f8:03:
         69:ce:1a:d1:ca:f9:c8:0a:cf:8e:dc:1a:bf:ba:2b:ac:ca:cf:
         60:3d:27:78:5d:ec:fa:a6:61:89:8c:2c:89:00:be:46:58:12:
         25:e7:79:11:03:49:f1:1f:48:7b:3f:f3:46:4d:08:e7:bd:15:
         13:6b:ba:c4:46:4c:c2:18:fc:1f:05:c1:ea:42:bf:5d:dd:8f:
         c7:8e:36:6c:32:4e:28:82:e3:0d:57:db:e3:06:34:2a:13:57:
         ff:c0:88:40:85:6b:ea:6b:57:0f:23:72:f4:94:e7:ca:12:17:
         d9:16:8a:85:c2:21:22:95:55:42:86:91:25:d6:89:0f:52:f4:
         71:39:ca:3b:ce:16:fa:56:60:a5:87:0d:4a:4a:fc:57:6f:86:
         84:a2:47:a4:31:dd:1c:38:d7:92:54:f9:da:da:ba:b1:6b:96:
         c1:a8:e4:d4:fb:a5:04:1f:ec:38:0f:a3:25:f2:82:49:90:41:
         74:6c:e9:9a:48:41:2e:d5:4d:50:f9:fd:c7:36:60:a4:38:d1:
         6f:4f:b8:9b:e9:b5:9c:85:bf:90:61:85:de:b3:3f:ca:6f:28:
         05:37:b7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:00 2026 by rpki-client