Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
File:                     ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft (raw, json)
Hash identifier:          E/KRBovMgzsm4/bZwPl7t1BKoDHSqmy2ZToBp81txG8=
Subject key identifier:   26:E3:5E:60:A7:98:44:9F:B0:7A:09:E8:F0:6C:8C:80:F6:E1:05:EE
Authority key identifier: 64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14
Certificate issuer:       /CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
Manifest number:          0110
Signing time:             Fri 17 Apr 2026 05:37:16 +0000
Manifest this update:     Fri 17 Apr 2026 05:37:15 +0000
Manifest next update:     Fri 24 Apr 2026 05:37:15 +0000
Files and hashes:         1: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl (hash: loN9U4AJBo9yV4OZ7Z1+kiu9kPqJUTnXX6U+Scdj5Ao=)
                          2: 841585749B1211EFBFBF913CC4F9AE02.roa (hash: gdDMQEhJKbqQYoRrpzaidx3PSUdHajAqC/+MOePDuxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:37:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F09FE, serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814
        Validity
            Not Before: Apr 17 05:37:15 2026 GMT
            Not After : Apr 24 05:37:15 2026 GMT
        Subject: CN=69e1c70c-af56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:9a:49:91:7c:7a:d4:d0:dc:29:8d:f9:1a:
                    0c:ff:1c:95:21:89:6d:5e:b3:93:06:e0:d7:da:96:
                    ae:6d:71:49:1f:c8:3e:2a:c1:c0:f2:38:bb:a5:c6:
                    a6:85:a0:4f:c3:34:ae:5f:1f:2d:f7:a9:58:67:96:
                    21:7b:d2:f4:29:07:61:f9:67:e8:c0:67:08:47:a2:
                    f4:d0:eb:55:8c:ef:cd:2a:4c:0c:1b:6d:b0:18:19:
                    2c:09:2f:e5:69:58:64:43:4e:2a:a9:7d:94:d3:fb:
                    bb:ef:50:a3:38:5e:c3:1d:2b:cd:fc:70:74:7b:57:
                    ec:d9:6f:3b:a1:1b:ff:1f:58:1a:8a:fe:2c:66:67:
                    c0:fb:50:83:1b:b2:38:41:b9:88:57:9a:19:c9:65:
                    5b:0d:8e:c1:6b:5c:b9:b1:f7:b2:84:66:f3:57:6e:
                    9c:c6:f9:f7:ee:2a:bb:2f:58:4f:79:1e:3e:2c:f2:
                    d2:28:c4:a7:5a:ed:52:a8:ee:04:8a:92:5f:33:39:
                    da:37:5d:5c:85:fa:6d:07:83:91:91:cc:1e:46:5c:
                    af:7c:2f:2a:54:ed:f4:c4:cf:26:07:cd:4a:19:0f:
                    79:ce:9b:56:3e:6b:84:c4:4e:d1:0d:6a:51:71:74:
                    1d:fc:d7:51:96:3a:43:aa:85:61:2c:ed:f3:19:c5:
                    a4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E3:5E:60:A7:98:44:9F:B0:7A:09:E8:F0:6C:8C:80:F6:E1:05:EE
            X509v3 Authority Key Identifier:
                keyid:64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c8:f2:73:c3:ec:01:fa:45:bd:7c:b5:da:df:4b:40:51:e3:
         f4:4d:1f:0b:a1:d0:95:55:fd:9a:64:6a:65:6e:0e:aa:3c:43:
         35:d7:99:85:94:86:87:a4:66:cc:cb:82:00:5a:09:04:79:b6:
         e1:15:b1:41:04:13:3d:dd:9f:8f:c5:fe:4b:a6:11:da:57:7f:
         8e:7d:10:20:99:c8:18:0d:84:06:4e:71:7a:41:2a:11:d3:34:
         80:b8:40:e3:98:7e:53:54:33:9d:87:0d:3d:65:6e:93:b1:d6:
         10:e0:56:55:01:bb:76:fb:78:d9:02:29:14:26:f0:2b:9a:0d:
         58:57:2c:f8:6a:02:72:2e:d0:a0:ef:9f:87:aa:7a:32:d7:b5:
         6b:01:63:ce:b2:6e:63:ea:89:a3:34:c4:9e:78:12:79:fe:a1:
         bd:bd:43:a4:32:88:1f:f1:56:0f:43:47:66:f6:7e:81:55:62:
         52:29:58:8a:dc:75:d0:1a:ec:a6:25:72:36:41:9e:30:cd:55:
         f9:23:fd:53:a7:27:0a:a0:5d:46:9e:43:c4:8d:51:ca:6b:b2:
         9b:d5:ce:48:33:7a:7a:92:c6:28:cc:07:b4:95:a2:08:e9:85:
         cb:5c:b8:5f:4d:5f:93:c0:32:d0:18:ae:87:a2:8c:57:40:c3:
         69:4d:28:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA5RkUxMTAvBgNVBAUTKDY0Q0NDMTY2QzU4QzM4RkU4Q0MxOTc2RjVDRjA3QzFE
RDA2RjY4MTQwHhcNMjYwNDE3MDUzNzE1WhcNMjYwNDI0MDUzNzE1WjAYMRYwFAYD
VQQDEw02OWUxYzcwYy1hZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuEGaSZF8etTQ3CmN+RoM/xyVIYltXrOTBuDX2paubXFJH8g+KsHA8ji7pcam
haBPwzSuXx8t96lYZ5Yhe9L0KQdh+WfowGcIR6L00OtVjO/NKkwMG22wGBksCS/l
aVhkQ04qqX2U0/u771CjOF7DHSvN/HB0e1fs2W87oRv/H1gaiv4sZmfA+1CDG7I4
QbmIV5oZyWVbDY7Ba1y5sfeyhGbzV26cxvn37iq7L1hPeR4+LPLSKMSnWu1SqO4E
ipJfMznaN11chfptB4ORkcweRlyvfC8qVO30xM8mB81KGQ95zptWPmuExE7RDWpR
cXQd/NdRljpDqoVhLO3zGcWkQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCbjXmCn
mESfsHoJ6PBsjID24QXuMB8GA1UdIwQYMBaAFGTMwWbFjDj+jMGXb1zwfB3Qb2gU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDlGRS8zODAzQUExQzlC
MTIxMUVGQTg3QkI0M0JDNEY5QUUwMi9aTXpCWnNXTU9QNk13WmR2WFBCOEhkQnZh
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pNekJac1dNT1A2TXdaZHZYUEI4SGRCdmFCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDlGRS8zODAzQUExQzlCMTIxMUVGQTg3QkI0M0JDNEY5QUUwMi9aTXpCWnNXTU9Q
Nk13WmR2WFBCOEhkQnZhQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh8jyc8PsAfpFvXy12t9LQFHj9E0fC6HQlVX9mmRqZW4OqjxDNdeZhZSGh6Rm
zMuCAFoJBHm24RWxQQQTPd2fj8X+S6YR2ld/jn0QIJnIGA2EBk5xekEqEdM0gLhA
45h+U1QznYcNPWVuk7HWEOBWVQG7dvt42QIpFCbwK5oNWFcs+GoCci7QoO+fh6p6
Mte1awFjzrJuY+qJozTEnngSef6hvb1DpDKIH/FWD0NHZvZ+gVViUilYitx10Brs
piVyNkGeMM1V+SP9U6cnCqBdRp5DxI1Rymuym9XOSDN6epLGKMwHtJWiCOmFy1y4
X01fk8Ay0Biuh6KMV0DDaU0oHA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:33 2026 by rpki-client