Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
File:                     zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json)
Hash identifier:          R79ThiBmWmrEPuDCcrmoLXltQsPClAjFlgFIf7SjqYQ=
Subject key identifier:   A7:E8:03:80:2C:E1:12:0A:59:C2:DC:77:97:53:FA:71:C6:13:C0:1C
Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49
Certificate issuer:       /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
Manifest number:          D4
Signing time:             Fri 17 Apr 2026 06:26:55 +0000
Manifest this update:     Fri 17 Apr 2026 06:26:55 +0000
Manifest next update:     Fri 24 Apr 2026 06:26:55 +0000
Files and hashes:         1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: 4+51HTvk23Ar/ZMIkXER6+AshCRQs5s346GJy0w7Q/k=)
                          2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: R0DPi+gCEM4E0p+D/Qj5W33hKErsLZCVNvWPk/SawTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl
                          rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
        Validity
            Not Before: Apr 17 06:26:55 2026 GMT
            Not After : Apr 24 06:26:55 2026 GMT
        Subject: CN=69e1d2af-2ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:14:21:f0:8b:6b:39:f7:cb:25:d2:3b:ee:7a:
                    c2:39:07:58:38:87:b5:f6:08:3f:f4:7d:b8:f4:d3:
                    dc:80:9f:95:a5:32:cb:2b:62:a7:cb:f2:09:b9:bf:
                    bd:96:90:71:8c:46:c9:7e:a8:bb:64:8f:62:3b:7e:
                    2b:d8:05:0c:57:15:9b:0c:00:41:d7:94:ab:c4:b8:
                    12:53:9b:17:8e:e1:de:ac:5f:26:cd:3f:27:97:e2:
                    d1:1f:64:bf:45:fc:09:6c:e6:d0:a6:58:8c:50:2d:
                    d4:01:a4:7a:93:fd:8d:23:ec:fb:34:9b:5a:dd:e2:
                    9f:9d:83:e3:f4:a2:6c:59:9a:9c:7a:7b:db:4e:cb:
                    ff:6c:9f:e9:3a:bb:3c:7e:9d:9a:f5:29:8c:6c:30:
                    bc:fa:d4:cb:c4:6c:a5:4d:b9:03:e2:fa:4f:94:cb:
                    8f:d3:d6:c0:e0:61:b4:85:98:30:06:10:53:f3:6c:
                    ed:53:e4:52:ef:c9:a2:73:b5:22:2e:be:5d:26:aa:
                    35:1b:5c:b1:b0:16:cd:7f:9d:e1:1e:35:6f:22:b0:
                    3e:48:9b:6d:2b:ae:0e:37:80:2b:fd:0f:0e:95:10:
                    9c:30:fb:2a:2d:13:8b:04:95:81:3d:b1:14:89:21:
                    1f:6b:1e:92:c8:5d:50:83:24:3d:eb:98:91:8b:21:
                    20:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E8:03:80:2C:E1:12:0A:59:C2:DC:77:97:53:FA:71:C6:13:C0:1C
            X509v3 Authority Key Identifier:
                keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:03:74:d6:43:17:c5:16:11:f3:b6:96:1a:f1:cb:ca:e3:8b:
         9d:92:c6:4a:eb:74:74:d8:80:85:8c:74:12:e1:8c:f8:a1:8a:
         a0:14:c8:8a:35:54:91:e3:c9:2a:e9:01:4a:89:4c:fc:fc:2e:
         b3:f9:14:07:c7:d8:19:6b:e9:76:24:72:dc:bf:12:62:46:0c:
         fa:f1:64:9a:8d:c1:28:60:ec:28:7f:2e:0e:49:94:e7:fa:7b:
         df:6b:43:13:55:e4:25:71:19:30:da:73:e6:87:59:12:5c:14:
         78:26:16:4c:ec:a3:66:70:ca:38:48:0f:36:5b:0d:fd:65:56:
         18:8c:fb:5f:93:08:75:27:93:01:6b:c6:e1:b4:09:46:44:43:
         06:fd:75:c8:b1:4d:63:c8:c4:8c:69:31:77:66:c3:68:ff:5d:
         8e:c5:95:1c:27:d9:cd:7b:c9:49:29:ba:57:3f:89:fb:a0:49:
         91:89:e0:33:26:df:7a:f2:bc:c1:9d:43:e5:4b:4e:95:46:3d:
         09:ef:6a:45:18:07:ba:34:81:87:46:39:ea:ca:0f:b6:7c:3d:
         eb:fb:85:14:2a:42:6b:8b:fd:f1:2d:86:e0:a8:3c:50:12:09:
         1d:17:86:d0:88:91:d8:61:65:76:55:2b:01:55:85:da:c0:a7:
         b4:79:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:21:38 2026 by rpki-client