Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
File:                     z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft (raw, json)
Hash identifier:          I42/+kdg7b4TK0iozWr7vbG3oul9m4joPlVdm8LVdYY=
Subject key identifier:   4A:D7:1E:C3:4B:20:D8:C0:AA:6B:78:D1:E7:DE:11:F9:73:C4:16:0F
Authority key identifier: CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3
Certificate issuer:       /CN=A91F7D5E/serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
Manifest number:          32
Signing time:             Wed 15 Apr 2026 08:13:39 +0000
Manifest this update:     Wed 15 Apr 2026 08:13:38 +0000
Manifest next update:     Wed 22 Apr 2026 08:13:38 +0000
Files and hashes:         1: z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl (hash: hFekk5obcfp8eRvFpqP+NR8r90WiMjajIUrofy64H8I=)
                          2: 75FA3D56F20311F081D1C5E2496F56BC.roa (hash: iKD/upGNnZX+RaqlnGQMRh+aU9FLucr+XYy9zJq/7P4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl
                          rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D5E, serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
        Validity
            Not Before: Apr 15 08:13:38 2026 GMT
            Not After : Apr 22 08:13:38 2026 GMT
        Subject: CN=69df48b3-1002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7f:68:75:a9:40:5c:c8:06:63:ed:c3:13:e4:
                    1d:10:56:78:dd:ac:2c:92:5f:52:ea:38:c5:8d:66:
                    7c:20:d7:9d:f8:3d:3b:a9:d6:cb:c7:ba:81:9e:9e:
                    b6:78:c3:2b:3c:76:98:18:0e:84:53:a7:eb:13:ab:
                    77:98:00:0e:68:a7:97:f1:28:ad:6a:21:f6:18:82:
                    bf:48:fb:06:10:24:42:b3:f3:b1:ab:d7:59:52:94:
                    cc:f2:a3:81:2a:3e:d4:29:59:2a:9b:e0:bd:05:32:
                    e7:a7:cd:fc:82:58:d9:43:99:2f:e9:55:b1:5c:be:
                    88:69:03:c3:81:37:2d:35:70:7f:4b:3a:b0:26:ef:
                    cf:66:f6:93:ee:dd:5b:bc:52:54:63:6e:a6:86:47:
                    b9:a3:13:27:06:ad:35:c9:65:e0:fa:4e:92:ca:dd:
                    0d:7b:7a:7c:e8:4f:0d:b4:eb:9a:a3:b5:55:26:69:
                    b4:e9:0a:f3:bb:3e:6f:8d:39:17:7a:42:3e:0a:12:
                    8f:2d:03:a4:f7:79:5c:d6:04:86:ac:4f:08:59:25:
                    f2:b1:28:b7:f9:6b:ad:ba:4a:2b:3c:1d:c6:a0:e4:
                    a4:1b:48:11:5c:d0:19:d4:90:4d:72:72:18:8c:17:
                    09:14:69:44:b6:97:46:ad:0f:75:b9:49:08:c3:f6:
                    65:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D7:1E:C3:4B:20:D8:C0:AA:6B:78:D1:E7:DE:11:F9:73:C4:16:0F
            X509v3 Authority Key Identifier:
                keyid:CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:46:c9:d1:e3:0f:5f:e7:7a:5f:33:00:96:ea:75:aa:26:a2:
         ac:ea:6d:38:bc:c3:57:a9:9f:9d:f7:78:e0:00:56:f1:21:03:
         d5:13:51:71:d9:2e:e7:1c:35:f5:4d:8d:e6:82:4b:ba:04:21:
         16:1e:53:e9:7e:2b:ac:dd:31:bc:90:01:03:0d:65:75:ba:1e:
         06:6d:fc:7d:61:ff:e9:df:04:75:85:7a:69:42:ad:87:49:31:
         d7:b6:81:50:04:2b:59:31:32:d7:50:05:d6:b0:1b:e8:d6:b3:
         1c:3d:68:6c:42:35:a6:29:be:04:af:4f:61:e3:d6:c1:bb:b5:
         ee:90:ab:bc:15:44:fa:80:af:84:1c:7f:8f:f2:4a:d6:b4:93:
         c2:dd:bd:e5:f0:1a:c7:51:d9:a7:0b:91:e6:5f:bd:8e:c5:1a:
         b1:80:fd:ab:29:ba:24:9b:5c:85:1b:3c:b9:84:24:88:9c:d2:
         18:07:a3:9b:9e:99:60:3a:dd:97:9f:b8:e1:4c:ce:6d:1e:c4:
         9e:62:86:eb:fa:21:82:06:09:17:61:5f:cc:d8:b6:ea:3b:e8:
         1c:0d:0f:72:ab:87:34:7c:8a:14:6f:e3:43:d8:37:f8:39:48:
         03:f7:1d:d3:32:77:eb:d0:0a:04:30:4d:a5:50:0a:fa:e2:d9:
         1a:d1:a7:52
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
N0Q1RTExMC8GA1UEBRMoQ0ZFNDdCQzhDNzQ4QkVGRDFCNzc1MjRDQzc5RkZBQjU0
QzE3QkRCMzAeFw0yNjA0MTUwODEzMzhaFw0yNjA0MjIwODEzMzhaMBgxFjAUBgNV
BAMTDTY5ZGY0OGIzLTEwMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCf2h1qUBcyAZj7cMT5B0QVnjdrCySX1LqOMWNZnwg1534PTup1svHuoGenrZ4
wys8dpgYDoRTp+sTq3eYAA5op5fxKK1qIfYYgr9I+wYQJEKz87Gr11lSlMzyo4Eq
PtQpWSqb4L0FMuenzfyCWNlDmS/pVbFcvohpA8OBNy01cH9LOrAm789m9pPu3Vu8
UlRjbqaGR7mjEycGrTXJZeD6TpLK3Q17enzoTw2065qjtVUmabTpCvO7Pm+NORd6
Qj4KEo8tA6T3eVzWBIasTwhZJfKxKLf5a626Sis8Hcag5KQbSBFc0BnUkE1ychiM
FwkUaUS2l0atD3W5SQjD9mWlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUStcew0sg
2MCqa3jR594R+XPEFg8wHwYDVR0jBBgwFoAUz+R7yMdIvv0bd1JMx5/6tUwXvbMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3RDVFLzE4QzgzRjQwRjIw
MTExRjBBRDQxOENCQTQ4NkY1NkJDL3otUjd5TWRJdnYwYmQxSk14NV82dFV3WHZi
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvei1SN3lNZEl2djBiZDFKTXg1XzZ0VXdYdmJNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3
RDVFLzE4QzgzRjQwRjIwMTExRjBBRDQxOENCQTQ4NkY1NkJDL3otUjd5TWRJdnYw
YmQxSk14NV82dFV3WHZiTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAURsnR4w9f53pfMwCW6nWqJqKs6m04vMNXqZ+d93jgAFbxIQPVE1Fx2S7nHDX1
TY3mgku6BCEWHlPpfius3TG8kAEDDWV1uh4Gbfx9Yf/p3wR1hXppQq2HSTHXtoFQ
BCtZMTLXUAXWsBvo1rMcPWhsQjWmKb4Er09h49bBu7XukKu8FUT6gK+EHH+P8krW
tJPC3b3l8BrHUdmnC5HmX72OxRqxgP2rKbokm1yFGzy5hCSInNIYB6ObnplgOt2X
n7jhTM5tHsSeYobr+iGCBgkXYV/M2LbqO+gcDQ9yq4c0fIoUb+ND2Df4OUgD9x3T
Mnfr0AoEME2lUAr64tka0adS
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:58:47 2026 by rpki-client