Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
File:                     SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft (raw, json)
Hash identifier:          bGWsfQ8gRCZKE6pxgjq/WRRfexXk9g4ArcRwL1IAlGg=
Subject key identifier:   3C:85:23:DB:01:45:7A:65:9E:09:A0:11:DC:D7:1D:84:FC:13:A9:7B
Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7
Certificate issuer:       /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
Certificate serial:       03A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
Manifest number:          039B
Signing time:             Fri 17 Apr 2026 00:38:58 +0000
Manifest this update:     Fri 17 Apr 2026 00:38:57 +0000
Manifest next update:     Fri 24 Apr 2026 00:38:57 +0000
Files and hashes:         1: SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl (hash: eXDS/LzWbHhfKAlIWQUr8ZyXHDpUNqN9XJVJ8uaoZ2U=)
                          2: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (hash: UoeTGdDWFi8XFqsO7bK2F7lfw58R0SVfg1rPBc2qAFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl
                          rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928 (0x3a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB0D0, serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7
        Validity
            Not Before: Apr 17 00:38:57 2026 GMT
            Not After : Apr 24 00:38:57 2026 GMT
        Subject: CN=69e18122-104c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:33:72:1f:15:cc:45:6d:0b:ce:a4:e6:6a:c4:
                    19:0a:a7:cb:0e:11:8b:9a:ef:4b:15:56:14:82:2c:
                    f2:2f:dd:7c:39:ac:a0:3b:07:82:2e:df:05:ed:1f:
                    69:c3:54:b4:2a:49:22:bc:96:0a:88:a7:7f:ed:42:
                    5a:29:97:e2:29:7a:c8:f7:23:37:af:2e:d5:5d:6b:
                    c3:2d:0c:bb:fd:d3:76:cb:a9:7d:5d:4e:31:d6:84:
                    85:38:40:6e:6c:35:cf:73:a8:ff:f0:58:8f:0c:d5:
                    46:8f:9e:1f:1f:0b:43:72:3c:55:c3:79:49:d7:86:
                    21:86:87:d5:a0:d3:aa:26:d1:c7:b8:c5:f6:12:80:
                    52:4b:86:ea:55:b4:58:e5:33:14:aa:70:14:5d:f6:
                    64:40:5a:20:f4:66:66:fb:51:1f:cb:15:63:b9:9a:
                    96:4c:f8:3a:d8:3c:4d:75:4f:21:cb:04:08:e2:05:
                    92:79:02:29:45:ff:2c:71:1a:be:f2:6a:0f:d9:7d:
                    e7:8e:c6:61:e1:26:ad:5b:de:86:ef:e6:5c:21:6e:
                    25:c4:30:f1:42:7f:38:e5:cc:b3:c0:f3:4c:8e:1c:
                    cc:34:81:99:9a:92:08:9d:60:78:de:ea:d0:2a:47:
                    9b:24:6a:1c:b7:56:0e:d3:8f:3e:87:9f:32:2d:46:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:85:23:DB:01:45:7A:65:9E:09:A0:11:DC:D7:1D:84:FC:13:A9:7B
            X509v3 Authority Key Identifier:
                keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:11:61:b0:0f:b2:53:93:7e:a6:3b:7a:4d:51:3a:06:6a:2b:
         7b:86:ff:1f:92:4c:89:92:72:09:6e:fb:cd:cb:a0:2d:12:69:
         7a:60:2b:20:23:2c:39:ce:a6:e1:42:c9:15:68:b1:c3:2e:eb:
         f5:05:9f:de:01:6b:aa:fd:a9:6a:e4:b8:12:5f:01:a0:21:c6:
         f4:3b:42:70:c1:47:50:3b:68:ef:14:a6:65:79:5f:94:c8:46:
         dc:0d:76:0e:13:be:db:bd:97:60:b6:d5:00:56:1f:5e:6b:18:
         c3:95:39:f7:3f:87:b6:d1:e2:88:42:7c:77:2c:01:83:01:b2:
         69:a2:90:a9:46:23:14:17:e6:38:32:15:d2:69:f5:d4:26:aa:
         90:12:c2:6f:a6:7f:1f:79:fc:85:3e:01:c9:64:c6:ac:f2:62:
         c9:af:ae:78:09:c8:07:e5:e1:9a:75:e6:d9:7d:b2:9d:bd:9e:
         cd:b5:c1:68:2d:3c:d3:7f:0b:a6:a1:3b:f0:93:89:fa:b0:af:
         6a:d1:1f:e0:a0:15:ea:ff:07:0c:e0:06:b6:e6:5b:b2:52:19:
         ed:13:bc:d4:f4:85:f6:da:50:1a:90:2d:62:7c:f4:79:34:3d:
         9c:85:b5:2e:31:09:19:61:2d:9f:e1:b9:d5:83:89:29:05:92:
         02:c2:fb:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkIwRDAxMTAvBgNVBAUTKDRCM0M2OTU2QjA0NDkwMDEwMDg1OEMwREU1MEVCOUE0
NjJCMDhDQzcwHhcNMjYwNDE3MDAzODU3WhcNMjYwNDI0MDAzODU3WjAYMRYwFAYD
VQQDEw02OWUxODEyMi0xMDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8DNyHxXMRW0LzqTmasQZCqfLDhGLmu9LFVYUgizyL918OaygOweCLt8F7R9p
w1S0KkkivJYKiKd/7UJaKZfiKXrI9yM3ry7VXWvDLQy7/dN2y6l9XU4x1oSFOEBu
bDXPc6j/8FiPDNVGj54fHwtDcjxVw3lJ14YhhofVoNOqJtHHuMX2EoBSS4bqVbRY
5TMUqnAUXfZkQFog9GZm+1EfyxVjuZqWTPg62DxNdU8hywQI4gWSeQIpRf8scRq+
8moP2X3njsZh4SatW96G7+ZcIW4lxDDxQn845cyzwPNMjhzMNIGZmpIInWB43urQ
KkebJGoct1YO048+h58yLUYIhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDyFI9sB
RXplngmgEdzXHYT8E6l7MB8GA1UdIwQYMBaAFEs8aVawRJABAIWMDeUOuaRisIzH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjBEMC85M0ZCN0Y0RURC
RjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtBRUFoWXdONVE2NXBHS3dq
TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1N6eHBWckJFa0FFQWhZd041UTY1cEdLd2pNYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjBEMC85M0ZCN0Y0RURCRjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtB
RUFoWXdONVE2NXBHS3dqTWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlxFhsA+yU5N+pjt6TVE6Bmore4b/H5JMiZJyCW77zcugLRJpemArICMsOc6m
4ULJFWixwy7r9QWf3gFrqv2pauS4El8BoCHG9DtCcMFHUDto7xSmZXlflMhG3A12
DhO+272XYLbVAFYfXmsYw5U59z+HttHiiEJ8dywBgwGyaaKQqUYjFBfmODIV0mn1
1CaqkBLCb6Z/H3n8hT4ByWTGrPJiya+ueAnIB+XhmnXm2X2ynb2ezbXBaC08038L
pqE78JOJ+rCvatEf4KAV6v8HDOAGtuZbslIZ7RO81PSF9tpQGpAtYnz0eTQ9nIW1
LjEJGWEtn+G51YOJKQWSAsL74w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:52:11 2026 by rpki-client