Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
File:                     zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json)
Hash identifier:          eY9d+AbGjz6qnGQAlhrBa3osJA0hI33lNU+MxOt8C5s=
Subject key identifier:   BB:C9:0E:B2:15:33:2D:50:96:18:4A:25:BE:31:25:78:81:B9:D5:D5
Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
Certificate issuer:       /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
Manifest number:          0101
Signing time:             Wed 15 Apr 2026 05:45:07 +0000
Manifest this update:     Wed 15 Apr 2026 05:45:06 +0000
Manifest next update:     Wed 22 Apr 2026 05:45:06 +0000
Files and hashes:         1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: EZFZcew6QyuaeDY7TNvpk7cA2DnNvEWvtxv1A6XA9p0=)
                          2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: S9t/+J52VQt2ne9SbBBHigAP25wl7hoUywJOVYVw1Ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
                          rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 05:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
        Validity
            Not Before: Apr 15 05:45:06 2026 GMT
            Not After : Apr 22 05:45:06 2026 GMT
        Subject: CN=69df25e3-f0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:07:96:52:26:99:90:4f:79:e3:a4:36:5a:c9:
                    71:48:5e:aa:7b:cd:3b:43:fb:86:c7:8a:64:58:03:
                    b0:64:77:68:5e:b4:eb:ec:7c:53:fa:5e:35:9b:13:
                    3d:4a:bf:07:3d:80:59:96:b7:6a:72:3d:00:00:fd:
                    02:a0:c1:f2:a0:6f:47:77:10:18:53:b2:43:bc:2e:
                    ad:b4:7c:02:c1:28:e8:38:68:58:35:41:e6:5a:5a:
                    86:cf:d4:69:6f:3b:86:4a:84:88:8d:51:06:e1:60:
                    a1:cf:0d:7f:9c:0c:67:43:64:32:ac:fd:f6:1c:e9:
                    10:08:5f:1c:d1:6a:69:a9:e3:92:a6:77:41:e1:b6:
                    2d:1b:40:e0:47:2c:f1:55:e1:e9:44:5c:e8:5a:7f:
                    19:3f:9f:ce:06:5a:be:48:fe:48:92:4e:e2:2b:03:
                    1e:14:4b:17:7c:84:3f:93:ca:9d:ea:30:70:52:d9:
                    99:8d:5c:44:11:48:7c:4e:c7:5a:2b:20:18:89:05:
                    e7:e1:e1:98:6f:9c:77:e3:0c:de:3d:eb:54:61:cf:
                    78:e8:4a:b1:ed:de:2a:f1:a6:84:70:55:8c:2c:19:
                    9d:db:90:91:81:a8:98:5f:a4:f0:79:e8:dd:7e:24:
                    70:69:3a:9a:13:cf:71:54:c9:30:75:9c:5d:28:c8:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C9:0E:B2:15:33:2D:50:96:18:4A:25:BE:31:25:78:81:B9:D5:D5
            X509v3 Authority Key Identifier:
                keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f6:34:c9:8b:c0:30:55:ae:8e:1a:8e:bc:76:c9:b9:cd:46:
         25:b4:ec:86:66:8c:2b:09:a3:7a:b7:1a:d4:8d:26:de:25:56:
         50:20:1b:a5:32:2b:a6:d1:03:ef:03:fe:2d:6b:37:20:ef:e7:
         92:ff:4c:1c:2d:38:a2:84:ad:93:ba:b2:75:bc:15:55:2f:88:
         28:67:b9:7b:9c:a2:f2:d8:25:3a:c2:f1:2b:12:79:3c:59:6d:
         6f:47:7a:fe:3a:73:08:6c:39:99:5d:50:36:8c:da:a7:97:f4:
         75:e7:ce:7a:e8:cb:20:8a:91:54:6f:8c:49:6b:6e:e1:dd:33:
         55:1b:c2:42:d9:26:69:9f:c0:69:d8:ed:43:dc:8e:0c:6a:6a:
         d3:1c:18:2e:bd:2a:d9:5e:f0:ac:6e:1c:28:37:b3:2b:c8:67:
         c2:7c:bb:56:23:b0:97:66:c8:df:f3:c5:a9:b6:f6:15:0c:6e:
         f1:24:c8:2c:12:f1:0d:03:f6:fd:07:3f:72:47:9f:27:15:27:
         f1:45:56:db:33:31:b0:f0:c6:f3:f8:e1:5b:61:04:0a:9e:eb:
         61:a2:be:d5:8f:76:d6:1c:76:3f:78:1e:5f:22:16:97:00:27:
         f0:19:5c:12:f2:b7:0b:61:12:e3:5c:f1:4a:5f:21:8c:9f:89:
         63:28:66:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQzOUUxMTAvBgNVBAUTKENEOTI3OERFRDkxOEIyMzc1MDg2QjJDRjhFNEUwNjkx
N0QwMjExQjUwHhcNMjYwNDE1MDU0NTA2WhcNMjYwNDIyMDU0NTA2WjAYMRYwFAYD
VQQDEw02OWRmMjVlMy1mMGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1weWUiaZkE9546Q2WslxSF6qe807Q/uGx4pkWAOwZHdoXrTr7HxT+l41mxM9
Sr8HPYBZlrdqcj0AAP0CoMHyoG9HdxAYU7JDvC6ttHwCwSjoOGhYNUHmWlqGz9Rp
bzuGSoSIjVEG4WChzw1/nAxnQ2QyrP32HOkQCF8c0WppqeOSpndB4bYtG0DgRyzx
VeHpRFzoWn8ZP5/OBlq+SP5Ikk7iKwMeFEsXfIQ/k8qd6jBwUtmZjVxEEUh8Tsda
KyAYiQXn4eGYb5x34wzePetUYc946Eqx7d4q8aaEcFWMLBmd25CRgaiYX6Tweejd
fiRwaTqaE89xVMkwdZxdKMjW6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLvJDrIV
My1QlhhKJb4xJXiBudXVMB8GA1UdIwQYMBaAFM2SeN7ZGLI3UIayz45OBpF9AhG1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM5RS83OTg0NTcwQ0Iz
NTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNqZFFockxQams0R2tYMENF
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0ViVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDM5RS83OTg0NTcwQ0IzNTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNq
ZFFockxQams0R2tYMENFYlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANvY0yYvAMFWujhqOvHbJuc1GJbTshmaMKwmjerca1I0m3iVWUCAbpTIrptED
7wP+LWs3IO/nkv9MHC04ooStk7qydbwVVS+IKGe5e5yi8tglOsLxKxJ5PFltb0d6
/jpzCGw5mV1QNozap5f0defOeujLIIqRVG+MSWtu4d0zVRvCQtkmaZ/AadjtQ9yO
DGpq0xwYLr0q2V7wrG4cKDezK8hnwny7ViOwl2bI3/PFqbb2FQxu8STILBLxDQP2
/Qc/ckefJxUn8UVW2zMxsPDG8/jhW2EECp7rYaK+1Y921hx2P3geXyIWlwAn8Blc
EvK3C2ES41zxSl8hjJ+JYyhmLw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:25 2026 by rpki-client