Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
File:                     ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json)
Hash identifier:          4wewluqxKcLc8QkTg4bZmith9a2WIauA8xpdSsffL4E=
Subject key identifier:   55:F0:BE:49:78:D6:C8:83:AE:35:C1:E1:95:52:D2:F6:4F:40:8A:73
Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9
Certificate issuer:       /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
Manifest number:          0129
Signing time:             Sun 05 Apr 2026 05:01:58 +0000
Manifest this update:     Sun 05 Apr 2026 05:01:58 +0000
Manifest next update:     Sun 12 Apr 2026 05:01:58 +0000
Files and hashes:         1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: SV0ndbOmju8Ya4METOMCPaBM4hHlIVpsmVIJI6BuswM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl
                          rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A12C4, serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9
        Validity
            Not Before: Apr  5 05:01:58 2026 GMT
            Not After : Apr 12 05:01:58 2026 GMT
        Subject: CN=69d1ecc6-ad24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:5b:7c:b7:dd:39:33:08:85:41:44:75:e4:
                    f2:3b:b7:5e:a4:66:b3:20:2d:24:9a:07:55:51:73:
                    77:32:f0:2e:01:f2:01:d0:e6:fc:0b:23:0d:c2:6b:
                    a1:d8:95:46:7c:22:b7:c2:e1:45:fd:5b:99:6e:36:
                    a7:94:3c:15:5a:1a:37:af:e7:6e:b5:3e:31:b7:7c:
                    c5:69:e0:0b:c6:82:ed:05:e7:fc:0c:1a:5c:71:c2:
                    69:cb:fe:80:c4:b5:21:01:62:ba:ed:ea:08:0b:02:
                    2e:3f:f3:25:cb:50:0b:f9:1b:8f:a7:97:53:63:03:
                    3a:b4:1c:64:7e:54:d8:78:3b:9f:ff:b6:34:8a:2c:
                    e2:1f:5a:f0:88:8f:0f:77:e9:05:c7:37:78:cc:47:
                    48:2e:22:85:52:9c:2f:48:41:3c:68:86:ff:32:90:
                    c4:5c:fa:53:31:7b:25:6d:04:f8:81:9f:68:14:32:
                    2e:ed:75:28:69:b9:c2:b1:11:9f:99:af:a4:34:6b:
                    2e:28:50:d3:12:3a:b3:40:2e:90:f0:e9:0e:7f:c0:
                    ff:bc:78:0f:b0:05:1b:eb:ef:f3:26:1c:70:62:9b:
                    ab:d0:46:20:36:3d:5b:fc:23:11:38:e8:09:fa:04:
                    4c:8c:59:f6:4b:34:e0:7f:30:17:00:5f:b4:e3:76:
                    0f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F0:BE:49:78:D6:C8:83:AE:35:C1:E1:95:52:D2:F6:4F:40:8A:73
            X509v3 Authority Key Identifier:
                keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:eb:8f:43:c3:f6:bb:63:c6:0d:83:51:8d:96:01:a1:4b:36:
         d7:06:6e:80:0e:31:03:b3:28:a9:36:ee:f8:03:d9:50:d2:04:
         e7:c6:58:88:18:77:47:d8:07:44:b8:57:70:48:4c:51:71:d7:
         99:ac:65:09:05:2f:7b:34:46:fd:54:f0:c4:f1:b0:3a:bf:4d:
         ac:b3:5d:db:f8:35:33:49:0a:92:3e:5e:f3:59:bc:1d:70:57:
         da:6b:7f:f2:ae:68:78:6e:ec:88:18:7c:38:91:00:bd:62:8f:
         a8:c4:ff:91:0c:35:91:0d:42:87:28:55:12:1f:19:cc:93:62:
         58:b5:74:cb:32:e2:51:92:fd:06:6e:6c:14:c1:93:d5:c6:04:
         02:cf:15:22:85:82:10:4a:31:bb:82:a8:97:36:b3:ed:ab:96:
         cb:78:d4:73:18:96:9f:54:f0:30:3f:eb:df:2a:cb:c3:73:01:
         52:2e:7e:c1:60:5c:a9:b4:2e:33:38:27:d4:e6:93:f6:67:1c:
         2c:32:b3:2d:5e:9f:43:f6:5c:51:33:3d:c9:5a:58:47:87:27:
         92:bf:e4:df:c6:bb:2b:78:db:fe:5b:f9:b1:ed:0a:ab:4d:15:
         b3:c0:b6:2a:8b:5c:b1:0e:c6:6d:0b:c7:94:83:8e:5d:d4:b6:
         78:47:67:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTEyQzQxMTAvBgNVBAUTKDY2QzVCMTkwNEIzNUM0N0Q5NDUwOEVDMEExQUNEQTgz
NjhERUY0QTkwHhcNMjYwNDA1MDUwMTU4WhcNMjYwNDEyMDUwMTU4WjAYMRYwFAYD
VQQDEw02OWQxZWNjNi1hZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvslbfLfdOTMIhUFEdeTyO7depGazIC0kmgdVUXN3MvAuAfIB0Ob8CyMNwmuh
2JVGfCK3wuFF/VuZbjanlDwVWho3r+dutT4xt3zFaeALxoLtBef8DBpcccJpy/6A
xLUhAWK67eoICwIuP/Mly1AL+RuPp5dTYwM6tBxkflTYeDuf/7Y0iiziH1rwiI8P
d+kFxzd4zEdILiKFUpwvSEE8aIb/MpDEXPpTMXslbQT4gZ9oFDIu7XUoabnCsRGf
ma+kNGsuKFDTEjqzQC6Q8OkOf8D/vHgPsAUb6+/zJhxwYpur0EYgNj1b/CMROOgJ
+gRMjFn2SzTgfzAXAF+043YPdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXwvkl4
1siDrjXB4ZVS0vZPQIpzMB8GA1UdIwQYMBaAFGbFsZBLNcR9lFCOwKGs2oNo3vSp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTJDNC9GQkYxNEU3MjZD
MTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi9ac1d4a0VzMXhIMlVVSTdBb2F6YWcyamU5
S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pzV3hrRXMxeEgyVVVJN0FvYXphZzJqZTlLay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTJDNC9GQkYxNEU3MjZDMTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi9ac1d4a0VzMXhI
MlVVSTdBb2F6YWcyamU5S2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyeuPQ8P2u2PGDYNRjZYBoUs21wZugA4xA7MoqTbu+APZUNIE58ZYiBh3R9gH
RLhXcEhMUXHXmaxlCQUvezRG/VTwxPGwOr9NrLNd2/g1M0kKkj5e81m8HXBX2mt/
8q5oeG7siBh8OJEAvWKPqMT/kQw1kQ1ChyhVEh8ZzJNiWLV0yzLiUZL9Bm5sFMGT
1cYEAs8VIoWCEEoxu4Kolzaz7auWy3jUcxiWn1TwMD/r3yrLw3MBUi5+wWBcqbQu
Mzgn1OaT9mccLDKzLV6fQ/ZcUTM9yVpYR4cnkr/k38a7K3jb/lv5se0Kq00Vs8C2
KotcsQ7GbQvHlIOOXdS2eEdnbQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 21:08:35 2026 by rpki-client