Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft
File:                     ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft (raw, json)
Hash identifier:          bs4Dmlob2jIRz1w0mQ2XTeBaJi+lKa4uP37lC5vrihk=
Subject key identifier:   D5:E3:4E:41:2A:B4:B9:1B:3C:71:50:9C:9A:B2:A5:7F:E5:8A:AF:3B
Authority key identifier: 65:8A:59:01:02:5E:26:B7:17:6D:D2:AD:AE:AB:B6:7C:F0:A1:ED:1D
Certificate issuer:       /CN=A91DC76E/serialNumber=658A5901025E26B7176DD2ADAEABB67CF0A1ED1D
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft
Manifest number:          0F
Signing time:             Sun 05 Apr 2026 08:23:57 +0000
Manifest this update:     Sun 05 Apr 2026 08:23:57 +0000
Manifest next update:     Sun 12 Apr 2026 08:23:57 +0000
Files and hashes:         1: ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl (hash: uC8Q2S+SxfU9/pcOKbE3sZPcZsR4ChRNkUsWHbjTRPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl
                          rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC76E, serialNumber=658A5901025E26B7176DD2ADAEABB67CF0A1ED1D
        Validity
            Not Before: Apr  5 08:23:57 2026 GMT
            Not After : Apr 12 08:23:57 2026 GMT
        Subject: CN=69d21c1d-d1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:32:57:fb:28:dc:b9:60:51:6c:67:3e:3a:be:
                    4a:8c:9a:16:bc:8f:20:fb:61:f2:98:e7:e0:bb:b5:
                    cc:8d:83:af:31:19:39:31:73:10:24:b1:54:d2:8f:
                    a3:8b:e9:84:8b:ab:2a:20:95:f7:47:2e:11:c0:74:
                    c5:50:ae:83:d7:6d:25:52:98:82:58:b0:3e:1a:26:
                    bd:c7:98:fc:78:d8:7d:9b:7a:97:f4:17:3f:79:fa:
                    85:3c:8f:24:0d:c8:6a:14:7d:18:47:58:c3:7f:94:
                    6b:9b:4f:b1:1a:4d:e5:50:42:b3:9a:73:1b:1c:de:
                    16:f2:be:3d:c1:c3:c0:c1:7d:ff:07:d5:05:dc:b0:
                    0c:6f:51:8f:c5:77:98:17:3e:3d:dc:a1:f3:51:be:
                    c5:57:26:fa:cc:f4:e6:be:1d:9e:86:1f:f2:9e:4f:
                    8f:8f:8e:19:62:07:20:e4:62:03:4c:75:8d:9b:74:
                    e9:9e:5f:f4:49:59:59:a5:c0:0e:e2:da:c9:72:4e:
                    d8:86:c0:9b:b5:7b:2d:d0:b5:96:07:10:86:4a:fc:
                    c9:83:a4:05:e9:74:0d:2e:a6:e5:65:20:3e:c7:a7:
                    20:32:90:e0:36:ed:0c:12:f0:6f:49:d4:1c:34:b6:
                    29:dd:23:6d:4a:6d:91:a0:ac:fd:68:f1:b3:f5:94:
                    8d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E3:4E:41:2A:B4:B9:1B:3C:71:50:9C:9A:B2:A5:7F:E5:8A:AF:3B
            X509v3 Authority Key Identifier:
                keyid:65:8A:59:01:02:5E:26:B7:17:6D:D2:AD:AE:AB:B6:7C:F0:A1:ED:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9d:0b:df:8e:07:76:2a:8c:8a:6b:b0:ca:09:d7:22:81:8b:
         db:0d:2d:ec:92:0b:72:28:f7:17:dd:65:90:de:3b:d3:5c:b6:
         9e:d4:39:8c:8d:18:52:fe:76:9a:5d:5e:8d:2f:d0:b5:4b:be:
         30:a2:2a:ee:c8:77:00:d6:8f:26:28:75:a2:af:74:95:41:93:
         3b:6f:6f:fb:e9:e2:e8:e7:9e:03:a5:4d:d0:ba:53:c5:7a:97:
         8b:08:df:07:8b:b4:a7:29:cc:9d:3c:3c:5e:16:65:22:15:a2:
         30:38:35:e2:5c:7d:2a:41:a3:71:93:67:76:75:4b:54:19:3a:
         2d:15:00:a0:7d:ba:90:f4:5d:95:c7:ad:c5:28:62:44:d1:a3:
         79:3b:4d:90:68:b3:e5:d1:a7:98:81:92:7d:46:ae:e3:2c:f9:
         0a:0b:aa:05:1d:c1:95:65:8c:3e:34:e9:fa:a5:02:92:b0:03:
         57:24:3d:d6:ba:61:39:90:8c:d6:bd:98:7d:64:69:f0:74:d4:
         d7:be:b0:ab:bc:a3:56:b1:65:54:99:9d:6e:8c:66:63:17:6a:
         dc:8c:b0:c1:84:8a:7d:b9:63:dc:12:c5:78:78:0d:fe:1a:ba:
         9c:41:62:e9:1e:15:5c:ae:4e:cd:53:da:f7:dc:a1:44:1d:10:
         fa:9b:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:45 2026 by rpki-client