Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
File:                     ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json)
Hash identifier:          8nJcs/yOMEXByqoiBNNyBzACZEd10atNxRSEALSLnqg=
Subject key identifier:   8B:E3:95:43:DC:CD:73:4E:BE:C2:04:77:4B:DA:87:C2:3D:DE:4E:12
Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
Certificate issuer:       /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
Manifest number:          94
Signing time:             Tue 07 Apr 2026 06:59:53 +0000
Manifest this update:     Tue 07 Apr 2026 06:59:53 +0000
Manifest next update:     Tue 14 Apr 2026 06:59:53 +0000
Files and hashes:         1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: wskal6wJJ1EjNmCAF2tZ7nhy0bj2CRY092JhgXqySGg=)
                          2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: BxOM7SgqdGJtQ0VBZeNqfMKq52lRmXi/Ew1Q7dVeV+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
                          rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
        Validity
            Not Before: Apr  7 06:59:53 2026 GMT
            Not After : Apr 14 06:59:53 2026 GMT
        Subject: CN=69d4ab69-6a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:bb:db:3f:3e:71:1e:04:05:69:4e:e9:a2:
                    9f:3b:c2:72:ec:7d:04:78:0c:b0:a8:ea:68:bd:36:
                    e5:f1:da:4f:40:03:f0:10:ca:d5:ed:17:3f:6f:c4:
                    c7:4c:fb:c7:f4:27:84:b9:b0:cd:75:e3:2d:74:d9:
                    ac:e5:7c:42:8d:99:a0:09:94:e5:b1:9a:1b:cc:77:
                    bf:ac:10:64:d3:58:1e:d3:54:a8:7b:91:8d:0e:3e:
                    69:f8:ec:55:20:7d:e6:8c:a6:f7:dd:fc:2c:97:2f:
                    94:2e:a9:84:9f:6f:3b:9b:74:a1:c9:fe:e7:63:d6:
                    e4:95:80:c7:c9:07:ab:16:b9:c4:03:5e:3e:1a:f2:
                    25:f3:3c:09:0a:b3:0a:a0:b3:8f:f5:b0:b5:0d:6f:
                    7a:85:83:55:63:e3:5c:6c:48:19:f3:e3:8b:65:a5:
                    36:2f:c3:0b:62:bd:35:51:81:bd:3a:37:a6:c5:99:
                    90:a0:f2:55:bf:9b:36:0f:ba:d9:2f:16:1f:86:5b:
                    1f:3b:82:e3:8c:58:9b:fc:57:44:e5:c3:12:11:58:
                    ba:a3:e7:d3:3b:e9:43:5d:fa:38:af:43:76:00:43:
                    63:6a:3f:31:11:7e:5d:06:4d:5f:2f:3d:74:75:8e:
                    8c:02:c7:01:51:d9:11:59:07:87:0b:1e:97:63:65:
                    8f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E3:95:43:DC:CD:73:4E:BE:C2:04:77:4B:DA:87:C2:3D:DE:4E:12
            X509v3 Authority Key Identifier:
                keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3e:51:61:b8:e4:fa:6b:5d:cc:45:8c:89:b5:b6:21:e3:2e:
         15:9e:2a:fc:33:73:80:93:68:5c:0b:70:7c:f8:bd:b9:c9:e0:
         07:17:b9:e3:68:db:a2:5c:cc:cd:f2:09:1e:14:c8:bc:dd:9b:
         77:75:40:91:4f:87:fd:bb:0e:90:18:1f:ae:32:18:8a:ee:49:
         36:6f:97:2b:3b:e5:ed:46:5c:ff:0d:4d:de:9f:7a:d0:a2:16:
         dd:e0:c1:72:e2:3b:b5:47:9e:f8:bf:18:4b:c5:75:0b:f9:89:
         66:cc:b8:82:8f:7d:5b:b1:f2:70:75:a6:25:10:6d:78:c4:20:
         01:ea:67:7c:69:34:fb:fe:f5:dc:9d:6d:4d:47:3c:85:9e:90:
         a6:c5:4b:30:86:5d:97:ff:c4:36:50:10:17:e3:38:b5:6a:4f:
         a0:75:bc:a8:d3:05:3b:65:17:8a:72:e6:c1:61:d8:a4:4b:00:
         3e:50:c9:be:20:2e:a6:f8:5a:c6:32:61:80:c8:1b:fd:99:cf:
         ec:40:e8:7e:cb:62:48:3a:ca:c9:2f:ae:84:df:e0:08:d0:bb:
         ec:4f:49:71:d9:fe:54:55:26:8c:c0:18:57:a6:cf:b5:b9:05:
         cd:8b:77:d2:13:7f:31:a2:b9:36:d0:b6:41:09:2c:50:4a:dd:
         cc:87:6c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:06:27 2026 by rpki-client