Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
File:                     ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft (raw, json)
Hash identifier:          KEeD8VMHrh29jh3h5nH77zidSwfwl31qbIDFNBpYtb0=
Subject key identifier:   F9:C9:6C:17:BD:7A:6F:9A:A3:F0:8E:D2:D7:DC:8A:B1:97:C4:4A:16
Authority key identifier: 64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05
Certificate issuer:       /CN=A911DF56/serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
Manifest number:          8F
Signing time:             Sun 05 Apr 2026 06:53:32 +0000
Manifest this update:     Sun 05 Apr 2026 06:53:32 +0000
Manifest next update:     Sun 12 Apr 2026 06:53:32 +0000
Files and hashes:         1: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl (hash: 93anyUn8DyjsRrJPO9sJanIH1mOKNKx6p+0jxC0+x2w=)
                          2: D24B5EDE93C911F09C542E6EC4F9AE02.roa (hash: HbcBbHHRKIss/B/Saaqgatr0k/NTmyc24yxnTCgjTfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl
                          rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DF56, serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405
        Validity
            Not Before: Apr  5 06:53:32 2026 GMT
            Not After : Apr 12 06:53:32 2026 GMT
        Subject: CN=69d206ec-32c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:93:22:10:12:cb:87:d5:dc:86:05:47:29:19:
                    41:bb:00:d9:5e:d2:36:02:54:e6:c8:12:d4:c4:86:
                    7d:51:46:fe:8b:dd:72:52:dd:79:0b:04:d1:e9:99:
                    1e:34:c5:0d:bc:59:23:75:ea:db:c9:e2:b6:45:ca:
                    ed:c1:ae:12:be:e6:aa:a8:3a:9a:9d:3a:f3:c5:d6:
                    e6:70:82:c9:f6:ff:f7:32:01:8e:08:24:1b:b4:e9:
                    15:f3:69:eb:84:e8:46:e3:5f:56:4d:be:0b:cb:d4:
                    53:53:d1:24:5a:94:07:65:5d:ff:79:94:a9:cd:75:
                    08:f2:62:d0:e8:20:89:c7:7b:86:c8:b2:63:e4:98:
                    a1:c3:fc:6e:05:46:51:07:10:8b:ed:4a:8d:c2:8f:
                    f1:61:53:d9:2b:d7:e9:3f:0e:89:69:98:28:64:b2:
                    fa:38:f2:d6:da:d9:72:9f:ee:f0:dd:41:ac:70:df:
                    9d:da:ca:18:bf:b7:c9:3d:96:24:8e:b0:fe:2d:59:
                    80:59:f5:f6:b8:c0:0b:cd:4e:62:14:93:a0:fe:76:
                    ae:db:33:3c:08:f0:4f:33:d3:59:64:c8:65:a8:fd:
                    03:08:a3:c8:52:89:39:ba:1f:e0:9c:99:8d:d3:5c:
                    00:f5:8c:12:e0:0d:a2:d4:63:fb:07:bf:4f:29:a3:
                    7f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C9:6C:17:BD:7A:6F:9A:A3:F0:8E:D2:D7:DC:8A:B1:97:C4:4A:16
            X509v3 Authority Key Identifier:
                keyid:64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:af:14:4f:86:05:a6:02:35:2f:83:1d:1d:73:69:9f:fd:3c:
         1e:c5:ad:60:08:05:16:a7:66:86:b3:4e:41:9b:b6:1e:b3:61:
         6a:62:aa:42:d3:4d:82:36:2d:5e:9b:66:da:11:33:f2:6e:73:
         8b:d6:d0:ba:7e:06:df:a0:cf:8e:63:26:a2:57:4a:da:b6:6d:
         43:82:67:57:3b:32:db:6d:77:56:f2:3f:58:54:b1:a2:58:2b:
         da:4b:dc:db:3c:72:e5:55:38:83:d1:9b:68:d9:fb:73:5f:b9:
         6d:16:8b:64:ab:24:8f:f1:ce:82:a8:4a:9f:b8:29:7e:7c:14:
         00:c8:b1:54:31:00:dd:cc:86:a5:88:f0:fc:ec:1d:4d:16:ed:
         cd:9a:02:89:e3:4d:c0:f8:c6:7e:ab:70:5f:75:8b:bf:df:9c:
         df:8f:0f:de:3a:c0:ec:a1:cb:23:c8:8b:32:de:6f:eb:89:f4:
         96:93:e1:df:39:5b:00:83:3e:38:94:bf:05:82:e6:1c:bc:32:
         e0:be:00:6f:44:db:69:01:2a:3c:69:d1:71:e5:96:5b:71:2e:
         b6:4b:ae:f2:4c:9a:ba:59:87:e0:df:45:d8:e9:08:1b:df:c2:
         1b:ee:4c:a9:da:fe:b4:19:99:57:c0:af:26:2e:31:3c:51:ce:
         20:80:ee:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURGNTYxMTAvBgNVBAUTKDY0OTNCMTlGN0NCRkRGMTkwNEJDNzUyQUE4RTRBMzQz
MDYyNjU0MDUwHhcNMjYwNDA1MDY1MzMyWhcNMjYwNDEyMDY1MzMyWjAYMRYwFAYD
VQQDEw02OWQyMDZlYy0zMmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0JMiEBLLh9XchgVHKRlBuwDZXtI2AlTmyBLUxIZ9UUb+i91yUt15CwTR6Zke
NMUNvFkjderbyeK2Rcrtwa4SvuaqqDqanTrzxdbmcILJ9v/3MgGOCCQbtOkV82nr
hOhG419WTb4Ly9RTU9EkWpQHZV3/eZSpzXUI8mLQ6CCJx3uGyLJj5Jihw/xuBUZR
BxCL7UqNwo/xYVPZK9fpPw6JaZgoZLL6OPLW2tlyn+7w3UGscN+d2soYv7fJPZYk
jrD+LVmAWfX2uMALzU5iFJOg/nau2zM8CPBPM9NZZMhlqP0DCKPIUok5uh/gnJmN
01wA9YwS4A2i1GP7B79PKaN/SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPnJbBe9
em+ao/CO0tfcirGXxEoWMB8GA1UdIwQYMBaAFGSTsZ98v98ZBLx1Kqjko0MGJlQF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY1Ni83NkY4MjA1MDVC
RDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9aSk94bjN5XzN4a0V2SFVxcU9TalF3WW1W
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pKT3huM3lfM3hrRXZIVXFxT1NqUXdZbVZBVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REY1Ni83NkY4MjA1MDVCRDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9aSk94bjN5XzN4
a0V2SFVxcU9TalF3WW1WQVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo68UT4YFpgI1L4MdHXNpn/08HsWtYAgFFqdmhrNOQZu2HrNhamKqQtNNgjYt
Xptm2hEz8m5zi9bQun4G36DPjmMmoldK2rZtQ4JnVzsy2213VvI/WFSxolgr2kvc
2zxy5VU4g9GbaNn7c1+5bRaLZKskj/HOgqhKn7gpfnwUAMixVDEA3cyGpYjw/Owd
TRbtzZoCieNNwPjGfqtwX3WLv9+c348P3jrA7KHLI8iLMt5v64n0lpPh3zlbAIM+
OJS/BYLmHLwy4L4Ab0TbaQEqPGnRceWWW3Eutkuu8kyaulmH4N9F2OkIG9/CG+5M
qdr+tBmZV8CvJi4xPFHOIIDuxQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:02 2026 by rpki-client