Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
File:                     ZvDB283xq8NO0RtGqQrjIBgCqVw.mft (raw, json)
Hash identifier:          cC45FjVScbw6MwYqmPMO9w9j1txoNQ0wyEj9taZmah0=
Subject key identifier:   F8:C0:38:4C:3C:6D:55:02:68:6D:A6:3E:21:C2:F9:D9:1D:B0:C4:F2
Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
Certificate issuer:       /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Certificate serial:       18F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
Manifest number:          18D6
Signing time:             Sat 18 Apr 2026 16:23:16 +0000
Manifest this update:     Sat 18 Apr 2026 16:23:15 +0000
Manifest next update:     Sat 25 Apr 2026 16:23:15 +0000
Files and hashes:         1: ZvDB283xq8NO0RtGqQrjIBgCqVw.crl (hash: o1xNE58fJm7WdACw59KV7vqT3AZxzCPU8HbSCUqD6yE=)
                          2: 2E1E405E712D11EDA8C64C3DC4F9AE02.roa (hash: WT/ztJBPCnRbXAsKTFdhvipVvTOzMSRJMa+AX6jQ8aU=)
                          3: C3C44D22ECA311EEAD3CC112C4F9AE02.roa (hash: pqDSzaWYlQqUrgyay2m9Z4YNozIYTNWuZnCi/imo924=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
                          rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 16:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6388 (0x18f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AED4, serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
        Validity
            Not Before: Apr 18 16:23:15 2026 GMT
            Not After : Apr 25 16:23:15 2026 GMT
        Subject: CN=69e3aff4-d68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:85:74:b7:88:6c:0b:cd:f3:8e:f1:b5:7c:
                    ab:f4:51:24:7b:f1:5b:30:80:96:b4:93:57:6f:dd:
                    e4:ae:6e:4f:35:65:d5:3b:d9:8a:c6:d5:36:83:0c:
                    40:0c:c8:82:3d:38:bc:9a:06:a3:97:33:66:26:11:
                    33:5c:09:8a:b2:6a:6d:ce:e2:f4:fb:93:72:9a:1f:
                    3c:f7:f6:39:4d:ad:77:98:42:aa:b5:19:1e:1d:f5:
                    10:01:5d:98:33:cd:28:e4:ee:fe:01:06:bd:be:ea:
                    a8:37:d4:30:ce:58:21:6e:2e:53:46:b6:85:0f:8b:
                    61:10:a8:f2:82:a4:f7:aa:d0:8f:8a:be:3c:0f:53:
                    35:8b:b9:70:11:77:f3:33:11:04:2f:a1:f0:f3:9e:
                    a9:87:0b:39:b5:60:5c:2f:e2:84:c1:19:35:06:b1:
                    d0:12:55:a6:b7:11:12:85:bd:e8:6c:2e:07:ed:56:
                    7f:3b:74:f9:f6:16:f7:dc:6b:de:5d:c7:43:da:87:
                    b3:1f:29:e9:29:e8:dc:08:d4:f8:29:ae:4c:82:76:
                    d9:3d:6c:75:6e:6b:3f:d2:ce:59:68:92:0f:b9:7e:
                    62:4d:37:28:9e:e9:b4:79:31:8a:62:1f:37:f4:5e:
                    5c:b3:09:8c:10:9a:b4:11:1c:18:fb:47:7e:34:b9:
                    82:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C0:38:4C:3C:6D:55:02:68:6D:A6:3E:21:C2:F9:D9:1D:B0:C4:F2
            X509v3 Authority Key Identifier:
                keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5a:2f:3f:21:bd:1a:46:a2:84:fa:d5:c4:a9:47:ef:16:17:
         70:9a:df:23:f3:e6:9e:a3:89:17:0e:08:2d:10:c3:93:dd:7c:
         ff:43:db:1f:b5:d1:73:b7:12:a9:00:4d:4b:5b:bb:ab:f4:8f:
         c3:eb:e5:fb:65:b5:fc:63:06:37:94:c6:1d:0b:ee:03:89:4f:
         64:35:40:b7:3e:b1:7d:68:54:c5:67:ce:70:76:95:85:08:44:
         bd:f9:68:b6:db:32:ea:02:86:56:1e:7d:ef:55:8e:15:22:e2:
         2c:8f:fe:ba:7c:93:8b:c3:50:51:4a:cc:15:37:38:5e:71:f7:
         87:37:1e:c7:36:ed:94:6b:eb:d9:33:72:b0:bd:65:bc:42:eb:
         fb:29:5b:89:07:a1:1c:2d:84:91:83:31:1a:74:21:5b:75:d8:
         02:da:7b:31:ad:25:6e:aa:e2:6d:c3:27:cc:3f:1b:bb:f6:e0:
         db:14:24:ba:63:f0:21:a0:c9:9c:22:10:b1:bf:6a:bf:79:33:
         74:aa:67:e5:df:cd:c7:a5:31:c4:d5:fa:5d:25:08:18:56:96:
         24:2f:f9:0f:b4:6c:99:13:38:cc:16:10:e9:f4:4d:5a:6b:9e:
         89:cf:bf:2c:f1:07:c6:82:57:3b:0e:b7:b2:d0:cd:5e:80:3b:
         b3:79:bc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 23:41:32 2026 by rpki-client