Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
File:                     zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json)
Hash identifier:          xmkU5Ohjh0pr/v1+WMlFK47A9CYivZUN0Jc6etABjC8=
Subject key identifier:   2B:1B:6E:C1:27:8A:00:B0:9E:09:DD:3A:A0:5B:44:A6:A4:0E:31:8B
Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4
Certificate issuer:       /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
Certificate serial:       0640
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
Manifest number:          063F
Signing time:             Sat 04 Apr 2026 22:30:30 +0000
Manifest this update:     Sat 04 Apr 2026 22:30:29 +0000
Manifest next update:     Sat 11 Apr 2026 22:30:29 +0000
Files and hashes:         1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: lZmyFHsIpGPQxxmSmyctO1wBfvYnwVRU34IApeH49/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl
                          rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4
        Validity
            Not Before: Apr  4 22:30:29 2026 GMT
            Not After : Apr 11 22:30:29 2026 GMT
        Subject: CN=69d19106-3e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fc:31:04:81:d6:d4:5c:f0:8c:9e:90:4d:f7:
                    6c:91:62:89:41:bf:37:43:ec:2f:ed:af:14:86:a0:
                    a5:77:1d:eb:8d:b3:3f:cc:65:9f:8b:1c:4b:3d:b0:
                    4e:66:f0:d6:f7:4f:09:64:6b:05:27:d4:1c:e7:a1:
                    20:ba:b2:a0:0f:6a:3a:41:37:a9:f4:4c:ba:44:a3:
                    d5:0e:6b:bc:36:37:05:99:65:6d:33:9f:6b:fe:70:
                    14:e3:4c:a9:18:dd:14:de:10:6f:8b:5f:c5:dd:79:
                    90:32:69:a0:61:cb:45:52:30:47:99:70:3b:c6:0d:
                    c9:45:9b:f4:33:de:bc:c6:e7:62:73:ea:34:46:2d:
                    6d:3d:aa:44:18:6c:13:84:65:9d:e2:db:d0:d6:18:
                    76:28:ac:5d:7e:cb:d2:29:1c:29:cf:1a:2c:d6:43:
                    6f:74:60:6d:20:31:3f:31:a5:7c:2e:f4:38:4d:8b:
                    06:ce:26:06:a0:f2:b4:a5:18:e4:00:bf:e1:5a:33:
                    2d:dd:99:1d:9d:a1:62:37:1e:fa:8a:c1:60:4a:13:
                    ee:2e:11:3a:bc:aa:e1:de:71:f6:87:2a:dd:a9:42:
                    21:72:90:5c:f1:5d:87:c5:09:ee:23:71:13:66:a4:
                    43:52:62:89:66:be:bc:74:d4:f2:85:01:d4:d1:1f:
                    ad:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1B:6E:C1:27:8A:00:B0:9E:09:DD:3A:A0:5B:44:A6:A4:0E:31:8B
            X509v3 Authority Key Identifier:
                keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:5d:44:6e:3d:36:29:5e:39:8f:da:55:6a:b3:96:87:29:ca:
         50:b1:4b:23:b1:1a:19:79:45:48:09:ab:d3:5f:cf:86:0c:ce:
         8d:fe:46:31:0d:fa:86:67:ea:2c:7b:bb:35:87:94:58:56:4b:
         93:b2:e0:b4:25:42:a7:0a:8c:f3:c7:63:a8:4c:0c:af:4e:a5:
         72:bd:64:d3:09:a5:3e:56:da:0f:3e:57:8d:30:f8:8e:09:32:
         0c:2b:b5:05:13:a2:f3:7a:f4:4d:d4:40:36:fa:2b:1a:b8:04:
         54:14:43:43:23:72:79:7a:f2:84:18:ea:39:c2:4a:43:c5:01:
         07:90:6a:2a:7f:ed:10:6f:35:3c:4f:00:b7:fa:1e:6c:42:0e:
         c3:72:d3:3e:43:70:cd:5a:8e:8a:db:89:b7:0b:f8:1b:e9:65:
         c3:07:06:a7:93:3d:1e:01:f6:d8:7d:8c:81:c2:bf:19:b3:1b:
         b4:8f:3d:14:65:b9:9f:5b:2f:0e:4b:65:8a:fe:22:10:d1:3e:
         64:90:f7:70:8f:ba:be:50:a0:cd:8f:d7:9c:58:b9:2e:51:a7:
         2a:72:8b:fc:4c:dd:cb:41:d0:55:f0:c0:5a:18:74:e1:eb:46:
         09:a4:9f:35:ad:b0:1b:13:62:d7:a2:4c:4d:16:e7:ee:79:99:
         c0:1c:19:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:04 2026 by rpki-client