Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft
File:                     ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft (raw, json)
Hash identifier:          ZNVygDp5W/pCCa+nli2KdjSx9tSo9Ri5464VrHnPTgs=
Subject key identifier:   CD:4C:9D:12:8B:30:C1:D3:0F:2B:29:B2:59:DB:D5:5D:F2:16:E5:FB
Authority key identifier: 64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94
Certificate issuer:       /CN=A91410C5/serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft
Manifest number:          91
Signing time:             Sun 05 Apr 2026 06:51:35 +0000
Manifest this update:     Sun 05 Apr 2026 06:51:35 +0000
Manifest next update:     Sun 12 Apr 2026 06:51:35 +0000
Files and hashes:         1: ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl (hash: UTQazukZjk3OxBsc+fvLfYL0w1cuQbWRPf3ceITd1Ck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl
                          rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91410C5, serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94
        Validity
            Not Before: Apr  5 06:51:35 2026 GMT
            Not After : Apr 12 06:51:35 2026 GMT
        Subject: CN=69d20677-459c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0c:f8:e9:3f:2b:40:ef:6b:6c:ee:97:15:62:
                    48:8e:95:1b:c3:c2:54:80:1b:5d:14:8f:54:b4:dc:
                    0a:c1:b8:99:28:d6:77:9f:6a:66:77:b1:41:26:bf:
                    f9:ce:0b:04:02:bf:fc:5d:7c:12:b8:c1:05:1f:bc:
                    35:f7:01:1c:60:46:55:6e:4d:fc:d4:5b:1f:94:59:
                    2f:ed:b1:65:ec:87:58:b4:7c:7c:64:75:e2:10:e0:
                    4c:c3:0b:49:dd:8e:b3:46:dc:c9:03:41:88:2e:60:
                    59:9c:e3:1c:66:83:9f:90:30:e8:0d:7f:c8:da:4a:
                    6c:e1:f6:12:1f:ec:b2:5d:94:cf:d3:18:fa:2e:7f:
                    57:34:c8:09:c3:45:cc:16:19:83:dc:36:10:82:99:
                    43:84:8d:47:fc:67:75:b9:2f:18:1f:a1:40:0f:2c:
                    d4:7f:fd:26:cc:ff:66:32:b0:d6:02:69:a4:71:5c:
                    54:2e:e9:49:ce:4f:9a:c7:1e:ef:57:cf:78:06:55:
                    e2:b0:85:c4:99:af:4a:87:46:02:d8:92:46:d0:7c:
                    87:ee:8e:4c:db:90:03:08:4c:90:38:64:93:4a:ec:
                    ac:e4:d7:86:f8:ac:f2:49:ba:24:7a:de:15:70:1c:
                    a7:fd:0a:16:94:f8:dc:0c:53:86:33:28:8f:5e:55:
                    7a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4C:9D:12:8B:30:C1:D3:0F:2B:29:B2:59:DB:D5:5D:F2:16:E5:FB
            X509v3 Authority Key Identifier:
                keyid:64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4c:26:a2:7e:80:85:40:14:67:e0:a7:fc:18:b1:c1:a0:4f:
         49:f1:19:4c:8c:7c:25:90:95:80:29:18:65:71:f8:d0:0d:6d:
         0c:25:84:ed:ea:03:a3:59:f6:2d:07:00:6b:51:79:1d:a6:0e:
         55:8a:d2:f0:e6:2a:e7:23:01:b5:48:f4:1c:c3:84:58:16:9d:
         26:1e:1a:d7:a3:f3:47:3c:43:15:da:f4:f2:34:e9:7e:8f:cf:
         10:49:45:61:ac:c0:2f:08:c0:6d:17:de:ee:d7:10:95:de:41:
         6c:5a:2b:96:c8:95:a1:5d:9c:09:98:ea:4f:e1:b2:a8:42:2e:
         63:80:dd:22:09:bd:7f:26:e1:a2:aa:eb:1c:27:da:0c:95:af:
         09:07:2b:58:49:39:0a:2b:dc:ee:89:b6:28:92:de:b1:48:98:
         b8:cd:f4:b9:fa:d2:9e:64:4e:e7:ba:20:42:ce:80:33:98:a6:
         57:09:33:57:16:a3:39:6e:3c:2d:85:ea:f3:4b:ad:cf:d4:2f:
         16:bb:3b:e2:3b:67:50:b4:6e:6b:ee:9d:6f:30:08:6d:dc:2d:
         9b:0c:fe:ea:32:26:06:bb:d4:62:4c:d1:7d:86:18:a3:b0:97:
         81:44:1e:60:9e:ab:2c:aa:68:cd:c7:d3:c6:a0:11:ce:b3:88:
         1e:6a:5c:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDEwQzUxMTAvBgNVBAUTKDY0NjdFOTI2QzIxNDRFQ0QwRjI3NDhGODQ5MzI4Rjg1
RjAyOEFFOTQwHhcNMjYwNDA1MDY1MTM1WhcNMjYwNDEyMDY1MTM1WjAYMRYwFAYD
VQQDEw02OWQyMDY3Ny00NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1gz46T8rQO9rbO6XFWJIjpUbw8JUgBtdFI9UtNwKwbiZKNZ3n2pmd7FBJr/5
zgsEAr/8XXwSuMEFH7w19wEcYEZVbk381FsflFkv7bFl7IdYtHx8ZHXiEOBMwwtJ
3Y6zRtzJA0GILmBZnOMcZoOfkDDoDX/I2kps4fYSH+yyXZTP0xj6Ln9XNMgJw0XM
FhmD3DYQgplDhI1H/Gd1uS8YH6FADyzUf/0mzP9mMrDWAmmkcVxULulJzk+axx7v
V894BlXisIXEma9Kh0YC2JJG0HyH7o5M25ADCEyQOGSTSuys5NeG+KzySboket4V
cByn/QoWlPjcDFOGMyiPXlV64QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM1MnRKL
MMHTDyspslnb1V3yFuX7MB8GA1UdIwQYMBaAFGRn6SbCFE7NDydI+Ekyj4XwKK6U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTBDNS9EQjBBRTQzNjU3
MkUxMUYwOTVGN0ZFNDhDNEY5QUUwMi9aR2ZwSnNJVVRzMFBKMGo0U1RLUGhmQW9y
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pHZnBKc0lVVHMwUEowajRTVEtQaGZBb3JwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTBDNS9EQjBBRTQzNjU3MkUxMUYwOTVGN0ZFNDhDNEY5QUUwMi9aR2ZwSnNJVVRz
MFBKMGo0U1RLUGhmQW9ycFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANEwmon6AhUAUZ+Cn/BixwaBPSfEZTIx8JZCVgCkYZXH40A1tDCWE7eoDo1n2
LQcAa1F5HaYOVYrS8OYq5yMBtUj0HMOEWBadJh4a16PzRzxDFdr08jTpfo/PEElF
YazALwjAbRfe7tcQld5BbForlsiVoV2cCZjqT+GyqEIuY4DdIgm9fybhoqrrHCfa
DJWvCQcrWEk5Civc7om2KJLesUiYuM30ufrSnmRO57ogQs6AM5imVwkzVxajOW48
LYXq80utz9QvFrs74jtnULRua+6dbzAIbdwtmwz+6jImBrvUYkzRfYYYo7CXgUQe
YJ6rLKpozcfTxqARzrOIHmpcFQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:25:33 2026 by rpki-client