Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
File:                     z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json)
Hash identifier:          Qgawo/BQyadK56Y+QZrbdD9MH+N389lZLZnObqBvBz4=
Subject key identifier:   49:D8:C2:8E:9D:46:2E:8F:4C:D3:E0:13:69:DA:6F:86:1F:39:8E:30
Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B
Certificate issuer:       /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B
Certificate serial:       0206
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
Manifest number:          03A2
Signing time:             Sun 05 Apr 2026 02:36:09 +0000
Manifest this update:     Sun 05 Apr 2026 02:36:09 +0000
Manifest next update:     Sun 12 Apr 2026 02:36:09 +0000
Files and hashes:         1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: HdgAUmL5x4em/3FCJGkyzgkBqLVZlbaM+5xylE1NFT8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl
                          rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:36:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B
        Validity
            Not Before: Apr  5 02:36:09 2026 GMT
            Not After : Apr 12 02:36:09 2026 GMT
        Subject: CN=69d1ca99-006e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:4f:41:7d:e9:a1:73:bd:8e:a0:61:4c:1d:
                    e6:2e:c4:36:d9:0c:61:c7:b5:b6:4c:b7:08:71:92:
                    45:e5:89:51:ea:5a:0e:73:2e:36:ce:b7:c4:81:5e:
                    d2:f0:2a:c8:65:4a:3b:e5:4b:e9:c3:fd:18:73:85:
                    b9:ef:24:a6:e6:e7:78:2c:4a:24:c5:b7:18:a4:f7:
                    47:ac:97:56:d7:e3:cf:48:85:ed:ea:f7:05:cc:29:
                    49:35:79:d3:ab:a6:31:fa:7a:27:9e:aa:53:07:c9:
                    72:af:fd:02:a9:14:cf:3d:5e:3d:65:a4:48:95:83:
                    64:92:d8:b4:f8:f8:07:28:a8:f2:d7:ef:b2:42:1a:
                    ea:46:c2:99:3b:b3:46:db:4c:17:a1:ed:cb:b6:08:
                    03:d1:8b:e5:ed:8c:ac:ea:12:0b:d7:66:53:ed:56:
                    fe:b4:b0:33:1b:1f:4d:45:20:14:ec:18:a0:4f:83:
                    c6:bc:66:6f:09:f3:eb:2a:b2:ce:61:f6:ad:15:74:
                    36:34:fa:c2:f5:36:fe:b2:df:89:a6:34:34:1d:4e:
                    27:92:59:e6:e4:c3:6a:ec:4e:f1:51:1f:64:1a:7d:
                    53:fe:ed:c9:84:2e:b5:bf:99:7b:a5:d2:6e:78:6e:
                    26:7d:b0:66:1a:bd:5e:48:aa:f2:15:db:cd:15:3c:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D8:C2:8E:9D:46:2E:8F:4C:D3:E0:13:69:DA:6F:86:1F:39:8E:30
            X509v3 Authority Key Identifier:
                keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0b:02:4c:e8:a3:c1:dc:1d:24:7e:6a:7c:0a:bd:2c:16:14:
         d7:fa:a5:42:2c:04:12:56:0a:c8:d2:97:12:27:ba:78:80:33:
         10:ee:03:23:21:96:ea:11:2c:9a:b8:a6:f0:77:bb:90:7e:f7:
         42:2f:dd:5e:7e:97:89:37:3e:fd:33:01:a8:8e:13:c0:94:5e:
         0a:e7:85:56:c9:31:35:18:03:9c:1c:65:36:4d:5e:e0:87:4f:
         98:95:76:f7:2f:ba:41:e1:e1:40:c1:9d:e7:1c:18:6f:48:db:
         a1:a4:0f:bf:86:75:a4:92:35:8d:65:7a:16:bd:36:55:5c:41:
         ac:7b:73:51:25:40:10:fd:6a:e0:d0:03:96:b2:51:62:e7:43:
         e9:15:ef:00:1d:4a:c7:2b:34:a9:51:09:6d:52:d5:77:fa:88:
         dc:47:bd:b5:23:ce:65:93:7e:df:7b:89:2b:f7:8e:7d:47:29:
         b3:25:2b:1a:4d:9a:1b:17:23:12:ed:a5:29:68:33:fa:2b:8d:
         de:56:88:50:fe:bf:6d:48:c6:6d:ee:13:ea:44:fc:63:e1:a0:
         ec:0d:5b:80:4a:e3:98:e6:1b:16:82:37:89:3a:44:3b:0b:19:
         51:a7:e3:52:55:ea:1f:03:45:12:34:b0:88:d9:04:78:4f:f7:
         31:23:26:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:36 2026 by rpki-client