Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
File:                     ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft (raw, json)
Hash identifier:          kLd76117NawK3lePkBgdxjq/skgnLrkAyyxrLNmX62k=
Subject key identifier:   4D:CE:90:5B:B5:29:E6:D0:EB:99:98:5E:A1:01:8C:57:6B:02:9D:4A
Authority key identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86
Certificate issuer:       /CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86
Certificate serial:       0687
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
Manifest number:          067F
Signing time:             Sat 04 Apr 2026 22:17:24 +0000
Manifest this update:     Sat 04 Apr 2026 22:17:23 +0000
Manifest next update:     Sat 11 Apr 2026 22:17:23 +0000
Files and hashes:         1: ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl (hash: jrQUDGpddwMpdH25r5pq5lw2SvxPyGwraFdadECXZ+c=)
                          2: 3CE37DD8C0F911EBB5625E1CC4F9AE02.roa (hash: kKFHElA513S2ePi08UhxofDps7bPiV+Vk5IuCYGiQoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl
                          rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1671 (0x687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159298, serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86
        Validity
            Not Before: Apr  4 22:17:23 2026 GMT
            Not After : Apr 11 22:17:23 2026 GMT
        Subject: CN=69d18df4-db17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:eb:f0:6a:24:23:73:6b:0a:43:41:2e:53:
                    21:76:c4:de:a4:e4:5c:14:fa:6f:a5:7c:8b:51:ad:
                    73:4d:98:76:da:1b:55:55:d3:37:75:0d:8c:b6:c9:
                    8d:d1:e5:ea:94:9c:55:bd:6b:ea:cb:85:ae:e4:dc:
                    61:4e:29:c3:b6:a0:ba:69:82:1f:a5:26:fa:95:a7:
                    e8:1d:ef:6e:4b:f7:00:d9:8e:a3:d4:e5:f0:22:36:
                    45:5b:77:57:c2:89:00:36:9a:58:a0:c8:7d:53:27:
                    8e:9e:2a:4b:6c:04:9c:ee:03:3a:11:f0:21:44:14:
                    03:2e:fd:53:0e:ad:37:16:f8:32:2e:f3:1e:7c:d7:
                    fd:1f:80:3d:77:19:38:02:51:0c:49:3d:97:7d:f3:
                    ed:26:0d:91:c4:35:4e:7e:7c:88:01:8b:49:89:70:
                    ea:45:cc:d1:9e:54:72:49:b8:57:71:99:53:a9:2f:
                    2b:5b:9b:a7:91:31:06:04:70:72:d3:bf:69:48:75:
                    6e:23:27:a0:42:37:94:8f:3e:3f:9b:dc:28:e1:59:
                    a6:44:2f:d0:43:96:06:8a:70:11:59:76:d2:a9:e3:
                    41:32:15:d9:ba:b7:f5:dc:73:5a:c8:68:cd:2d:0f:
                    81:ad:7f:23:ea:a0:8c:3d:c9:e3:5b:77:cc:02:00:
                    63:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CE:90:5B:B5:29:E6:D0:EB:99:98:5E:A1:01:8C:57:6B:02:9D:4A
            X509v3 Authority Key Identifier:
                keyid:64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:83:f2:5f:63:c1:25:c4:85:48:7b:de:7e:9b:25:52:16:a1:
         27:62:d7:f1:0b:88:f9:8a:66:81:dd:59:4a:0b:f1:65:bb:80:
         b5:52:da:9b:a1:36:79:95:79:ba:3f:2a:e9:70:eb:0d:fd:46:
         1c:5a:e0:ff:29:66:9e:39:76:40:49:25:78:88:69:20:ac:4f:
         7c:29:72:8a:c5:36:d6:41:4d:0c:a7:f3:e6:0e:be:c0:73:da:
         91:33:00:b8:4b:3e:7c:ac:c8:48:73:e5:ea:22:7a:e0:3b:89:
         a1:63:8e:61:69:2d:c7:1c:e4:a3:c8:e6:3c:a5:c0:a1:b5:0c:
         97:36:32:8d:1c:5b:cd:93:f9:ae:6f:69:34:d3:86:da:23:33:
         90:af:a6:c1:ff:c3:ef:6a:2d:e5:1b:fa:7c:dc:e3:31:a4:cc:
         af:40:7f:6a:e5:df:96:ef:6f:a3:2d:52:58:13:11:7a:0d:e0:
         b5:f4:4c:2e:2e:b7:f4:7e:cb:37:49:5d:79:b3:61:4a:d3:0c:
         70:d7:d7:3c:a0:78:37:0d:8f:72:fb:80:3a:26:69:4c:ad:20:
         9f:d4:e9:e7:99:02:e2:51:42:b7:bb:4f:18:2e:52:0c:05:f4:
         e4:ec:20:35:75:59:47:4e:e8:04:93:6b:0c:df:16:b6:dd:0d:
         87:23:75:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTkyOTgxMTAvBgNVBAUTKDY0Q0UwNkExNkNBODkxMjM1NTZBQTlBRkQ3MjQ4REJF
RjBFNjlBODYwHhcNMjYwNDA0MjIxNzIzWhcNMjYwNDExMjIxNzIzWjAYMRYwFAYD
VQQDEw02OWQxOGRmNC1kYjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoFPr8GokI3NrCkNBLlMhdsTepORcFPpvpXyLUa1zTZh22htVVdM3dQ2MtsmN
0eXqlJxVvWvqy4Wu5NxhTinDtqC6aYIfpSb6lafoHe9uS/cA2Y6j1OXwIjZFW3dX
wokANppYoMh9UyeOnipLbASc7gM6EfAhRBQDLv1TDq03FvgyLvMefNf9H4A9dxk4
AlEMST2XffPtJg2RxDVOfnyIAYtJiXDqRczRnlRySbhXcZlTqS8rW5unkTEGBHBy
079pSHVuIyegQjeUjz4/m9wo4VmmRC/QQ5YGinARWXbSqeNBMhXZurf13HNayGjN
LQ+BrX8j6qCMPcnjW3fMAgBjZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3OkFu1
KebQ65mYXqEBjFdrAp1KMB8GA1UdIwQYMBaAFGTOBqFsqJEjVWqpr9ckjb7w5pqG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTI5OC82MjIyOUVGMkI2
MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5b2tTTlZhcW12MXlTTnZ2RG1t
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pNNEdvV3lva1NOVmFxbXYxeVNOdnZEbW1vWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTI5OC82MjIyOUVGMkI2MUUxMUVCQjBGQzRDNzdDNEY5QUUwMi9aTTRHb1d5b2tT
TlZhcW12MXlTTnZ2RG1tb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARoPyX2PBJcSFSHvefpslUhahJ2LX8QuI+Ypmgd1ZSgvxZbuAtVLam6E2eZV5
uj8q6XDrDf1GHFrg/ylmnjl2QEkleIhpIKxPfClyisU21kFNDKfz5g6+wHPakTMA
uEs+fKzISHPl6iJ64DuJoWOOYWktxxzko8jmPKXAobUMlzYyjRxbzZP5rm9pNNOG
2iMzkK+mwf/D72ot5Rv6fNzjMaTMr0B/auXflu9voy1SWBMReg3gtfRMLi639H7L
N0ldebNhStMMcNfXPKB4Nw2PcvuAOiZpTK0gn9Tp55kC4lFCt7tPGC5SDAX05Owg
NXVZR07oBJNrDN8Wtt0NhyN1wA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 14:14:27 2026 by rpki-client