Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
File:                     ZuoPg73TYyv_GUALOhum_t_8VYc.mft (raw, json)
Hash identifier:          kDNePjKu0t9Oq7kA3S1opN/hgu/wSpl0LcFjZFQdHPM=
Subject key identifier:   7D:69:19:6C:19:12:F6:A4:64:D5:C5:A0:2A:56:A0:ED:E7:E5:66:84
Authority key identifier: 66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87
Certificate issuer:       /CN=A917CB63/serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587
Certificate serial:       3544
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
Manifest number:          3536
Signing time:             Sat 04 Apr 2026 15:10:49 +0000
Manifest this update:     Sat 04 Apr 2026 15:10:48 +0000
Manifest next update:     Sat 11 Apr 2026 15:10:48 +0000
Files and hashes:         1: ZuoPg73TYyv_GUALOhum_t_8VYc.crl (hash: nA5dm9NAhXlQrbkHpnC3HOgii3dJ2DXIPkWCxV/bS58=)
                          2: 1190361AAF1B11E7B89F3883C4F9AE02.roa (hash: bfiGLOqg6WEf/R0XNy4/HeNqzd36AQk5hmCgwfazvuk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl
                          rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13636 (0x3544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CB63, serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587
        Validity
            Not Before: Apr  4 15:10:48 2026 GMT
            Not After : Apr 11 15:10:48 2026 GMT
        Subject: CN=69d129f8-2a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:a5:91:71:bf:43:10:dc:a0:b3:22:f0:ea:
                    3b:8c:9e:52:39:81:6e:b1:09:e6:c8:b6:b8:b7:bb:
                    16:0c:23:df:53:0a:7e:ab:17:1a:90:96:39:bb:37:
                    84:21:61:6c:9c:a6:0c:83:9d:26:d6:f7:d3:f5:95:
                    67:6d:3e:e0:81:3a:8e:9c:27:e5:ca:54:0d:1c:b2:
                    f7:22:5a:41:96:78:cb:bd:a7:6a:24:19:da:fe:37:
                    96:92:4f:05:5e:79:c8:75:5c:56:24:9a:9a:2d:ae:
                    64:de:6f:ca:aa:7c:45:40:eb:6e:52:33:f0:b8:ce:
                    c6:c3:92:bc:2c:89:9a:0f:70:3a:b4:9d:65:24:78:
                    85:4c:c0:ad:5c:39:d3:99:55:f0:87:41:84:7f:98:
                    d8:d6:0f:be:54:cb:a1:2e:05:e4:58:c4:67:ec:f5:
                    7b:0b:83:8b:17:af:82:c7:b3:4b:f5:42:5d:56:2a:
                    1e:4a:99:50:0b:29:8c:b0:fd:fe:73:07:32:e9:e6:
                    2b:52:d6:7a:a6:3e:4e:7f:1e:60:c1:b4:e7:e9:99:
                    f7:aa:07:12:d1:6f:11:d3:8e:fc:6a:bf:f9:af:f6:
                    8b:cc:a6:0f:37:21:32:be:72:e7:ab:b0:50:9d:a2:
                    13:85:16:9a:bd:04:f0:43:a1:ba:e2:1f:8a:de:f7:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:69:19:6C:19:12:F6:A4:64:D5:C5:A0:2A:56:A0:ED:E7:E5:66:84
            X509v3 Authority Key Identifier:
                keyid:66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8b:25:78:55:0b:c3:f9:12:3d:cb:10:b0:6b:54:c5:2d:6b:
         5a:91:24:ba:e8:fa:1f:d9:7a:0a:2d:9b:72:c6:fa:0f:94:34:
         da:d9:9d:06:11:2c:d5:51:00:1f:f5:e7:89:b8:d5:36:2d:9a:
         7c:9a:fb:43:9a:f3:4c:4a:fc:2c:fd:95:10:ee:f7:72:87:69:
         0b:ed:f6:32:bb:d6:26:62:3c:ed:b1:91:ff:f2:25:55:03:7e:
         09:5d:5f:f2:fb:48:22:f4:29:24:36:fa:1f:66:d0:1a:04:d5:
         9b:63:16:10:94:65:4f:c5:9e:ca:9a:f5:4d:ae:16:2a:2b:57:
         07:6e:bd:e5:0f:46:ec:2a:ef:3d:78:99:93:a9:a0:c5:1c:75:
         6d:ec:6a:d2:4c:c0:27:a1:1a:95:c9:b3:d0:f1:fa:9f:2e:45:
         71:ae:d9:7a:70:18:25:55:6a:bf:22:a5:cf:40:0d:60:f3:c5:
         58:9b:32:1d:56:41:18:00:63:0f:19:15:18:0c:b8:73:8b:e2:
         ec:23:5b:79:50:b0:43:92:4d:23:55:cb:4b:99:2f:47:7c:a8:
         f3:74:a3:29:19:84:3f:55:e3:e0:14:5d:ff:2b:a8:4e:73:13:
         91:8b:24:ff:28:31:9d:84:aa:87:3c:da:68:58:fa:63:91:8b:
         31:e6:de:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:33 2026 by rpki-client