Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
File:                     ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json)
Hash identifier:          Y1S2gnEyBgRD4QCBSd3F73Z5PBASFz25Y5KMB3tJZ4A=
Subject key identifier:   7C:98:38:F6:40:DA:7B:12:B2:23:2A:24:5F:7F:1F:42:D5:0D:FB:52
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Certificate issuer:       /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial:       04D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
Manifest number:          04C0
Signing time:             Mon 30 Mar 2026 23:49:57 +0000
Manifest this update:     Mon 30 Mar 2026 23:49:56 +0000
Manifest next update:     Mon 06 Apr 2026 23:49:56 +0000
Files and hashes:         1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: vWUr8JK0alnzhtCkS4V1qD8l6cBfjP1/lATL3U3h4mc=)
                          2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: L0YUjWVE6ClQnbjkSz7YliWfDv2+LcOW4hK3DI2GwKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
                          rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
        Validity
            Not Before: Mar 30 23:49:56 2026 GMT
            Not After : Apr  6 23:49:56 2026 GMT
        Subject: CN=69cb0c25-d47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:1c:8c:91:52:e3:e3:3d:bf:e8:5b:ed:ac:
                    2f:ce:65:b8:fc:95:91:99:ba:f7:a0:30:71:ce:65:
                    81:94:31:7f:a3:39:7c:da:d5:e6:14:b1:8d:23:2e:
                    9a:db:0a:e7:4d:40:7d:77:cc:73:f7:21:dd:a1:d4:
                    fc:96:4c:82:05:fe:4c:e1:c5:e9:e5:8e:e3:14:f7:
                    bc:e5:b0:40:d1:18:5a:ea:0e:4d:cd:5f:3b:11:c5:
                    a6:4b:86:71:b7:4e:08:00:97:68:91:e8:42:1c:92:
                    91:d4:7e:cd:04:88:cb:49:bc:f3:1e:4d:20:be:b1:
                    65:29:23:d8:ea:fc:60:b7:d9:dd:f0:9d:72:d5:a0:
                    80:86:76:26:a7:65:75:1c:f7:65:62:91:2d:c0:5e:
                    85:cf:30:a3:28:c1:e3:99:34:16:a2:78:64:61:94:
                    80:fd:31:5b:a0:e9:2d:fa:82:f7:c1:16:14:9e:22:
                    b3:ac:6d:99:27:7a:46:da:a0:e1:39:9c:d1:f2:5e:
                    ce:95:ed:4a:90:a5:8c:bc:5b:c8:46:62:fc:2f:f6:
                    af:bc:4d:d5:75:6e:d4:8e:57:49:24:f7:32:51:9c:
                    d5:1b:4b:38:f2:b2:4d:e7:66:c2:4f:fc:22:7e:d2:
                    9c:64:e9:74:1c:a9:94:20:1b:04:1a:06:e5:0c:f2:
                    ec:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:98:38:F6:40:DA:7B:12:B2:23:2A:24:5F:7F:1F:42:D5:0D:FB:52
            X509v3 Authority Key Identifier:
                keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:06:70:d0:51:73:2f:72:29:b9:88:ad:34:18:30:1d:38:fc:
         99:15:31:4d:a5:01:e3:b9:b5:26:c6:88:54:4c:70:0b:b7:0e:
         c3:24:74:55:02:a2:bb:50:b7:6e:8e:87:e6:68:ff:c7:d5:56:
         47:7c:c8:df:99:f9:b7:da:8c:92:1d:eb:28:05:0b:df:43:ee:
         c8:8c:33:49:ec:80:5f:ea:14:4a:3c:79:06:b5:c3:3f:da:68:
         af:8f:3c:ef:0c:7f:af:9e:4d:71:95:49:4e:d0:d0:3c:cd:57:
         c6:15:a2:9f:1c:3b:cb:43:ce:3f:62:82:7c:d8:cb:63:2e:83:
         5c:c6:c5:7b:60:3c:7b:57:6a:39:96:35:ed:e1:21:5b:b1:df:
         cf:8f:e5:7d:9b:97:e3:7d:a6:e8:92:95:af:4f:e6:66:88:f2:
         a6:70:ce:b3:2d:0a:eb:8b:b2:c3:9c:d6:3e:07:a6:a1:94:4d:
         bd:da:6b:a8:83:79:63:20:35:57:41:29:99:fc:b3:e5:74:98:
         8e:6a:41:1b:20:4c:0f:fc:ab:33:32:81:cf:60:64:13:af:9e:
         57:0e:09:3b:1b:08:13:94:5e:62:bb:83:91:a5:2e:f8:5c:ae:
         c0:fb:74:e2:1a:54:33:6c:97:d4:10:31:5f:95:c8:16:53:0c:
         d1:a3:09:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIwNDcxMTAvBgNVBAUTKDY1MDEyQUYwNTcxMDg2QjlFQUIzMDM0NkY2MjRCNjMx
MkE1NTFDMzgwHhcNMjYwMzMwMjM0OTU2WhcNMjYwNDA2MjM0OTU2WjAYMRYwFAYD
VQQDEw02OWNiMGMyNS1kNDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq7ocjJFS4+M9v+hb7awvzmW4/JWRmbr3oDBxzmWBlDF/ozl82tXmFLGNIy6a
2wrnTUB9d8xz9yHdodT8lkyCBf5M4cXp5Y7jFPe85bBA0Rha6g5NzV87EcWmS4Zx
t04IAJdokehCHJKR1H7NBIjLSbzzHk0gvrFlKSPY6vxgt9nd8J1y1aCAhnYmp2V1
HPdlYpEtwF6FzzCjKMHjmTQWonhkYZSA/TFboOkt+oL3wRYUniKzrG2ZJ3pG2qDh
OZzR8l7Ole1KkKWMvFvIRmL8L/avvE3VdW7UjldJJPcyUZzVG0s48rJN52bCT/wi
ftKcZOl0HKmUIBsEGgblDPLsxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHyYOPZA
2nsSsiMqJF9/H0LVDftSMB8GA1UdIwQYMBaAFGUBKvBXEIa56rMDRvYktjEqVRw4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjA0Ny8zM0FEQjNFNjZF
MDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhybnFzd05HOWlTMk1TcFZI
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pRRXE4RmNRaHJucXN3Tkc5aVMyTVNwVkhEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjA0Ny8zM0FEQjNFNjZFMDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhy
bnFzd05HOWlTMk1TcFZIRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALAZw0FFzL3IpuYitNBgwHTj8mRUxTaUB47m1JsaIVExwC7cOwyR0VQKiu1C3
bo6H5mj/x9VWR3zI35n5t9qMkh3rKAUL30PuyIwzSeyAX+oUSjx5BrXDP9por488
7wx/r55NcZVJTtDQPM1XxhWinxw7y0POP2KCfNjLYy6DXMbFe2A8e1dqOZY17eEh
W7Hfz4/lfZuX432m6JKVr0/mZojypnDOsy0K64uyw5zWPgemoZRNvdprqIN5YyA1
V0Epmfyz5XSYjmpBGyBMD/yrMzKBz2BkE6+eVw4JOxsIE5ReYruDkaUu+FyuwPt0
4hpUM2yX1BAxX5XIFlMM0aMJEg==
-----END CERTIFICATE-----
Generated at Wed Apr 1 01:28:15 2026 by rpki-client