Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
File:                     ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json)
Hash identifier:          gFxtnFGvQ1YXqSgKAk2GocwOdlllN+PTyrPKgWTiFEo=
Subject key identifier:   E1:C4:46:31:D3:D4:D9:5D:B8:C8:5B:7B:CF:7B:4B:D5:BD:27:15:DD
Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12
Certificate issuer:       /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
Certificate serial:       105F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
Manifest number:          104A
Signing time:             Sat 04 Apr 2026 17:19:00 +0000
Manifest this update:     Sat 04 Apr 2026 17:19:00 +0000
Manifest next update:     Sat 11 Apr 2026 17:19:00 +0000
Files and hashes:         1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: QSgU5ME07i4oXeKkIpSprrxljr7wsbi2t7c9xpBCIdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl
                          rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4191 (0x105f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212
        Validity
            Not Before: Apr  4 17:19:00 2026 GMT
            Not After : Apr 11 17:19:00 2026 GMT
        Subject: CN=69d14804-1fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:ba:59:eb:3a:8d:98:cc:29:d4:f3:06:67:
                    e4:61:e8:5d:f9:39:a0:90:e2:89:db:f0:50:37:2c:
                    3d:ee:08:fa:f5:35:5d:59:a3:fe:3f:5c:00:0f:4c:
                    0f:d4:72:45:df:67:9f:0c:bf:04:c2:34:23:42:4e:
                    02:35:f4:aa:19:76:19:35:56:ff:ad:14:8a:3c:10:
                    78:04:8d:77:03:92:ff:5c:8c:43:ed:fb:d0:d8:9c:
                    b3:eb:99:e1:9e:3c:b2:de:4c:eb:0d:96:77:4d:7e:
                    d6:38:d9:f1:fd:03:25:c4:21:9e:92:b1:ed:53:df:
                    2e:10:06:01:15:d5:0b:db:56:1e:a5:a5:1e:dc:6c:
                    8a:1d:2a:2a:4e:5c:b8:8a:67:f4:e1:98:24:38:21:
                    0f:eb:cb:e0:4d:11:6d:2f:fa:f6:2d:6a:bf:de:5f:
                    66:22:f7:94:f9:f6:b2:d9:9c:06:34:b3:ea:cd:4e:
                    ff:c3:3b:0a:02:6e:56:96:a3:e5:52:75:51:59:24:
                    c9:cd:cc:be:17:3d:1c:65:40:33:7f:61:d4:2b:b3:
                    84:d0:3b:1b:d1:09:85:a3:2d:f9:a4:b0:be:bd:e3:
                    bd:9c:52:9c:07:8e:18:76:a6:17:8d:2b:b5:df:e0:
                    dd:c3:f5:79:94:6d:60:19:69:12:65:53:19:fb:14:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C4:46:31:D3:D4:D9:5D:B8:C8:5B:7B:CF:7B:4B:D5:BD:27:15:DD
            X509v3 Authority Key Identifier:
                keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fc:91:74:57:15:18:a1:aa:00:52:03:e8:a4:bd:b2:23:9b:
         1c:89:39:44:89:12:58:54:46:3c:d2:23:ff:a6:d9:3c:1f:ee:
         9f:c0:08:0b:c0:f6:31:74:7f:03:8f:5c:b2:d0:78:cc:f6:d2:
         c5:29:d2:82:a8:ad:46:74:64:33:9f:03:c4:fa:41:17:2e:65:
         38:94:97:8f:9b:b4:25:d3:7c:c6:1a:ff:a6:68:39:f9:40:ca:
         50:d7:24:cd:54:19:bb:b5:c9:be:34:85:03:88:fd:54:f1:45:
         47:34:40:9f:87:bb:0b:39:86:08:b4:c4:77:dd:59:2a:93:fb:
         99:e4:ee:42:92:12:0c:65:3a:65:07:d1:45:64:6b:3d:e6:41:
         83:59:3d:48:10:c6:9b:e0:3a:1e:8a:9a:14:19:e9:23:5f:b1:
         ff:b6:74:9a:ef:a2:41:a0:1e:e9:c7:5c:1c:1b:6f:33:bb:91:
         8a:9b:da:a1:e2:46:06:cd:b6:4e:27:88:87:a0:2d:68:a8:e4:
         06:d9:1e:f2:f1:49:b4:40:19:4d:f5:a9:5e:3e:f4:aa:c5:02:
         45:2d:1d:9d:d6:6a:d1:44:66:2a:27:e9:8b:c3:a5:be:02:ff:
         2a:e8:6e:9f:44:ff:1e:94:63:2e:b0:da:5d:a5:d7:85:19:88:
         87:01:0f:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF
MzMzNEMyMTIwHhcNMjYwNDA0MTcxOTAwWhcNMjYwNDExMTcxOTAwWjAYMRYwFAYD
VQQDEw02OWQxNDgwNC0xZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvF66Wes6jZjMKdTzBmfkYehd+TmgkOKJ2/BQNyw97gj69TVdWaP+P1wAD0wP
1HJF32efDL8EwjQjQk4CNfSqGXYZNVb/rRSKPBB4BI13A5L/XIxD7fvQ2Jyz65nh
njyy3kzrDZZ3TX7WONnx/QMlxCGekrHtU98uEAYBFdUL21YepaUe3GyKHSoqTly4
imf04ZgkOCEP68vgTRFtL/r2LWq/3l9mIveU+fay2ZwGNLPqzU7/wzsKAm5WlqPl
UnVRWSTJzcy+Fz0cZUAzf2HUK7OE0Dsb0QmFoy35pLC+veO9nFKcB44YdqYXjSu1
3+Ddw/V5lG1gGWkSZVMZ+xRCcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHERjHT
1NlduMhbe897S9W9JxXdMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD
RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i
elNZSHhOOFhwVXpqTTB3aEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOvyRdFcVGKGqAFID6KS9siObHIk5RIkSWFRGPNIj/6bZPB/un8AIC8D2MXR/
A49cstB4zPbSxSnSgqitRnRkM58DxPpBFy5lOJSXj5u0JdN8xhr/pmg5+UDKUNck
zVQZu7XJvjSFA4j9VPFFRzRAn4e7CzmGCLTEd91ZKpP7meTuQpISDGU6ZQfRRWRr
PeZBg1k9SBDGm+A6HoqaFBnpI1+x/7Z0mu+iQaAe6cdcHBtvM7uRipvaoeJGBs22
TieIh6AtaKjkBtke8vFJtEAZTfWpXj70qsUCRS0dndZq0URmKifpi8OlvgL/Kuhu
n0T/HpRjLrDaXaXXhRmIhwEPWQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:42:25 2026 by rpki-client