Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
File:                     zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft (raw, json)
Hash identifier:          +gavtxGUWNenq51NIf7v78nA1faBdYcXe2nep7qmpmE=
Subject key identifier:   E6:92:78:21:CB:FC:87:D6:1D:68:51:D4:A6:95:E2:64:ED:21:29:EB
Authority key identifier: CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71
Certificate issuer:       /CN=A91AAE63/serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
Manifest number:          0239
Signing time:             Sun 05 Apr 2026 02:06:28 +0000
Manifest this update:     Sun 05 Apr 2026 02:06:28 +0000
Manifest next update:     Sun 12 Apr 2026 02:06:28 +0000
Files and hashes:         1: zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl (hash: gCVVeoaiUHLfO+2lzKV/RP41JU98Gj6GO/RXdb7b31g=)
                          2: 5DCF3814CA0E11ED9251861DC4F9AE02.roa (hash: jvV2Z+fiyEhetDjklhcAMgGtL3vvbGgKgdynXMsgt90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE63, serialNumber=CC7C5F2780A80D3C666B2BF69153F20484BEEE71
        Validity
            Not Before: Apr  5 02:06:28 2026 GMT
            Not After : Apr 12 02:06:28 2026 GMT
        Subject: CN=69d1c3a4-346b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4e:84:8c:56:06:5d:66:dd:c7:8d:97:e7:65:
                    a2:1f:1d:85:01:1d:b3:14:ef:ed:ff:fa:a4:7d:6e:
                    fa:46:23:b1:23:9f:a2:08:75:1a:f1:ad:fb:1c:9e:
                    aa:f8:07:6e:a9:1e:88:1a:05:e8:cd:9b:ae:ae:c5:
                    08:8d:44:a0:5b:4c:af:cf:e2:32:fc:71:e6:fb:f0:
                    f2:1e:68:13:70:1a:fd:1d:18:b3:cb:ee:61:3b:71:
                    0b:b0:91:b0:c8:6b:bc:ba:45:de:ea:c2:d1:c1:03:
                    f3:66:f1:6f:08:20:d9:9d:47:cc:f6:a9:9c:85:1b:
                    07:81:77:c4:fd:6b:05:28:a6:5d:ec:23:68:00:c7:
                    7b:dd:85:f9:21:c8:22:e9:2a:6c:7a:bd:da:ba:1b:
                    d4:bf:cf:47:89:19:7e:73:dd:bc:e8:c0:59:43:ca:
                    fa:26:b5:c6:46:53:73:55:6d:2c:e2:2c:24:c3:01:
                    4b:fe:c7:b1:c1:34:41:ae:f1:7e:d9:b4:d4:f3:2b:
                    97:51:eb:cb:ae:ac:34:2e:00:01:b3:14:10:a8:0d:
                    21:00:31:3b:46:01:2f:7c:1b:e5:42:d3:25:8e:9c:
                    e0:47:7c:87:c0:3d:2c:55:68:da:22:12:2a:2f:c7:
                    4e:96:ff:eb:e6:9b:ba:a5:b8:d0:28:1f:a8:e1:c5:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:92:78:21:CB:FC:87:D6:1D:68:51:D4:A6:95:E2:64:ED:21:29:EB
            X509v3 Authority Key Identifier:
                keyid:CC:7C:5F:27:80:A8:0D:3C:66:6B:2B:F6:91:53:F2:04:84:BE:EE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHxfJ4CoDTxmayv2kVPyBIS-7nE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE63/5E966394CA0911ED81B6F63CC4F9AE02/zHxfJ4CoDTxmayv2kVPyBIS-7nE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:3c:82:11:64:44:cf:b7:bc:a9:b8:3e:14:85:b9:48:ee:bb:
         0c:00:67:40:03:73:4a:14:e8:2e:41:ca:fb:ca:dc:e3:a4:5e:
         19:39:1a:63:df:75:19:2a:00:f7:cd:ca:d1:e7:0d:3a:ba:2d:
         0f:76:81:26:a7:6c:6d:52:70:a2:02:e1:1b:61:f9:bf:c4:0b:
         88:26:f0:3c:a5:1e:4f:8e:2a:92:27:7b:32:a7:43:76:f7:54:
         d7:23:d4:70:43:7b:0f:2f:21:6b:9b:20:22:5e:b7:bc:a7:ed:
         c0:5d:0a:46:7f:11:c8:ca:5e:cb:47:55:d8:01:4f:20:42:46:
         0d:bb:64:f4:0c:03:79:31:9d:3c:26:db:ea:f4:28:3c:e1:86:
         62:c4:19:e1:3f:54:33:93:82:07:6a:d3:d8:2a:55:de:08:7b:
         bc:9f:83:bc:8c:5d:32:af:26:b6:15:bb:b2:3b:45:4c:ec:4e:
         34:71:1c:e2:de:2f:ae:4b:94:13:74:4d:c9:f1:37:0e:4d:7b:
         fb:61:2a:14:fa:9d:2b:80:ba:43:bc:ce:da:69:df:3c:60:b1:
         96:aa:d3:7b:56:46:a5:df:87:26:6e:3e:2d:17:82:32:28:9b:
         57:86:5a:b9:ff:d3:64:f8:93:ea:2a:df:46:97:d1:5b:e0:26:
         25:a9:88:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFNjMxMTAvBgNVBAUTKENDN0M1RjI3ODBBODBEM0M2NjZCMkJGNjkxNTNGMjA0
ODRCRUVFNzEwHhcNMjYwNDA1MDIwNjI4WhcNMjYwNDEyMDIwNjI4WjAYMRYwFAYD
VQQDEw02OWQxYzNhNC0zNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6k6EjFYGXWbdx42X52WiHx2FAR2zFO/t//qkfW76RiOxI5+iCHUa8a37HJ6q
+AduqR6IGgXozZuursUIjUSgW0yvz+Iy/HHm+/DyHmgTcBr9HRizy+5hO3ELsJGw
yGu8ukXe6sLRwQPzZvFvCCDZnUfM9qmchRsHgXfE/WsFKKZd7CNoAMd73YX5Icgi
6Spser3auhvUv89HiRl+c9286MBZQ8r6JrXGRlNzVW0s4iwkwwFL/sexwTRBrvF+
2bTU8yuXUevLrqw0LgABsxQQqA0hADE7RgEvfBvlQtMljpzgR3yHwD0sVWjaIhIq
L8dOlv/r5pu6pbjQKB+o4cWX4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOaSeCHL
/IfWHWhR1KaV4mTtISnrMB8GA1UdIwQYMBaAFMx8XyeAqA08Zmsr9pFT8gSEvu5x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUU2My81RTk2NjM5NENB
MDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RUeG1heXYya1ZQeUJJUy03
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pIeGZKNENvRFR4bWF5djJrVlB5QklTLTduRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUU2My81RTk2NjM5NENBMDkxMUVEODFCNkY2M0NDNEY5QUUwMi96SHhmSjRDb0RU
eG1heXYya1ZQeUJJUy03bkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARTyCEWREz7e8qbg+FIW5SO67DABnQANzShToLkHK+8rc46ReGTkaY991GSoA
983K0ecNOrotD3aBJqdsbVJwogLhG2H5v8QLiCbwPKUeT44qkid7MqdDdvdU1yPU
cEN7Dy8ha5sgIl63vKftwF0KRn8RyMpey0dV2AFPIEJGDbtk9AwDeTGdPCbb6vQo
POGGYsQZ4T9UM5OCB2rT2CpV3gh7vJ+DvIxdMq8mthW7sjtFTOxONHEc4t4vrkuU
E3RNyfE3Dk17+2EqFPqdK4C6Q7zO2mnfPGCxlqrTe1ZGpd+HJm4+LReCMiibV4Za
uf/TZPiT6irfRpfRW+AmJamIMA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:45 2026 by rpki-client