Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
File:                     ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json)
Hash identifier:          AV6jm8SCVgBWVGO8kDM5iaqBrlSrWFcWZ9gllpWjk0g=
Subject key identifier:   89:2D:85:5D:42:9A:A2:6C:E0:ED:A1:0F:00:01:75:D1:46:B8:CD:C1
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Certificate issuer:       /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
Manifest number:          F9
Signing time:             Sun 05 Apr 2026 05:57:37 +0000
Manifest this update:     Sun 05 Apr 2026 05:57:36 +0000
Manifest next update:     Sun 12 Apr 2026 05:57:36 +0000
Files and hashes:         1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: BflRU6WBxqyXGBibUIrFrXl/YtcqJtDtTx2aX89hzzw=)
                          2: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: PRVzq//uzMGZ8IiaKeDZIuoo5BorBUfI/nvh7f2OTz8=)
                          3: 9CFB6E68291011F1A4B1745D97833773.roa (hash: aehHvD9t7DFT4Rjm26XymMF5OBLncC+QzTFVcD0Y9Lc=)
                          4: 48243250E78D11EF98760355C4F9AE02.roa (hash: pKuQcb5a0CGJjxiglyAc4MtEoKPTKV47Xl1uLaj1W8A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
                          rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
        Validity
            Not Before: Apr  5 05:57:36 2026 GMT
            Not After : Apr 12 05:57:36 2026 GMT
        Subject: CN=69d1f9d1-0490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:10:66:03:e8:52:18:81:d4:bb:46:b4:c9:7d:
                    8b:18:96:58:b8:93:0f:7b:ef:28:36:0f:c3:bd:75:
                    c3:67:40:eb:fd:f7:ba:d2:69:ce:18:94:dd:41:b4:
                    d5:39:4f:5f:2c:5e:bc:65:8c:a5:8c:3b:61:58:8d:
                    6d:70:95:47:cf:45:a5:82:a6:ed:d7:03:74:32:e6:
                    2b:a7:a2:86:5e:9a:03:c4:85:8f:fc:8c:f7:41:bb:
                    f9:ac:aa:8e:59:8f:6b:14:78:20:61:b9:3e:7a:a5:
                    24:d6:25:ef:3e:61:30:87:43:88:d4:d0:0b:7b:1d:
                    5b:93:e9:71:d3:5e:5e:2f:fa:a1:03:54:35:bb:87:
                    19:10:d3:43:5d:a6:39:69:c7:7f:8e:30:80:dc:ca:
                    3b:ad:12:0f:05:d8:10:61:0f:f9:18:f5:a7:3a:05:
                    db:4d:79:5f:17:b4:a7:60:ad:6e:68:c9:d4:ac:54:
                    94:40:df:e3:16:72:3d:44:c5:bb:6a:0f:33:64:ae:
                    b9:9c:12:34:9d:55:2f:b8:57:e0:a6:79:33:89:c5:
                    f2:36:f2:9d:68:35:27:35:4b:e3:7d:8d:e9:fb:89:
                    c8:7e:71:fc:0d:a7:b6:1c:ea:45:4b:d8:d9:ef:58:
                    d2:49:1b:4e:96:99:46:1c:78:51:60:21:b4:4b:bd:
                    a8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2D:85:5D:42:9A:A2:6C:E0:ED:A1:0F:00:01:75:D1:46:B8:CD:C1
            X509v3 Authority Key Identifier:
                keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:9f:4a:3b:4a:21:61:e1:2b:e0:89:c4:e6:34:33:13:26:a9:
         ab:19:ac:db:d2:88:69:36:d9:23:fb:c2:ea:02:89:6b:8c:ef:
         ea:de:8c:02:2a:24:ef:93:c8:2c:e5:73:fd:ac:65:fc:16:81:
         37:0e:9b:35:2c:df:d8:7a:17:b2:78:40:26:d0:da:09:c8:26:
         09:f6:62:1f:b1:e7:f2:f2:09:45:d6:75:96:2b:5d:f9:c0:07:
         a2:91:d5:c0:81:13:b5:8a:c2:71:f6:50:45:a9:f7:19:7b:a1:
         24:24:2d:ac:16:2f:e4:be:08:08:fd:18:f6:4a:13:8a:ba:44:
         ef:bc:3e:f4:af:a2:9c:59:95:7a:9a:28:97:8e:dd:91:fc:c8:
         82:66:e3:b0:a1:24:29:44:c8:ea:82:3c:c8:67:02:69:43:93:
         f0:70:8d:46:63:89:b4:fd:8b:8d:dd:5c:59:ac:0e:ba:9a:70:
         ab:40:98:56:54:ba:96:39:14:7a:83:92:cb:a0:a8:74:a3:45:
         45:6c:32:c6:24:99:8d:10:94:0d:85:5a:1f:63:9f:d0:3d:0f:
         1d:bd:b8:b3:7b:36:5b:47:be:ec:db:a8:34:67:46:01:9f:20:
         1f:80:53:f8:0d:a3:17:ac:6b:ed:2c:61:b8:74:1f:0c:3d:72:
         5e:d0:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:39:56 2026 by rpki-client