Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
File:                     Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json)
Hash identifier:          YrxSN6g1BeQZRRw+DwArpXyDo3HwMNWA/Y6u6sHB7Uo=
Subject key identifier:   7F:C3:B3:50:94:32:97:57:8F:A6:F4:49:5C:9A:96:5F:2F:D8:24:AD
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Certificate issuer:       /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
Manifest number:          FE
Signing time:             Sun 05 Apr 2026 05:40:08 +0000
Manifest this update:     Sun 05 Apr 2026 05:40:07 +0000
Manifest next update:     Sun 12 Apr 2026 05:40:07 +0000
Files and hashes:         1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: vSRUrfMZSj3Xl3HrcuPRuWxSb7JjXmX4nJ55EIUWtmE=)
                          2: C491ED725A7A11F083B3F885C4F9AE02.roa (hash: 7WBAHsig/Kovz/pUrk3p+Cxc7oQA5m4kNqg7vSnWYU8=)
                          3: 2018750A5FC411F0ACE3A087C4F9AE02.roa (hash: R8o39adrmBVnGQ0//ScQ4qDFf9KvWQlMZLY/6u7Uyoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
        Validity
            Not Before: Apr  5 05:40:07 2026 GMT
            Not After : Apr 12 05:40:07 2026 GMT
        Subject: CN=69d1f5b7-9ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:31:46:c0:90:9a:17:6f:64:ab:8e:74:f0:
                    a5:54:57:02:05:bb:41:0b:84:33:df:80:e0:30:5d:
                    f2:54:14:da:a5:ce:81:9b:f8:61:fa:44:1b:2e:c4:
                    e4:06:40:c4:ff:ab:8d:95:36:4f:eb:c5:c3:0a:5b:
                    2c:46:dd:ac:f1:54:a3:59:75:b2:b4:d4:30:8d:d5:
                    62:75:6e:b7:26:ac:ae:21:af:ff:34:3c:bb:5c:82:
                    ca:15:e7:0e:f0:51:90:ae:51:a2:c9:36:dd:58:4c:
                    94:44:72:d3:d4:b5:d0:21:dc:14:d3:5d:88:2e:ab:
                    09:77:0b:31:78:a6:fd:2b:b6:c4:87:25:73:a9:4a:
                    83:09:29:ae:3d:db:d1:11:87:43:75:47:6b:91:6d:
                    d9:7a:19:f6:e0:d6:f2:66:19:0d:de:fa:ac:8a:c2:
                    49:41:42:fa:c6:f8:d5:16:62:fa:34:72:60:ce:e0:
                    4c:91:c0:3e:28:be:30:46:e3:14:99:3d:38:b3:df:
                    78:33:7c:eb:a7:d3:0a:ce:3b:5d:5c:96:ea:8b:65:
                    d1:f7:0e:a8:64:32:3d:9d:1d:70:76:93:d1:66:ee:
                    e5:40:f4:11:8e:c2:d5:3f:d2:41:4f:c9:bf:c4:2b:
                    57:67:58:2a:a2:76:4c:2e:d7:67:f0:41:5d:2e:23:
                    30:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C3:B3:50:94:32:97:57:8F:A6:F4:49:5C:9A:96:5F:2F:D8:24:AD
            X509v3 Authority Key Identifier:
                keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:92:a5:c9:05:ce:11:cd:ef:96:00:50:84:89:b6:0d:d1:a3:
         ec:ab:29:b5:b1:e3:57:81:88:75:ff:d4:b7:39:27:e1:fb:35:
         53:d4:c0:c6:8c:57:d8:85:7f:0b:24:96:f8:0e:f2:1d:26:8f:
         d1:77:fe:05:bf:97:fe:2f:69:45:35:90:67:7a:5e:51:1f:36:
         d3:65:2d:7f:8a:a5:fc:00:00:ae:36:fa:85:ac:60:64:3f:e0:
         2a:cc:a6:f6:bc:1d:36:3c:28:b6:bd:67:3f:9d:cc:09:b5:28:
         00:bd:66:e3:0a:45:89:c1:ca:de:5f:09:c1:15:90:42:d0:01:
         cf:67:97:fa:69:ea:d9:0d:ac:68:d4:c2:4a:9b:14:45:ac:65:
         e2:4a:88:35:30:72:80:33:fd:e9:58:54:8a:b6:e6:2e:87:98:
         31:0a:94:52:bd:5f:c7:8b:b9:15:2d:2f:81:92:57:b3:86:b5:
         9a:d8:91:3f:cf:85:bb:67:de:ee:4b:65:15:de:78:ac:f3:c6:
         a1:4e:07:d7:56:61:c9:0e:56:57:92:f1:70:d0:eb:b8:a0:a2:
         ce:47:9c:8f:6d:fe:25:a3:79:54:f1:25:d4:88:0e:94:dd:54:
         89:53:4f:f8:f1:9a:ed:a1:f9:4d:55:ed:d9:64:b2:99:20:bd:
         c9:03:51:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:58:18 2026 by rpki-client