Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
File:                     5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft (raw, json)
Hash identifier:          D/pqcgXryOqWucZ/KDDaXEy6ak2GPjsyPyC9vkai0a0=
Subject key identifier:   55:28:B9:8D:B5:6C:CC:23:77:3E:68:15:13:CC:18:7D:C4:CB:44:A4
Authority key identifier: E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE
Certificate issuer:       /CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
Certificate serial:       07AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
Manifest number:          22C6
Signing time:             Sat 18 Apr 2026 15:52:10 +0000
Manifest this update:     Sat 18 Apr 2026 15:52:10 +0000
Manifest next update:     Sat 25 Apr 2026 15:52:10 +0000
Files and hashes:         1: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl (hash: CSaflP90UirmOkr2aC5d/aitsmf8/nf/ZFNL3pywnJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl
                          rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1963 (0x7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCEB1, serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE
        Validity
            Not Before: Apr 18 15:52:10 2026 GMT
            Not After : Apr 25 15:52:10 2026 GMT
        Subject: CN=69e3a8aa-92cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:3c:86:9e:42:d8:82:4c:a9:ed:dd:40:62:
                    6d:46:8d:ec:6f:e4:46:58:a8:ba:10:90:fb:17:57:
                    e5:68:0c:64:3f:90:d7:81:2c:ee:2b:8d:61:75:5e:
                    c7:e7:01:81:fb:9c:0e:fb:f2:26:79:f5:aa:7c:8f:
                    a2:8b:35:40:f1:74:c6:5c:bd:70:c0:1d:3e:8a:5d:
                    82:4e:87:d0:4f:e1:d8:90:30:d7:1f:63:d4:58:a1:
                    94:76:4f:54:3f:71:69:c0:a2:af:fc:65:98:c9:70:
                    a9:a6:09:6f:af:f7:3a:1e:c8:cb:ad:2d:41:58:7f:
                    23:87:9f:55:75:82:31:63:3c:2b:63:67:e3:f6:4a:
                    c2:c5:34:ab:3a:5e:5f:ef:7f:0e:81:e5:75:7d:68:
                    e7:c7:28:f6:3b:52:d6:18:65:e6:75:e1:78:36:e3:
                    cc:d6:64:23:1c:00:ad:cb:81:58:72:14:89:a8:e2:
                    75:a6:54:82:a0:12:9b:30:2e:05:8a:df:21:9d:86:
                    b6:15:c5:43:3c:df:cb:0e:41:67:c4:fa:a6:f8:39:
                    82:e9:a9:84:59:8b:2d:4f:00:ef:c0:72:5b:9d:a3:
                    b6:96:8a:20:06:1f:42:49:29:77:80:22:6a:e9:1a:
                    43:87:46:95:32:45:53:03:02:2c:01:eb:90:c7:96:
                    00:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:28:B9:8D:B5:6C:CC:23:77:3E:68:15:13:CC:18:7D:C4:CB:44:A4
            X509v3 Authority Key Identifier:
                keyid:E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a1:41:60:34:e9:ed:9a:3d:bb:af:11:5f:19:dc:06:40:bf:
         52:6f:6c:fa:5b:88:4e:00:8d:16:e6:e4:ef:97:6d:6c:80:a4:
         7a:ce:54:e8:5a:bf:60:03:bf:1b:a7:8e:67:02:46:27:ce:c4:
         55:bc:e8:25:bc:77:08:94:fe:ea:f9:cd:7d:ab:85:9c:38:46:
         c3:a4:0d:cc:d8:57:28:72:2a:1b:5a:7a:de:99:51:08:84:6a:
         8a:13:ea:4a:f8:fe:d1:f0:44:bf:4d:4c:37:5f:b9:81:29:16:
         a7:bd:31:61:b1:78:4a:90:a2:48:a2:48:18:09:ea:15:cb:0d:
         ce:7c:16:d6:5b:22:fe:57:37:7f:c5:df:0e:2c:07:86:1c:81:
         d1:c2:bb:54:d3:e6:d9:5a:14:47:dd:16:29:48:76:15:56:16:
         95:d4:a8:23:35:df:2d:69:9b:31:a8:b8:31:2b:85:31:1a:67:
         39:0d:da:fc:de:9c:4e:23:4e:3f:a0:03:05:b4:1f:65:1f:1c:
         70:11:5e:71:81:e7:51:f6:8a:c2:dc:14:20:97:63:83:4b:2b:
         b0:c2:b8:6d:f1:0f:a1:cd:82:f0:e8:2f:3d:3b:42:68:d3:b8:
         34:99:15:8d:2d:1d:0d:23:9c:5c:37:84:fd:a0:43:b2:99:18:
         37:98:3b:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNFQjExMTAvBgNVBAUTKEU3M0ZCODg2OEREM0I0NjFFQTFBNjczQzdBMzY5NDUy
MzVFOUNBQUUwHhcNMjYwNDE4MTU1MjEwWhcNMjYwNDI1MTU1MjEwWjAYMRYwFAYD
VQQDEw02OWUzYThhYS05MmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/Y8hp5C2IJMqe3dQGJtRo3sb+RGWKi6EJD7F1flaAxkP5DXgSzuK41hdV7H
5wGB+5wO+/ImefWqfI+iizVA8XTGXL1wwB0+il2CTofQT+HYkDDXH2PUWKGUdk9U
P3FpwKKv/GWYyXCppglvr/c6HsjLrS1BWH8jh59VdYIxYzwrY2fj9krCxTSrOl5f
738OgeV1fWjnxyj2O1LWGGXmdeF4NuPM1mQjHACty4FYchSJqOJ1plSCoBKbMC4F
it8hnYa2FcVDPN/LDkFnxPqm+DmC6amEWYstTwDvwHJbnaO2loogBh9CSSl3gCJq
6RpDh0aVMkVTAwIsAeuQx5YA6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUouY21
bMwjdz5oFRPMGH3Ey0SkMB8GA1UdIwQYMBaAFOc/uIaN07Rh6hpnPHo2lFI16cqu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB
MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi81ei00aG8zVHRHSHFHbWM4ZWphVVVqWHB5
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzV6LTRobzNUdEdIcUdtYzhlamFVVWpYcHlxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi81ei00aG8zVHRH
SHFHbWM4ZWphVVVqWHB5cTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAKFBYDTp7Zo9u68RXxncBkC/Um9s+luITgCNFubk75dtbICkes5U6Fq/YAO/
G6eOZwJGJ87EVbzoJbx3CJT+6vnNfauFnDhGw6QNzNhXKHIqG1p63plRCIRqihPq
Svj+0fBEv01MN1+5gSkWp70xYbF4SpCiSKJIGAnqFcsNznwW1lsi/lc3f8XfDiwH
hhyB0cK7VNPm2VoUR90WKUh2FVYWldSoIzXfLWmbMai4MSuFMRpnOQ3a/N6cTiNO
P6ADBbQfZR8ccBFecYHnUfaKwtwUIJdjg0srsMK4bfEPoc2C8OgvPTtCaNO4NJkV
jS0dDSOcXDeE/aBDspkYN5g7Rg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:58 2026 by rpki-client