Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
File:                     zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json)
Hash identifier:          jBWzrf5oHKXrDX2WQ/PDxd0woolzgTpL0u4LazA6Vrs=
Subject key identifier:   40:0D:1F:41:CF:8C:A2:F9:D4:51:F6:3E:54:F2:D9:79:BD:D6:FE:A1
Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
Certificate issuer:       /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
Manifest number:          FC
Signing time:             Sun 05 Apr 2026 05:37:48 +0000
Manifest this update:     Sun 05 Apr 2026 05:37:48 +0000
Manifest next update:     Sun 12 Apr 2026 05:37:48 +0000
Files and hashes:         1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: RXaczDyKsOL9hwwQIbnjB0z4N86MiTAUnHLjmKWtgRA=)
                          2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: S9t/+J52VQt2ne9SbBBHigAP25wl7hoUywJOVYVw1Ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
                          rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
        Validity
            Not Before: Apr  5 05:37:48 2026 GMT
            Not After : Apr 12 05:37:48 2026 GMT
        Subject: CN=69d1f52c-04b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d2:19:a7:67:ab:12:da:37:53:6a:ef:79:35:
                    ad:1a:3c:80:ba:b3:97:36:0c:3c:e0:6c:f7:d4:02:
                    f1:eb:cf:f1:bc:e6:b7:cb:cd:99:35:5d:d6:49:09:
                    42:9f:37:be:87:ce:28:8b:f5:51:fd:68:56:48:c9:
                    78:6f:f0:f5:04:f6:20:be:35:30:cf:0a:81:76:6f:
                    b2:df:d9:29:35:a5:b1:08:95:b3:86:55:b9:22:48:
                    04:33:6a:49:80:82:5b:c7:7c:76:27:92:c9:78:8e:
                    39:90:07:48:15:62:85:ba:77:ce:2f:15:01:77:80:
                    f0:66:0f:7c:52:f4:b4:5b:b2:ae:83:4e:73:58:ca:
                    fa:f2:8a:18:0e:3c:ab:6b:75:46:a7:41:81:a0:36:
                    f9:86:d5:84:1f:fc:12:e2:3f:5c:7b:07:bf:75:2f:
                    16:98:ee:c0:7b:e2:35:1f:b1:7b:34:12:1b:0d:3e:
                    89:4d:2f:68:75:fe:f6:65:86:f2:b9:fe:1e:af:9d:
                    4a:4a:76:8b:a3:21:a5:0d:c2:ce:be:b1:e3:80:fb:
                    de:23:54:c6:c9:13:1b:9f:e7:c2:b7:f2:40:05:cf:
                    e6:0c:86:49:33:d2:c8:e8:8e:cf:e2:03:ea:f3:55:
                    a4:a3:42:cc:f2:0a:d6:21:d9:31:04:73:8e:33:ef:
                    1a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0D:1F:41:CF:8C:A2:F9:D4:51:F6:3E:54:F2:D9:79:BD:D6:FE:A1
            X509v3 Authority Key Identifier:
                keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:06:4b:08:1a:0d:49:63:55:e3:fa:a2:07:25:f7:3e:47:43:
         ea:b7:30:ed:da:cb:50:27:e6:4b:b2:10:a5:bf:39:61:a2:ef:
         a9:6c:ce:94:5c:e6:f7:14:1c:75:e8:b5:82:97:4d:3d:20:52:
         56:d0:c8:ef:b7:6b:cc:a6:96:bc:26:15:53:88:f0:7c:62:a1:
         df:2c:9b:fc:17:ef:8b:08:ec:04:fa:cf:d0:12:0e:69:b0:bd:
         39:34:6f:f3:bc:fb:5f:91:b1:37:85:0e:6f:f1:83:ed:d8:33:
         b5:0a:cc:d8:65:9f:0f:af:30:4a:cc:ec:b9:bd:8f:7b:4a:3a:
         dc:05:5e:9e:e6:fa:fa:d6:fb:34:b1:e3:ce:ab:98:7e:57:b1:
         c7:66:df:ee:09:af:5a:67:21:92:06:d4:b5:4c:bf:a8:32:bf:
         09:67:2e:dc:f2:bd:49:d7:9b:89:c1:24:d1:8d:a4:d0:7c:b2:
         da:f6:25:1e:49:b2:36:09:f8:6f:7b:74:1d:d5:07:37:6b:52:
         73:22:a2:e0:9d:25:2d:ff:15:21:da:ed:b6:f9:79:3c:f7:07:
         df:6c:1a:67:ac:33:33:24:6b:b2:ef:9f:0b:d8:23:91:fc:6a:
         51:29:c1:3b:1c:79:42:4c:db:50:0b:0e:60:17:ba:a8:0d:79:
         05:73:7c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:19 2026 by rpki-client