Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
File:                     ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json)
Hash identifier:          Ye9Pg9zJIJ9Xdi0ruwtA131G686A3Vfqs9GwwLfrPOE=
Subject key identifier:   9B:57:26:80:BA:A3:9F:49:BC:B6:C0:4A:55:86:E3:00:6E:9B:96:AF
Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD
Certificate issuer:       /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
Manifest number:          67
Signing time:             Sun 05 Apr 2026 07:17:06 +0000
Manifest this update:     Sun 05 Apr 2026 07:17:05 +0000
Manifest next update:     Sun 12 Apr 2026 07:17:05 +0000
Files and hashes:         1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: 309Eh4i68CuazO6Biux6+AQM7ngE3NMFsqu+XnEPHtw=)
                          2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: ywYpRYCAQwXCZMjr3c7Rlx0ujNmnV92c95uYASJL2t0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl
                          rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:17:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD
        Validity
            Not Before: Apr  5 07:17:05 2026 GMT
            Not After : Apr 12 07:17:05 2026 GMT
        Subject: CN=69d20c72-380d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:8b:25:73:30:8c:62:40:1f:d7:ed:e2:1e:
                    05:54:fd:32:0a:14:33:31:64:a1:3a:02:10:8a:77:
                    af:00:f1:08:bf:a7:9b:4a:85:89:b8:1b:43:18:09:
                    bd:24:14:7d:eb:06:34:32:86:9f:6b:a4:d4:ec:dc:
                    40:3b:4e:f0:5c:58:0a:39:35:a5:81:e7:80:a2:5c:
                    e5:49:1a:00:84:55:71:79:13:91:d4:5a:c4:3a:93:
                    1c:b5:7a:10:1c:4d:62:47:b3:12:98:b4:9b:d2:52:
                    14:5b:f9:37:6d:ca:f7:bb:3a:9e:20:7b:b7:11:a6:
                    e5:23:f5:df:41:7d:90:7a:64:dd:73:56:a0:39:32:
                    76:7b:f5:16:72:0e:b6:4a:c1:60:a5:7f:29:0a:2a:
                    f0:07:1b:04:ef:ec:35:34:fe:43:c5:d2:a6:e5:83:
                    3c:d3:52:de:c3:be:96:ee:bc:e4:48:6a:00:89:45:
                    bf:78:75:53:db:00:42:fe:2a:9c:d2:73:25:53:2c:
                    0a:2b:ce:13:fc:43:7c:bd:af:dc:bf:e3:0c:ef:36:
                    61:90:24:f7:b5:c8:00:9c:83:d9:c5:c8:94:25:62:
                    fd:96:f3:02:dd:c4:52:ee:c5:42:f8:7a:a5:cc:08:
                    06:96:27:b6:13:a4:18:52:b0:96:c9:5d:55:8b:4c:
                    31:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:57:26:80:BA:A3:9F:49:BC:B6:C0:4A:55:86:E3:00:6E:9B:96:AF
            X509v3 Authority Key Identifier:
                keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ae:74:90:86:1e:f1:d6:08:85:9f:03:e4:98:b6:21:17:ec:
         a1:34:88:39:94:cb:73:45:08:58:4c:9b:04:b2:55:2c:01:73:
         bf:1b:26:3b:f3:01:6d:ef:59:af:8d:28:56:96:9b:66:0e:c9:
         ed:bd:04:31:f1:a0:50:43:77:51:1d:ec:a3:81:fe:c1:b0:1a:
         9b:d9:99:07:a0:f9:01:4d:df:4c:bd:ef:dc:43:6c:64:47:42:
         99:38:b6:72:4e:50:86:59:59:d5:c4:46:43:45:4a:4e:1e:14:
         5c:62:97:a7:ee:21:28:0e:e0:d4:a4:ab:9a:34:8a:f0:64:2c:
         ce:92:9f:ac:58:3b:4b:56:46:0d:a9:20:da:5d:00:42:2b:b4:
         c6:02:0c:7a:63:2b:dd:49:9a:27:46:d0:71:f6:b5:da:8d:7d:
         ce:aa:2f:04:bf:0b:22:af:e9:53:4f:57:ac:18:7d:e4:e1:59:
         03:81:27:11:66:ea:c2:f4:7e:36:cc:d0:1b:14:da:42:e3:99:
         03:2c:ea:f9:37:37:2b:14:1f:18:a1:d4:3e:25:24:4f:dd:b0:
         3d:71:49:39:47:db:09:4a:f9:9e:f5:de:b6:5d:1e:a6:07:2a:
         a5:23:24:c0:71:46:27:b9:d4:7b:3d:01:42:ce:3d:70:cf:de:
         d7:e4:c0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:20 2026 by rpki-client