Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
File:                     ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json)
Hash identifier:          jaV0cmgZv2jVdRJdTdSFzQnKRQuCLefrU0PUNapIjKk=
Subject key identifier:   95:C4:A4:4F:73:D8:24:A6:B0:53:5E:3A:69:D3:89:F8:6E:03:2D:9C
Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
Certificate issuer:       /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
Manifest number:          0148
Signing time:             Sun 01 Mar 2026 06:14:30 +0000
Manifest this update:     Sun 01 Mar 2026 06:14:30 +0000
Manifest next update:     Sun 08 Mar 2026 06:14:30 +0000
Files and hashes:         1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: 2waien0qCDkx/t49AXX69Zjetw7Kk5Lsjvuc5MoVjgU=)
                          2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: pzMlGsKhWR+3BV9wtGqk0Bd9xkj2vDOLvA2jobreAa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
                          rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
        Validity
            Not Before: Mar  1 06:14:30 2026 GMT
            Not After : Mar  8 06:14:30 2026 GMT
        Subject: CN=69a3d946-2501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:42:e9:06:d0:22:d2:42:d3:99:02:3b:2c:
                    d4:3a:ab:36:e1:4c:98:24:97:19:27:d9:2a:59:ad:
                    83:a5:7a:03:45:70:87:07:ca:21:eb:51:70:bd:cd:
                    33:e0:46:05:dc:e8:83:20:92:97:58:b9:9f:24:f3:
                    aa:d7:0f:27:d0:f8:de:ce:12:fd:26:95:2e:fa:e3:
                    ff:6d:3a:fe:61:5e:9c:3e:a2:d1:31:e5:e7:c4:9e:
                    e0:62:db:88:bd:23:74:e8:d0:3b:41:b0:34:44:f6:
                    da:72:3d:58:86:9c:87:c2:c5:28:b2:61:e7:a9:a6:
                    15:e0:e6:68:80:e0:05:99:05:6d:fb:4c:ce:29:78:
                    f3:3f:47:3e:2a:b1:a3:29:69:56:13:c8:53:20:72:
                    97:c7:09:7d:2d:4c:f8:7f:b1:15:1c:8f:5c:07:6d:
                    48:a7:f8:84:70:84:bd:ff:e0:02:65:8b:38:e8:42:
                    62:21:15:83:db:a4:78:22:9e:27:89:c1:0d:c1:5c:
                    5a:24:93:48:33:ad:d0:b7:b6:01:c4:5a:f3:35:a1:
                    fe:4a:49:84:fe:0c:39:b8:ed:a9:ac:4f:41:c0:93:
                    7b:86:80:1d:ec:3c:80:33:16:52:a8:d8:ad:16:7e:
                    d4:5f:39:f6:11:c3:e1:be:ae:1b:b8:51:51:6d:b6:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C4:A4:4F:73:D8:24:A6:B0:53:5E:3A:69:D3:89:F8:6E:03:2D:9C
            X509v3 Authority Key Identifier:
                keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:30:23:58:cc:ec:1c:9b:4f:29:76:8e:46:33:68:45:99:ed:
         9d:58:9e:9f:74:b1:52:ab:21:ee:0f:55:bc:8d:3f:f7:b0:3c:
         c7:5f:e8:20:7d:fe:8f:6b:a9:a4:ab:ac:29:dd:06:1e:5c:64:
         32:14:c4:9b:8c:0c:99:c4:70:e8:f6:52:f9:4b:c1:b5:4e:db:
         c4:bf:c2:50:ae:f7:e4:6c:95:a4:ec:e2:50:02:01:b5:3f:32:
         08:8a:ea:dc:4a:ca:2f:6f:5c:3d:99:4c:2c:63:05:ad:54:1c:
         be:b9:93:ce:d3:05:d7:e5:f6:d6:30:e4:77:7c:f9:97:51:78:
         49:86:33:c1:e3:e9:3d:ab:6a:b8:fe:57:e1:73:b0:cb:53:f7:
         02:3f:4b:97:e2:ac:c7:11:d0:05:70:b0:75:e2:5f:1f:4e:38:
         7d:0c:a9:17:79:fc:dc:a1:8b:ad:58:be:a7:f3:67:70:2f:94:
         fd:6d:07:17:c0:e3:89:82:68:57:ab:fb:4a:d3:32:01:c3:69:
         ee:be:ed:d8:df:e9:d3:77:2a:18:49:fe:8f:1b:f2:bb:73:a9:
         2f:ad:1c:b0:d1:ae:5a:a2:5c:dd:02:04:73:a8:ca:6a:83:04:
         3c:4e:ed:7e:ec:70:b7:1a:ea:ca:d4:ea:c7:17:c8:39:dc:33:
         b3:4d:45:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:28:54 2026 by rpki-client