Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
File:                     PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json)
Hash identifier:          eQJyuupFBBd6tJu33h7LlqgDY3PkU0hTecv8wqwp/IU=
Subject key identifier:   C2:FE:45:9B:DF:C7:16:DC:98:B7:B6:A2:AC:70:30:1A:EC:A5:29:40
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Certificate issuer:       /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial:       0805
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
Manifest number:          07EF
Signing time:             Sat 28 Feb 2026 21:39:39 +0000
Manifest this update:     Sat 28 Feb 2026 21:39:39 +0000
Manifest next update:     Sat 07 Mar 2026 21:39:39 +0000
Files and hashes:         1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: T3u1CfsGTdxf2C/r0cTJFDtjI83MgmiZnYJE9uxFhE0=)
                          2: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: 1IWRKHioOXMwyjTTWNWycmySSHih4LoHTQzkoE2T/Mc=)
                          3: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: v+QXD6bTtJAGlVNjOl+dSqWjB8ujPNeWcMRgTCNmmWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
                          rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053 (0x805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
        Validity
            Not Before: Feb 28 21:39:39 2026 GMT
            Not After : Mar  7 21:39:39 2026 GMT
        Subject: CN=69a3609b-6b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:ca:e8:c1:4d:e8:48:7a:90:a8:2f:78:3e:
                    e1:1f:37:3b:63:b8:dd:d5:73:fe:06:73:e4:c5:52:
                    45:c4:85:66:72:03:fd:5c:4f:53:96:c5:92:98:e9:
                    e6:13:dd:e8:db:48:c1:d4:48:eb:91:57:e2:83:b4:
                    cc:5d:fa:ba:ee:97:ef:09:f2:db:ab:48:a0:01:cf:
                    98:a9:03:9e:f9:74:2f:7b:a9:57:be:96:67:5f:61:
                    1a:f4:83:87:ce:9f:7f:12:65:c7:d8:6b:fa:88:04:
                    b9:06:d8:c2:a7:59:1b:02:de:fd:4d:f5:ae:ea:1a:
                    45:40:38:d7:93:6a:59:2c:dd:49:c0:7a:7f:fc:e2:
                    dc:81:bc:8e:c6:fc:19:a8:3d:69:3e:10:17:2e:f5:
                    e2:94:c9:8e:d1:bc:51:06:20:66:1e:94:42:89:12:
                    71:8d:28:08:6f:1b:4a:fb:ab:90:ba:0e:dd:82:a7:
                    31:fa:5a:33:21:23:21:6a:9d:9b:8f:85:db:a8:ab:
                    70:b8:3d:5a:15:47:9b:1c:72:e4:4b:f7:20:6a:81:
                    25:ea:af:55:e2:47:97:97:34:a8:ea:90:8c:ca:7c:
                    57:78:5e:4a:fa:b1:01:0a:98:de:9b:4a:e5:15:24:
                    d5:0f:21:7b:a3:51:57:16:3e:3c:04:c8:2a:5b:ab:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FE:45:9B:DF:C7:16:DC:98:B7:B6:A2:AC:70:30:1A:EC:A5:29:40
            X509v3 Authority Key Identifier:
                keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:91:27:da:f4:1b:51:4d:f2:45:0e:18:04:d9:89:8e:72:80:
         9c:d1:83:8f:5f:04:6a:10:d9:29:ca:b6:ba:25:f5:96:43:e2:
         de:b6:6a:f6:01:68:06:40:12:f2:30:0e:01:79:b9:c2:74:31:
         d8:d3:51:67:7f:86:24:52:c8:32:40:27:85:bc:06:43:5f:27:
         9c:90:32:e5:c0:18:11:b0:57:af:c1:64:fd:39:8e:22:50:f8:
         17:3e:27:30:05:90:07:05:23:d0:9b:07:fe:86:bd:54:67:ad:
         9f:25:c6:13:61:d2:01:ad:f0:cc:4d:eb:2a:cb:13:ad:9c:32:
         61:02:0b:ff:ec:b1:cf:df:af:17:cd:80:c8:7d:c7:f1:ad:cd:
         36:ab:32:77:1c:81:74:39:eb:df:e1:f4:1d:85:a7:14:73:0c:
         59:78:15:1e:65:5f:eb:b7:9a:ac:47:0d:ba:77:6e:96:8b:9a:
         be:c1:4b:a4:9b:d2:b2:5c:19:ef:4d:fe:c8:92:7d:e4:e6:5d:
         bb:ac:2a:4c:a5:f9:a6:d1:9b:60:15:22:ea:59:d3:a7:e0:35:
         ec:f0:7e:18:2c:7c:b8:df:8c:1b:fa:45:c7:4f:cb:1e:77:2d:
         00:cc:be:e0:c0:d4:f0:f4:fd:4d:97:c8:b7:4c:b8:bf:49:7c:
         e2:5a:69:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:59 2026 by rpki-client