Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft
File:                     ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft (raw, json)
Hash identifier:          CUuK6Dk5TA/0jGXb3Y2c4SVZi/K5C3A9wB6OUUdUaIM=
Subject key identifier:   6A:85:CB:6A:89:B2:41:C2:F9:03:9F:A8:7E:8D:91:5E:96:BA:69:69
Authority key identifier: 64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94
Certificate issuer:       /CN=A91410C5/serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft
Manifest number:          7E
Signing time:             Sun 01 Mar 2026 09:01:29 +0000
Manifest this update:     Sun 01 Mar 2026 09:01:29 +0000
Manifest next update:     Sun 08 Mar 2026 09:01:29 +0000
Files and hashes:         1: ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl (hash: 1L+TOuoqY3zKzQu0rXcVhGhYQNEDCGkn9DlCXUnHQC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl
                          rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91410C5, serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94
        Validity
            Not Before: Mar  1 09:01:29 2026 GMT
            Not After : Mar  8 09:01:29 2026 GMT
        Subject: CN=69a40069-4a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:31:01:88:fd:64:63:c2:c5:62:da:cb:d8:
                    ed:2b:d2:4f:ad:de:ab:d0:1a:0d:49:51:57:df:79:
                    a7:7c:68:94:a2:ff:e3:e3:09:9c:70:ad:7f:df:f9:
                    71:cf:c0:a9:25:d7:f6:8f:b3:90:db:14:fa:20:9e:
                    82:a6:d1:c9:b7:de:42:e5:9a:f9:19:04:ad:cb:a3:
                    b5:a5:d8:ac:09:db:11:34:09:50:60:84:d3:08:7d:
                    20:d2:2c:68:42:8d:a7:b0:14:83:7f:81:e1:65:5a:
                    76:04:ed:3a:22:56:b6:5f:18:eb:04:f4:9b:d9:67:
                    e9:74:7c:d1:43:fb:3a:2c:8a:1c:af:b5:49:c6:b4:
                    6b:30:dc:4e:79:80:5e:e1:db:bb:0e:ed:0a:53:67:
                    f7:17:02:20:50:2a:fb:9a:ff:6d:31:a8:43:0e:2d:
                    6a:91:ec:4d:44:f5:7b:16:97:10:57:5b:d4:d3:7a:
                    86:ca:04:b8:e8:a4:52:c0:f4:90:e7:71:99:45:1b:
                    4d:3c:31:7a:53:4b:cf:e0:b8:6c:dd:e7:99:54:15:
                    95:4d:9e:7b:97:b0:fe:ae:69:da:cd:79:1d:c5:bc:
                    60:d8:a0:68:82:68:a1:99:54:b2:68:c6:bd:e5:4c:
                    aa:c6:b7:67:30:44:09:fc:f1:2b:41:83:8e:bf:df:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:85:CB:6A:89:B2:41:C2:F9:03:9F:A8:7E:8D:91:5E:96:BA:69:69
            X509v3 Authority Key Identifier:
                keyid:64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0c:28:94:ed:8e:f7:43:bb:73:eb:6a:4b:80:b0:d0:ba:00:
         8c:bf:fe:74:09:7b:b4:c6:ee:7e:f4:b6:45:24:2f:30:9a:d8:
         cc:dc:24:10:fa:04:79:2f:ba:b7:44:d5:c9:90:f6:b7:b8:3d:
         7a:ce:32:74:bb:8a:03:ee:1d:08:2d:5f:00:7e:b3:77:18:35:
         ab:2c:1e:c5:50:44:dc:93:6c:21:3a:17:25:44:16:1b:ca:51:
         46:7e:fd:3e:86:4b:74:4e:05:97:50:eb:b1:55:d6:cb:59:94:
         9f:1e:e1:dd:fb:b8:ec:ac:ce:48:d9:9d:0f:86:05:8a:8e:ab:
         c8:cd:bf:7f:20:ef:48:33:b0:47:fc:02:4f:16:47:ff:46:ed:
         23:e0:7b:09:d3:b0:a3:67:98:db:80:c4:96:40:d2:59:fa:6d:
         b4:e8:fd:af:18:f8:8a:0b:fd:cc:0a:cd:8a:bd:5f:b3:0c:ec:
         7b:b6:db:be:93:cf:3e:ba:0d:6d:27:5d:a1:d9:f6:ae:28:79:
         ec:87:6f:16:06:e4:e5:e0:2b:77:21:29:c2:d3:1d:d9:aa:ed:
         b2:c5:e3:28:3c:26:9b:be:36:65:62:86:d5:f5:28:9b:c5:8c:
         74:c0:cd:d6:2d:c9:10:b3:12:38:8f:42:14:c4:dd:d6:f3:69:
         6d:a4:92:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:22:56 2026 by rpki-client