Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
File:                     ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json)
Hash identifier:          eEkFRLacFrSv9smzBzhoBV1NHjS8UIt6okAv+iT5yxE=
Subject key identifier:   8C:C1:AA:07:29:4B:6F:86:17:06:7C:DC:C3:A5:42:0F:86:51:65:86
Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD
Certificate issuer:       /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
Certificate serial:       08F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
Manifest number:          08F3
Signing time:             Sat 28 Feb 2026 20:39:27 +0000
Manifest this update:     Sat 28 Feb 2026 20:39:26 +0000
Manifest next update:     Sat 07 Mar 2026 20:39:26 +0000
Files and hashes:         1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: fU2FwEj1+MaB3U4GSr4XJyeR2Al0FP2v4lVLZW8hGDo=)
                          2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: 8FaXqc5Hlldkkz4gX1AqBRiec7ihxH2f6NSirwWWU5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl
                          rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2297 (0x8f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
        Validity
            Not Before: Feb 28 20:39:26 2026 GMT
            Not After : Mar  7 20:39:26 2026 GMT
        Subject: CN=69a3527e-4220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:73:91:bc:66:66:58:16:3c:46:6a:10:a6:d5:
                    9c:95:11:e5:a6:27:e5:01:ff:a8:d6:3c:f7:bf:00:
                    2c:f3:8d:86:64:ca:8f:d2:76:2c:54:e4:ab:65:7e:
                    de:17:d9:70:68:59:d8:cd:2e:73:8b:46:cd:d5:ec:
                    89:12:17:3f:18:6f:2e:6f:45:48:d2:14:97:76:77:
                    64:91:8f:53:6d:e3:2a:09:9d:9e:21:23:c5:1e:86:
                    54:b3:d5:4d:d1:d4:8e:bc:e0:77:08:d3:2b:f9:64:
                    d1:4b:cf:f4:56:ff:de:09:cf:c8:61:cb:53:4f:f2:
                    e3:4d:83:ed:62:24:61:b8:b6:8c:8e:36:96:11:8e:
                    cd:57:16:ac:74:e6:8d:a9:fa:2e:94:84:91:0e:9c:
                    97:fb:ac:2c:8e:8d:9a:9b:90:c0:9a:de:cb:b8:d6:
                    fb:88:cf:7c:7f:f5:66:aa:38:89:40:ca:38:ef:9d:
                    5d:51:91:f3:04:c4:04:49:da:51:e8:e5:e9:ce:bc:
                    52:58:86:44:38:8a:70:a2:ec:5a:21:65:9f:d2:65:
                    61:fa:d6:0e:02:88:ef:4d:74:db:ba:98:02:49:ee:
                    b5:c2:9b:64:d1:00:30:1a:08:2b:71:93:b6:09:e5:
                    83:26:83:50:77:7e:64:df:c0:85:fd:c5:aa:a0:f7:
                    90:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C1:AA:07:29:4B:6F:86:17:06:7C:DC:C3:A5:42:0F:86:51:65:86
            X509v3 Authority Key Identifier:
                keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:de:33:32:72:b4:03:9f:46:c9:cb:39:23:74:53:2a:95:00:
         77:3b:ef:8f:a9:5f:39:37:5b:c7:a8:51:b1:b2:bc:31:99:27:
         6f:11:8e:3c:d3:19:3c:1e:62:a1:46:38:42:ab:a6:4a:63:a8:
         8c:09:e1:fe:4b:b9:61:c5:54:f2:8e:cb:0f:b6:38:84:ec:6c:
         20:fe:cc:49:64:a7:92:c3:d4:ca:ba:03:a5:c5:9f:06:36:09:
         aa:42:bf:94:b7:87:db:10:da:2b:a3:35:bd:dd:01:61:6a:80:
         1f:92:6c:6f:03:d4:42:f0:fe:ec:23:df:d9:56:bf:64:ab:ef:
         eb:c1:ad:bf:95:22:16:e6:8d:7b:c6:91:eb:3b:1d:11:66:9d:
         44:2d:f8:96:eb:8c:d3:2f:fe:38:27:be:58:aa:30:65:7a:e1:
         32:af:da:77:8b:2a:ab:dd:de:ca:99:76:4b:e6:bb:41:8f:bd:
         01:ed:06:f4:b4:67:e2:dc:f1:28:bf:2e:dc:96:cc:59:fe:a7:
         c6:91:73:c4:3f:02:60:29:36:b2:3e:53:b9:52:b9:a7:bd:66:
         67:04:d0:a3:19:4d:33:f5:1b:58:2d:19:1a:f6:c2:3e:d2:02:
         aa:a5:f6:61:e0:c9:c9:5e:b9:90:5b:02:4e:82:e0:83:d8:78:
         db:5b:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:46 2026 by rpki-client