Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
File:                     ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json)
Hash identifier:          EH9prWByL9jsoHYkU7qlcNihQIVZfZUCnApBEUQj6dA=
Subject key identifier:   EB:8D:BD:8F:A8:F5:0A:24:3D:39:F8:DD:40:03:5A:F7:34:13:56:B9
Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
Certificate issuer:       /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
Manifest number:          01E5
Signing time:             Sun 01 Mar 2026 04:09:41 +0000
Manifest this update:     Sun 01 Mar 2026 04:09:40 +0000
Manifest next update:     Sun 08 Mar 2026 04:09:40 +0000
Files and hashes:         1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: TocVcAIIdrKeqTotv7Cgg6MTC4wp6Am74h9s0VJsicU=)
                          2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: 66Ye3g8pbsik4WW1k0ibPPsDZiWrMkqUxfu3Wa/LOVI=)
                          3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: SRP91sfnLKgHs2VY7WFFGrHVKBCFl0+7NYfhfkLyZBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
                          rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
        Validity
            Not Before: Mar  1 04:09:40 2026 GMT
            Not After : Mar  8 04:09:40 2026 GMT
        Subject: CN=69a3bc05-bfe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f6:34:db:8e:5e:44:14:3f:9b:0e:9b:82:26:
                    f1:ae:28:f9:ca:4a:30:d3:21:6b:84:18:59:f9:89:
                    59:a0:ed:94:0e:da:bb:69:61:e2:09:23:b1:27:88:
                    ee:03:3a:fe:0e:c0:f2:81:1b:04:68:83:a6:90:14:
                    af:27:0b:05:d4:7d:41:c3:0e:5c:91:98:7f:63:09:
                    ba:bd:2f:d5:74:0a:c4:5a:12:0a:e9:1c:39:51:4c:
                    49:74:06:07:a9:64:bc:5c:16:3b:6d:1b:27:a8:72:
                    69:02:ab:96:d5:f3:0b:3c:f1:4e:0b:35:d7:d0:6e:
                    ee:c8:19:d7:c5:23:0b:16:9e:74:2e:ad:10:20:00:
                    63:e8:4e:98:56:17:99:0d:e4:4d:88:c3:71:69:42:
                    21:79:08:c1:94:e8:a8:17:af:2b:4f:0b:58:1e:17:
                    17:a7:50:d9:6e:11:9b:5a:0b:70:59:12:af:d2:ca:
                    a1:f3:7d:88:6b:7e:be:b5:b8:74:fe:3c:43:fc:b6:
                    d7:0d:ca:de:db:b6:cd:d5:8e:76:47:3f:75:8a:4b:
                    68:4f:79:8e:fd:51:6e:ab:ee:66:55:10:7b:7d:23:
                    a3:8e:4c:fc:fc:09:79:aa:44:b0:ab:8e:0c:cd:73:
                    17:a4:70:44:08:69:2e:f0:af:02:c7:86:f4:71:87:
                    2c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8D:BD:8F:A8:F5:0A:24:3D:39:F8:DD:40:03:5A:F7:34:13:56:B9
            X509v3 Authority Key Identifier:
                keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:00:84:4f:0e:15:36:58:ec:49:19:f6:3b:4e:03:45:56:63:
         89:ab:e1:7e:82:63:b7:5d:b1:e3:c4:06:8e:b1:88:a8:0d:55:
         3a:f4:29:bf:fa:b6:c9:90:8d:07:54:45:f0:78:8b:02:a6:73:
         4f:1d:57:b3:6b:fc:59:40:3f:d7:47:72:8e:6a:9c:48:13:69:
         d5:d7:9d:62:5b:8e:ae:4b:4d:ad:b5:a0:53:cd:36:86:3e:eb:
         83:33:30:5d:a2:eb:db:71:cd:36:21:bc:8e:56:f5:7d:1d:8d:
         a6:40:b8:d8:41:60:da:b6:7e:1a:8a:d9:76:83:7b:09:27:d9:
         d2:fc:47:b2:23:e5:3d:45:00:9a:d2:22:5b:c0:42:8a:0a:0c:
         1f:ca:b0:26:81:cf:81:86:9a:a4:57:9a:22:1c:23:a1:22:7a:
         60:df:b2:33:83:e0:48:70:e4:c3:d2:fb:4a:87:95:14:62:6f:
         33:3e:88:76:13:a4:21:53:71:42:b9:ec:ea:96:81:7a:8e:ff:
         1c:f1:06:52:0f:f1:82:76:77:bb:d3:c8:a8:bc:c6:a3:58:a3:
         9d:51:c1:fa:41:7d:30:97:f9:f1:67:ce:10:38:87:3c:42:62:
         9a:fb:9e:69:12:93:62:e9:ca:5f:5c:34:72:f6:e2:06:7b:e0:
         82:63:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:29 2026 by rpki-client