Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
File:                     zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json)
Hash identifier:          z3kCxRZQNLG3rGQrQ6ANxO5qXfi42SaQrKdX4h/opeI=
Subject key identifier:   41:3B:BB:CD:E3:90:04:8C:E3:AC:B3:24:DC:C1:C7:25:7E:AB:6C:10
Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15
Certificate issuer:       /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
Manifest number:          0159
Signing time:             Sun 01 Mar 2026 06:21:07 +0000
Manifest this update:     Sun 01 Mar 2026 06:21:06 +0000
Manifest next update:     Sun 08 Mar 2026 06:21:06 +0000
Files and hashes:         1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: xhxah0tH7vabwCXtft0S4Kspm+/9v4yEZCnKvSbLSXk=)
                          2: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15
        Validity
            Not Before: Mar  1 06:21:06 2026 GMT
            Not After : Mar  8 06:21:06 2026 GMT
        Subject: CN=69a3dad3-6793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:6b:bf:46:22:84:aa:e7:4e:3f:92:bf:2d:
                    d9:ba:c5:84:09:5c:73:3e:84:bf:e1:0b:ef:67:13:
                    eb:a7:b4:a5:8b:59:a7:d0:13:c2:89:27:48:f3:6c:
                    56:6b:8c:7c:86:a2:18:5f:da:b2:76:5b:ed:90:c0:
                    e1:70:60:87:96:ed:12:ab:2d:aa:84:01:0e:e7:0f:
                    97:73:67:2d:55:6e:b0:51:c3:bb:b0:52:0c:e2:36:
                    65:06:d5:a5:5e:d1:c4:66:53:db:1e:59:83:bc:62:
                    11:b0:bf:0e:88:07:d0:bf:4c:1e:0a:de:44:1a:aa:
                    96:82:c8:51:58:be:d5:b8:dd:24:68:74:6f:56:0c:
                    67:7b:62:9e:64:a3:92:11:56:55:ee:29:df:af:ed:
                    be:9b:ed:5a:3e:0d:fd:c6:1a:a4:e1:fe:8f:8e:08:
                    2a:22:25:18:fb:43:cd:91:55:f9:b1:c6:ac:12:74:
                    4f:55:89:f1:54:60:c5:75:c4:2e:02:6c:b5:9f:37:
                    44:a4:99:12:9c:e7:ea:bf:71:a4:01:a3:9c:b8:97:
                    07:18:0c:ba:10:28:8c:4d:d4:f7:54:67:7f:83:83:
                    14:d2:1f:b2:70:35:9f:e5:68:30:45:3b:a3:21:8b:
                    7e:39:45:20:5f:d6:a0:ea:d2:65:e9:d1:51:dc:de:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3B:BB:CD:E3:90:04:8C:E3:AC:B3:24:DC:C1:C7:25:7E:AB:6C:10
            X509v3 Authority Key Identifier:
                keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a9:aa:3d:8c:6b:e1:68:57:76:e1:48:5a:29:a0:82:8b:48:
         cf:cd:db:7b:43:ee:6d:1b:9f:8c:2b:41:a0:74:1f:4c:ee:f0:
         c6:f6:e2:b9:11:f7:85:e1:e1:f4:83:a9:47:8c:a1:b8:6c:b9:
         98:56:b9:ab:a8:9f:81:c9:1e:6c:1c:47:eb:e5:e2:9c:cf:6d:
         1a:c7:fe:b2:e6:f7:6d:40:6f:e7:db:d5:94:d1:b3:0f:21:46:
         2e:2b:1b:ca:70:29:3d:57:ce:51:ba:5c:a8:c7:44:43:02:f1:
         56:46:5a:56:d8:b9:34:d0:ad:e5:3b:0e:db:4b:52:e9:92:10:
         85:d6:08:8d:d3:46:78:18:2e:7c:73:12:f5:fc:38:a3:c3:ff:
         fb:83:95:5e:f4:64:51:23:9a:fd:92:77:a9:35:bf:1b:6e:66:
         46:f5:89:de:13:1e:35:dd:cb:34:54:6d:60:4b:db:dd:36:73:
         70:90:80:17:43:99:19:24:1f:e7:09:50:79:b8:90:28:24:6c:
         ec:c3:3d:2a:49:83:46:d8:b3:4a:50:c0:cd:4e:19:e7:f8:1d:
         f8:73:ae:09:01:f4:1f:cf:aa:9c:1d:03:10:ed:b4:80:3f:20:
         80:67:29:7f:ad:91:20:e5:9e:82:ba:6b:de:42:85:4b:5f:d5:
         a8:f4:91:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND
QUM1NjhEMTUwHhcNMjYwMzAxMDYyMTA2WhcNMjYwMzA4MDYyMTA2WjAYMRYwFAYD
VQQDEw02OWEzZGFkMy02NzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwu1rv0YihKrnTj+Svy3ZusWECVxzPoS/4QvvZxPrp7Sli1mn0BPCiSdI82xW
a4x8hqIYX9qydlvtkMDhcGCHlu0Sqy2qhAEO5w+Xc2ctVW6wUcO7sFIM4jZlBtWl
XtHEZlPbHlmDvGIRsL8OiAfQv0weCt5EGqqWgshRWL7VuN0kaHRvVgxne2KeZKOS
EVZV7infr+2+m+1aPg39xhqk4f6PjggqIiUY+0PNkVX5scasEnRPVYnxVGDFdcQu
Amy1nzdEpJkSnOfqv3GkAaOcuJcHGAy6ECiMTdT3VGd/g4MU0h+ycDWf5WgwRTuj
IYt+OUUgX9ag6tJl6dFR3N4fKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEE7u83j
kASM46yzJNzBxyV+q2wQMB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy
OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81
aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIKmqPYxr4WhXduFIWimggotIz83be0PubRufjCtBoHQfTO7wxvbiuRH3heHh
9IOpR4yhuGy5mFa5q6ifgckebBxH6+XinM9tGsf+sub3bUBv59vVlNGzDyFGLisb
ynApPVfOUbpcqMdEQwLxVkZaVti5NNCt5TsO20tS6ZIQhdYIjdNGeBgufHMS9fw4
o8P/+4OVXvRkUSOa/ZJ3qTW/G25mRvWJ3hMeNd3LNFRtYEvb3TZzcJCAF0OZGSQf
5wlQebiQKCRs7MM9KkmDRtizSlDAzU4Z5/gd+HOuCQH0H8+qnB0DEO20gD8ggGcp
f62RIOWegrpr3kKFS1/VqPSRGg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:56:29 2026 by rpki-client