Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
File:                     ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json)
Hash identifier:          viVZrf0f0POBvgCAxYJnS2IFguyE3Ve3mWyQ4jVpOvg=
Subject key identifier:   A2:84:5E:A8:61:15:97:85:E5:B1:87:19:B4:5A:7C:80:5F:63:A8:02
Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53
Certificate issuer:       /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
Manifest number:          0124
Signing time:             Sun 01 Mar 2026 06:57:04 +0000
Manifest this update:     Sun 01 Mar 2026 06:57:03 +0000
Manifest next update:     Sun 08 Mar 2026 06:57:03 +0000
Files and hashes:         1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: JbtBFbmmHLPgIMbDpiOZl8EXrL35kbvdDawkzHSiMdc=)
                          2: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: m3GeVlgQwLSASq7XBSa8f1Uvp0nte9cJZ6MnwsMfEFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl
                          rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553
        Validity
            Not Before: Mar  1 06:57:03 2026 GMT
            Not After : Mar  8 06:57:03 2026 GMT
        Subject: CN=69a3e33f-4e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:18:f0:dc:ac:40:da:4b:a8:9a:e6:9e:6a:
                    29:98:66:91:3d:ce:2b:5e:9a:7d:b2:ee:3d:c9:64:
                    f1:17:4e:2a:37:49:0d:56:59:17:15:d2:90:0c:33:
                    03:94:d8:0b:a8:89:cc:01:cf:54:64:78:09:6f:ed:
                    6f:3f:1c:dd:66:b7:ae:8a:f9:d7:6a:34:7e:cd:0f:
                    fd:02:f3:82:87:5c:62:80:4c:af:6c:31:3a:d5:81:
                    cb:f0:44:3e:05:6f:f9:9e:fd:43:96:b2:01:2d:a6:
                    1f:dc:e7:fb:7d:3a:ab:1a:e9:c3:40:10:f4:ce:c7:
                    5f:68:ce:77:0a:86:76:f2:fd:ee:6c:bc:2f:61:8d:
                    35:3e:23:27:4b:3b:3f:b2:59:d8:0f:89:7e:1a:b2:
                    f6:2d:01:71:70:11:cf:fd:5f:80:22:91:02:c4:0f:
                    72:30:7e:85:b4:c2:16:a7:00:ba:95:12:a3:6c:62:
                    3d:3f:a6:82:ef:ad:8a:ce:f4:c4:6a:0b:1f:29:6b:
                    bc:1a:9c:4a:e9:79:04:40:1b:12:6d:0a:90:36:57:
                    0d:e7:5e:20:77:53:e5:8a:bc:c7:42:28:94:0d:d1:
                    68:c3:df:65:88:2f:23:65:c9:a9:38:8c:20:ec:d5:
                    2e:52:3f:55:89:47:7f:89:87:41:47:ab:36:5c:80:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:84:5E:A8:61:15:97:85:E5:B1:87:19:B4:5A:7C:80:5F:63:A8:02
            X509v3 Authority Key Identifier:
                keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:d6:e6:31:a5:4b:60:98:c4:02:09:28:38:a7:54:ec:fb:18:
         ae:4f:eb:43:d5:cc:db:42:67:c5:f4:b7:7a:63:aa:13:bd:fb:
         91:60:02:df:9a:c6:55:1c:e2:19:48:ba:bd:c8:a0:e6:2b:a2:
         41:70:8d:e9:f4:0e:79:78:a1:91:2a:c2:1a:2c:da:2e:d9:98:
         0d:ff:1b:a1:c2:0a:a1:6b:db:b2:50:ff:c3:54:cd:47:dd:c3:
         6a:7f:e3:a7:3d:3c:39:b2:68:a7:ea:b8:31:8f:7a:fb:49:bb:
         9b:a3:76:29:32:58:49:b8:58:4f:1d:c8:96:cc:8c:4e:c1:1c:
         fe:84:e7:2f:da:ab:7f:72:23:40:cb:ba:85:db:22:c7:81:a1:
         a9:30:c7:04:2c:3f:c9:c9:62:f2:2f:38:14:28:57:73:f1:44:
         76:c3:06:7c:62:de:f9:c0:d0:19:73:9a:2d:c3:a5:03:1a:07:
         91:69:a9:11:cc:a0:4b:44:b9:ea:78:23:8a:d9:1c:01:fb:82:
         81:87:37:11:7f:00:55:fe:01:ab:7d:bd:d8:1f:59:8d:83:29:
         0a:bf:d9:ca:2d:1c:0b:fd:2f:c8:29:25:6a:d0:7d:d6:20:fe:
         18:d1:f5:a8:bd:16:a1:06:a1:ca:ec:36:e7:3d:83:c8:ee:cb:
         c7:07:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:21 2026 by rpki-client