Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
File:                     Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json)
Hash identifier:          eFYg2n9eo/m69NCjFvIkmbLUsEgzdreUeuwBMqbWkRw=
Subject key identifier:   64:97:6A:E3:CA:46:4F:FB:38:82:22:D6:C7:40:7A:B1:F5:26:F7:BC
Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
Certificate issuer:       /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Certificate serial:       09A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
Manifest number:          099F
Signing time:             Sat 28 Feb 2026 20:15:12 +0000
Manifest this update:     Sat 28 Feb 2026 20:15:12 +0000
Manifest next update:     Sat 07 Mar 2026 20:15:12 +0000
Files and hashes:         1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: QvNDCsVVm9fpoBHXvMW8nbVIfmr8G/eaq8rEqUBhCvE=)
                          2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: wrze88X7jsa3VSsX7Kz8XDU3MDHRHMz+vA0kvdHqRS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
                          rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2470 (0x9a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
        Validity
            Not Before: Feb 28 20:15:12 2026 GMT
            Not After : Mar  7 20:15:12 2026 GMT
        Subject: CN=69a34cd0-3b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:51:65:8c:f2:e9:b6:ef:c4:65:38:41:af:
                    9b:3c:d3:b5:34:5a:58:04:25:3b:59:76:5f:fc:33:
                    67:20:db:04:45:cb:f0:43:48:79:b8:b9:81:6a:ef:
                    bd:0d:e9:32:69:69:6c:d8:cc:62:c1:8a:fd:f2:aa:
                    c1:8f:d8:6a:c8:93:0c:c3:cf:a7:10:59:c2:ef:eb:
                    af:d2:2d:46:cb:22:2a:08:f5:a1:53:86:68:8c:c4:
                    04:fc:78:3e:92:f7:8d:02:e2:14:b3:15:66:49:c3:
                    8b:92:7a:6c:c9:73:bd:a0:04:f3:72:42:e9:df:74:
                    2e:72:4f:7a:35:a6:69:18:f7:8a:45:c7:b1:d4:2d:
                    0d:b5:c1:cd:1a:9b:37:fc:99:49:e2:ef:ae:02:4a:
                    cb:b0:5f:ba:23:11:f6:d9:90:0a:30:63:28:a5:cd:
                    87:1b:65:38:cd:90:0f:ee:ef:06:1a:86:b5:23:2d:
                    26:9e:5a:3a:cb:d4:89:36:75:83:23:5f:a4:bf:65:
                    af:81:1f:77:e9:da:78:b2:3e:d4:70:78:a7:4e:1c:
                    d8:ee:14:8c:f9:9a:7d:87:01:a4:23:c1:1e:2a:aa:
                    8c:30:d5:15:e6:48:0b:52:3b:c5:b8:cf:e8:c0:70:
                    79:83:3d:5c:03:f1:66:0a:0b:4d:cf:fe:a7:a8:46:
                    95:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:97:6A:E3:CA:46:4F:FB:38:82:22:D6:C7:40:7A:B1:F5:26:F7:BC
            X509v3 Authority Key Identifier:
                keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b3:d3:f8:e3:2a:ef:c6:eb:a4:0c:d2:40:72:65:77:15:a1:
         54:14:ad:10:8a:22:52:04:76:4d:05:fc:f8:48:fc:7a:40:29:
         f0:93:e1:44:0a:a7:d8:de:2b:e0:8d:f8:7a:ad:19:d1:85:66:
         de:d5:bd:12:f5:a9:12:5e:b0:7d:0e:9b:cd:25:b5:bc:b9:5d:
         a3:09:9d:28:ae:c6:7c:41:06:d1:2a:a0:95:c9:f1:14:ae:94:
         8b:80:d6:42:79:9e:0d:78:1d:31:b0:5e:9b:7a:88:68:40:f3:
         36:5f:94:1f:d2:33:8e:b8:bf:58:6f:23:68:a7:35:07:23:6a:
         13:24:fd:02:2b:09:b3:fe:11:f8:c9:a9:9e:c6:6d:b6:ce:23:
         d2:a9:36:89:10:0c:31:55:75:23:62:0c:a1:75:c2:fc:4a:ad:
         ed:41:ed:47:84:f5:d1:eb:d1:15:50:c8:00:02:de:0c:3f:7d:
         c4:ac:82:b9:92:0c:ff:2d:be:73:7c:f9:19:a4:c9:68:49:38:
         3e:3e:66:ea:38:55:c6:61:fb:e6:84:a2:08:43:74:3e:52:51:
         18:af:05:74:37:d1:50:2f:91:40:94:a9:15:38:92:d1:d2:43:
         b4:49:fd:be:5f:95:86:06:d8:b4:f9:fc:5c:24:44:ec:34:a7:
         44:63:b3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:53 2026 by rpki-client