Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
File:                     ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft (raw, json)
Hash identifier:          3nwwn8T01ZAkj4ItaFGuAOlNMoJT0ORR2JjtheyVFYg=
Subject key identifier:   E9:AB:8D:5B:75:33:D3:C4:9A:BD:EA:70:0E:1E:AC:D0:E7:6E:15:F2
Authority key identifier: 66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
Certificate issuer:       /CN=A918969C/serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
Manifest number:          66
Signing time:             Mon 02 Mar 2026 00:16:39 +0000
Manifest this update:     Mon 02 Mar 2026 00:16:38 +0000
Manifest next update:     Mon 09 Mar 2026 00:16:38 +0000
Files and hashes:         1: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl (hash: URg/yvOsTIdrlKJMhHh7LnV1GLA7/5IitOop3+5D/Ak=)
                          2: 16732F92826D11F0B439C27BC4F9AE02.roa (hash: /8I8Zl9zABqU4+Q0lEicmvA/CfmxVOpsQeYe0vDKQbg=)
                          3: 33B40FB8826D11F095A2E27BC4F9AE02.roa (hash: jrSaLDXaVnrCw36ElXQQUz6hClTnDoHk+UBFzoNoFW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
                          rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918969C, serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
        Validity
            Not Before: Mar  2 00:16:38 2026 GMT
            Not After : Mar  9 00:16:38 2026 GMT
        Subject: CN=69a4d6e7-17e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:40:0b:2d:4d:1b:f1:b5:e8:bb:92:c3:2d:42:
                    0e:06:5a:56:0e:e2:9b:52:2c:a6:63:3f:b3:65:ad:
                    21:e7:56:f4:62:60:a7:99:ce:1c:72:e6:34:a5:f1:
                    df:65:87:b3:04:26:5c:df:d9:a5:2f:fa:bb:47:fb:
                    b4:c6:ab:ac:48:44:f3:89:db:e9:e6:5b:95:a1:79:
                    69:05:38:da:75:c8:45:93:61:3c:75:72:5d:5a:08:
                    47:cb:9c:63:23:ac:67:e4:3d:32:e7:0d:52:a9:40:
                    6c:43:6d:d6:93:3b:ea:4b:c1:ea:9e:97:27:81:ac:
                    26:fe:bc:2d:bc:cf:2e:fc:99:f0:c2:86:36:27:e3:
                    13:14:26:2e:83:c8:5f:a6:eb:a3:6a:3e:dd:e3:ca:
                    cf:59:e3:29:bf:ed:44:52:c8:33:a2:56:a4:23:e6:
                    28:2c:09:3e:4d:97:34:f1:ec:50:84:8c:d6:09:76:
                    1f:a8:fe:1f:bb:e3:e1:bc:58:15:32:8f:b6:fb:bc:
                    5c:62:25:42:fc:37:b2:bb:28:6b:01:1b:ee:d8:31:
                    55:c8:03:69:69:05:d1:59:cf:90:0b:a4:00:c1:fb:
                    b7:d1:7a:68:78:1d:de:70:fd:b8:f2:04:5d:f1:32:
                    50:f4:52:06:31:08:dc:0f:9f:1f:9c:d7:ec:c7:9d:
                    61:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AB:8D:5B:75:33:D3:C4:9A:BD:EA:70:0E:1E:AC:D0:E7:6E:15:F2
            X509v3 Authority Key Identifier:
                keyid:66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a8:e5:90:bb:7d:52:4e:64:2c:fb:c4:73:af:62:5d:b9:87:
         f3:78:4a:70:3c:52:1e:ab:e5:f1:6b:d5:52:ac:8c:c0:a0:a9:
         e2:05:ba:07:1a:65:33:18:26:31:28:c4:fe:ec:ea:61:23:ab:
         ba:d4:ff:1f:0c:16:0a:ef:cf:71:0d:c5:8e:e4:0d:7d:b1:ad:
         46:34:42:2f:88:52:84:f0:4c:6f:0a:8f:43:f7:10:ef:7f:c7:
         9f:49:7f:01:f1:ee:77:a6:ab:29:a2:07:49:c3:45:44:1e:38:
         04:28:5f:56:f4:89:74:03:dd:da:dc:bd:02:b0:a8:8d:e3:d8:
         7a:2e:59:67:6b:6c:93:31:5d:27:c0:09:3f:1d:b6:1d:16:ba:
         99:fa:d6:c3:1e:50:e7:d3:df:c4:26:f6:2a:01:18:6b:43:09:
         b2:26:24:60:dc:b8:f9:96:75:fe:7c:10:be:46:cb:36:a8:7b:
         92:7c:f0:0e:8f:2a:16:44:6f:ee:45:fa:99:26:41:77:14:6a:
         9e:bd:e7:5a:5e:68:8c:12:23:ac:43:1e:be:bd:d4:23:16:23:
         7e:e8:37:e5:1f:4c:53:4f:6a:11:c1:24:40:de:26:25:f6:e6:
         93:ed:c4:f1:c4:7a:79:c9:d2:ae:d3:04:7d:28:d1:32:4d:84:
         ad:34:07:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:31 2026 by rpki-client