Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
File:                     Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft (raw, json)
Hash identifier:          MWhA00xFfgVrRAPavvHwAE58ruEaiJQ9xecnipw07aQ=
Subject key identifier:   5B:7A:9D:D2:68:5F:8F:74:9A:17:8F:2C:86:00:31:94:73:00:85:1A
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Certificate issuer:       /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial:       056A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
Manifest number:          054A
Signing time:             Sun 01 Mar 2026 00:09:54 +0000
Manifest this update:     Sun 01 Mar 2026 00:09:54 +0000
Manifest next update:     Sun 08 Mar 2026 00:09:54 +0000
Files and hashes:         1: Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl (hash: C9Epwume21/OQPV/3ttzutGEY+2eJOzxBUe9hTkybrA=)
                          2: 2C1F43848B5C11EFBFDAC30DC4F9AE02.roa (hash: DeSAr7b3drYLpPzVa3yNwZ6oHkmQip7V+knP+UM+PB8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A7F, serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
        Validity
            Not Before: Mar  1 00:09:54 2026 GMT
            Not After : Mar  8 00:09:54 2026 GMT
        Subject: CN=69a383d2-17c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:21:00:a3:49:d4:10:4d:09:60:07:f7:72:be:
                    6f:97:8e:6d:c9:cd:bb:c5:5d:9b:42:ac:d8:96:10:
                    9a:1b:9f:a3:2f:82:17:61:39:b0:c2:9f:d8:83:b5:
                    4b:25:c3:12:da:57:7f:fc:3c:6c:b4:19:51:ce:24:
                    d6:1e:71:94:00:b3:c3:84:7f:94:fb:43:cf:02:9b:
                    b9:be:bd:a5:7f:35:45:92:b9:6e:20:6c:fa:d6:16:
                    11:c9:e0:1b:54:c2:4b:4f:8d:3c:c3:16:7e:3d:82:
                    1c:4c:20:33:30:f3:f4:ca:41:6c:99:65:56:d0:5e:
                    bf:02:25:a1:cc:37:c1:57:da:97:c3:4e:84:7f:71:
                    d5:82:28:d8:a6:01:33:47:ac:79:59:1a:be:6a:a8:
                    e2:54:64:28:c5:03:01:67:d5:f6:13:5e:40:da:c7:
                    85:11:0b:9b:a8:e1:04:ed:69:6e:1d:a6:64:50:55:
                    f8:42:91:25:90:67:ed:cb:87:c4:e5:50:de:d7:66:
                    dc:82:24:32:0e:c3:a0:42:05:d4:e1:84:07:92:6c:
                    e2:e7:b8:64:d7:8d:37:66:14:45:ca:51:7c:40:7d:
                    51:1b:b6:63:80:f5:41:ae:d6:11:39:71:68:41:01:
                    f0:37:bc:6a:7c:1c:8c:14:1b:6e:a6:63:b6:4c:cc:
                    5c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7A:9D:D2:68:5F:8F:74:9A:17:8F:2C:86:00:31:94:73:00:85:1A
            X509v3 Authority Key Identifier:
                keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:43:64:6b:36:47:17:36:09:65:02:4b:70:e3:a9:41:cf:4d:
         85:3c:a5:71:e1:3c:a8:0b:78:91:79:d7:db:a0:b6:70:30:47:
         1f:f2:75:b9:df:38:14:42:c2:46:e8:65:c0:05:aa:89:09:8f:
         da:36:3e:52:37:97:85:db:50:69:0e:96:ae:41:ea:6b:05:58:
         38:79:5b:8d:ee:5a:9c:2d:31:47:f7:81:df:69:9a:c8:3a:72:
         66:66:10:e3:25:dc:3e:f1:75:6e:01:7f:65:01:cc:4c:8a:38:
         3d:ab:25:be:e4:14:8b:44:5b:1a:d5:34:f9:36:71:59:7d:dc:
         ed:8e:ca:25:1f:f0:66:6b:ad:10:2b:05:dd:69:d9:e4:87:ff:
         62:19:7e:dc:1f:d8:e0:a3:3c:7a:be:16:ff:27:bb:6d:8f:e7:
         8b:ee:44:26:bb:3b:15:29:95:62:38:ae:60:f4:1f:57:db:72:
         ff:60:01:14:d3:d7:af:ff:9e:27:05:13:97:c3:a3:10:89:f2:
         03:c9:31:d8:d9:52:cf:32:86:c9:d3:fd:2f:0f:7f:7b:ac:6a:
         b0:bb:da:4d:be:0e:13:5b:74:07:83:8a:21:67:ed:ec:26:66:
         ee:ba:f0:57:74:ff:0a:92:fb:1e:d8:2d:3f:8d:94:1f:90:e3:
         df:16:36:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:59 2026 by rpki-client