Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
File:                     zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json)
Hash identifier:          pljMGVdEIm1JpdmxHmBpKjJ5i5wpQPtvpEbIVpzfCAI=
Subject key identifier:   C0:40:D7:D7:D9:B4:35:90:F9:1D:39:9F:EC:E3:18:7E:C0:19:54:B4
Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2
Certificate issuer:       /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2
Certificate serial:       0CCB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
Manifest number:          0CC1
Signing time:             Sat 28 Feb 2026 18:32:06 +0000
Manifest this update:     Sat 28 Feb 2026 18:32:06 +0000
Manifest next update:     Sat 07 Mar 2026 18:32:06 +0000
Files and hashes:         1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: QPWX+a0t7dvH6PkTqdJssnAGIhdQ6KOca5IV/SSmm+k=)
                          2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: tGg2gZvvqmK1MXVY5rUGUJI2gxizSYf5OdYwsS9Mmfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl
                          rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3275 (0xccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2
        Validity
            Not Before: Feb 28 18:32:06 2026 GMT
            Not After : Mar  7 18:32:06 2026 GMT
        Subject: CN=69a334a6-31bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:a1:94:47:61:71:b1:b0:c2:f2:e2:58:ad:
                    f7:3e:9d:27:37:d5:dc:bd:be:e6:1c:88:0e:65:12:
                    4c:15:07:af:61:87:ed:65:31:08:a3:e2:f5:15:fa:
                    53:f1:9a:16:d0:8d:eb:d8:6b:62:a6:09:91:9f:e6:
                    8d:f1:eb:4f:10:bc:27:e0:5e:49:cc:3a:de:80:18:
                    3a:12:5e:be:bf:65:99:e8:97:ba:bf:d5:8e:ad:d2:
                    8d:0d:bc:8a:22:da:0c:0f:fe:ff:e5:85:46:bb:4e:
                    13:b7:cf:79:a0:25:e7:66:49:03:49:0d:87:71:11:
                    25:9b:dc:20:9f:d4:ed:2b:50:61:06:6a:0d:9d:92:
                    f5:3c:ba:ad:a0:87:ba:66:76:a8:46:6a:20:25:7d:
                    5a:9b:c0:61:09:a1:65:bf:a4:37:95:91:47:d7:d9:
                    a0:a5:17:5e:c5:b5:cb:88:7c:4e:f1:ef:24:38:3b:
                    e7:e3:43:7e:0f:a4:e0:67:2a:b4:9c:fe:f7:d9:30:
                    ae:b6:3d:c9:27:4a:e2:58:cc:ad:01:98:a8:58:b6:
                    0c:02:04:64:17:8e:33:f2:2e:97:97:dd:16:a5:f7:
                    ee:fd:9d:d1:b0:11:8d:ff:2b:38:c4:bb:1f:29:15:
                    f5:fc:fd:17:11:75:d9:3c:ec:13:10:f0:01:fc:04:
                    26:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:40:D7:D7:D9:B4:35:90:F9:1D:39:9F:EC:E3:18:7E:C0:19:54:B4
            X509v3 Authority Key Identifier:
                keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:96:a1:1d:0d:c9:7a:c0:dd:c5:cc:af:49:c0:79:81:8e:37:
         fc:1d:89:30:aa:57:05:67:9e:c0:7d:d9:c1:aa:20:d3:f3:fe:
         85:8a:25:5b:80:66:d5:65:ea:a9:1d:cb:7b:eb:ff:e6:7d:2d:
         95:39:f5:db:39:50:21:83:12:72:49:87:84:4f:c9:e7:83:60:
         97:5c:b0:34:d0:ed:10:d2:98:d4:04:a7:d4:5b:2d:94:2f:b3:
         2b:45:7a:7a:8c:82:a9:2a:5c:a8:cc:8d:d9:1c:1d:42:e9:6f:
         51:2b:44:93:90:0c:f7:0b:d1:2e:55:5b:27:27:1f:1b:95:6c:
         b3:08:dd:06:53:b0:b1:c7:34:53:48:28:80:45:fe:e3:19:7e:
         09:57:18:4f:7d:ad:f5:6d:83:be:c5:c1:8f:a9:66:9d:98:12:
         a6:b6:dd:52:67:82:a4:a8:1c:30:c2:5d:58:c5:57:4a:fa:b0:
         3d:34:a2:77:68:b9:19:b2:ac:74:a9:d6:5f:13:c7:1b:b1:ad:
         5a:0d:be:8e:29:4d:43:32:ac:85:b1:00:e1:c0:87:30:e8:b0:
         5b:e8:5d:36:a4:bb:19:3b:57:db:3c:b0:ee:c2:5d:89:54:eb:
         32:a4:a6:8b:cd:37:f0:1f:3b:0d:fd:59:b0:73:74:6f:b1:89:
         ad:fa:f8:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy
MkRBRTQ1RjIwHhcNMjYwMjI4MTgzMjA2WhcNMjYwMzA3MTgzMjA2WjAYMRYwFAYD
VQQDDA02OWEzMzRhNi0zMWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuhehlEdhcbGwwvLiWK33Pp0nN9Xcvb7mHIgOZRJMFQevYYftZTEIo+L1FfpT
8ZoW0I3r2GtipgmRn+aN8etPELwn4F5JzDregBg6El6+v2WZ6Je6v9WOrdKNDbyK
ItoMD/7/5YVGu04Tt895oCXnZkkDSQ2HcRElm9wgn9TtK1BhBmoNnZL1PLqtoIe6
ZnaoRmogJX1am8BhCaFlv6Q3lZFH19mgpRdexbXLiHxO8e8kODvn40N+D6TgZyq0
nP732TCutj3JJ0riWMytAZioWLYMAgRkF44z8i6Xl90Wpffu/Z3RsBGN/ys4xLsf
KRX1/P0XEXXZPOwTEPAB/AQm3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBA19fZ
tDWQ+R05n+zjGH7AGVS0MB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5
MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDAyNi9CQzc0QzEwQTA5MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNr
ODhKaTkyRVhjZVVpMnVSZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN5ahHQ3JesDdxcyvScB5gY43/B2JMKpXBWeewH3Zwaog0/P+hYolW4Bm1WXq
qR3Le+v/5n0tlTn12zlQIYMSckmHhE/J54Ngl1ywNNDtENKY1ASn1FstlC+zK0V6
eoyCqSpcqMyN2RwdQulvUStEk5AM9wvRLlVbJycfG5VsswjdBlOwscc0U0gogEX+
4xl+CVcYT32t9W2DvsXBj6lmnZgSprbdUmeCpKgcMMJdWMVXSvqwPTSid2i5GbKs
dKnWXxPHG7GtWg2+jilNQzKshbEA4cCHMOiwW+hdNqS7GTtX2zyw7sJdiVTrMqSm
i8038B87Df1ZsHN0b7GJrfr4xw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:42 2026 by rpki-client