Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft
File:                     ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft (raw, json)
Hash identifier:          EN569KEF8CYhBUIT+wRPc12xRRVqdXEAwuDkEgDXzGU=
Subject key identifier:   12:6C:13:99:2E:52:98:BF:D5:C5:D8:A5:34:0B:28:45:A1:78:E9:BB
Authority key identifier: 67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84
Certificate issuer:       /CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84
Certificate serial:       06CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft
Manifest number:          06C6
Signing time:             Sat 28 Feb 2026 22:46:59 +0000
Manifest this update:     Sat 28 Feb 2026 22:46:59 +0000
Manifest next update:     Sat 07 Mar 2026 22:46:59 +0000
Files and hashes:         1: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl (hash: S3P7SJ8psaQ+ao4cflWv5aGJy8jOFjuk0jBKwPryeAY=)
                          2: BA7F7BA892C211EBBBF0055FC4F9AE02.roa (hash: DxARsL+2J5rkvhwXm2iR36A3nQFpWBmz2UuZUXtaoP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7150, serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84
        Validity
            Not Before: Feb 28 22:46:59 2026 GMT
            Not After : Mar  7 22:46:59 2026 GMT
        Subject: CN=69a37063-f4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:3d:de:e8:0e:53:83:5a:d9:1a:ca:80:78:
                    b9:db:41:92:cb:08:fd:64:ad:df:01:ea:cb:ce:cc:
                    4d:47:ce:bb:86:90:d2:d9:55:13:d9:d6:d8:68:ff:
                    44:91:ec:3d:e6:b8:7f:5e:12:97:51:b6:49:ef:a5:
                    b7:5a:8c:91:75:df:c7:24:36:f2:6d:1d:ab:de:59:
                    d9:ec:49:8d:f3:bd:a3:77:ef:48:65:67:6a:d1:91:
                    cf:2d:c5:ff:5b:6f:8e:85:52:28:d4:bf:0e:20:e7:
                    b8:99:41:da:84:66:36:72:96:9a:88:85:16:a3:93:
                    a8:d0:99:65:80:a8:53:b2:23:06:c1:55:2f:df:43:
                    41:d6:c6:61:a8:13:9b:20:62:4d:78:70:4b:cb:65:
                    23:70:51:fc:25:ea:63:aa:96:c7:27:7b:17:31:fe:
                    1c:3f:26:52:fa:a3:65:0a:b8:94:9e:34:aa:25:f2:
                    52:50:f1:fd:2c:73:62:e3:f0:4b:b0:3f:02:8d:af:
                    0a:5f:2e:3c:7e:5f:43:33:a2:dc:94:6e:8b:a4:f8:
                    52:d3:79:1a:c3:b7:60:f3:5e:73:ef:ac:96:dd:f7:
                    47:84:91:4a:2e:41:03:da:d0:80:80:32:ae:a6:df:
                    be:34:1e:01:f5:77:a9:95:e9:8e:48:5b:78:55:57:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6C:13:99:2E:52:98:BF:D5:C5:D8:A5:34:0B:28:45:A1:78:E9:BB
            X509v3 Authority Key Identifier:
                keyid:67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:44:a4:9d:a5:19:40:cf:d6:10:f1:94:4b:87:d9:9d:55:15:
         9e:3b:7c:33:28:28:fa:f3:c4:02:7d:10:ac:20:df:8a:52:7c:
         d5:27:6c:84:6f:1a:31:6a:17:ce:6e:fe:73:08:17:95:f5:1d:
         f7:cd:d2:69:38:e2:67:b0:07:f0:ec:c9:ef:73:41:7b:6c:49:
         3b:17:be:3f:c7:4f:2e:27:22:39:82:87:eb:32:d7:93:d0:f9:
         95:5c:a0:ed:67:ea:d4:8b:43:00:1f:34:4b:f3:5f:7b:64:59:
         e5:d8:4e:3d:2b:7b:52:24:a3:5b:6a:7b:0a:64:73:56:16:49:
         79:6c:37:be:b9:9c:aa:5b:95:96:15:a0:ac:69:c8:61:0b:e2:
         ac:b7:2b:35:89:f5:35:b1:35:38:f6:53:a1:82:15:30:99:dc:
         d5:7d:2e:98:7d:a0:02:77:c3:5f:cb:6f:ff:71:37:68:7b:c3:
         d8:eb:5e:fc:85:28:93:63:b5:9d:8c:9c:d4:f8:88:8f:84:be:
         68:f4:7e:45:9e:cb:d5:5d:fd:21:d5:f5:e9:ce:1d:be:07:9e:
         6e:b5:3b:b4:74:6a:36:f9:a2:78:a6:b7:ea:6f:28:56:46:a3:
         ef:fc:e8:64:ce:7e:8c:90:0c:a7:4a:37:dc:9f:57:a0:a5:9a:
         ec:83:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:19 2026 by rpki-client