Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
File:                     Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft (raw, json)
Hash identifier:          aOk7Py/7Ws91xvZ9d7GtyZf6uVU6KlU9P7R05FrDqR8=
Subject key identifier:   8C:60:93:4E:92:6D:A2:30:88:AA:5E:24:6D:A1:B9:0D:62:4F:38:61
Authority key identifier: 66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B
Certificate issuer:       /CN=A91B391F/serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
Manifest number:          012F
Signing time:             Sun 01 Mar 2026 06:31:57 +0000
Manifest this update:     Sun 01 Mar 2026 06:31:57 +0000
Manifest next update:     Sun 08 Mar 2026 06:31:57 +0000
Files and hashes:         1: Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl (hash: 5Hk9KlviVIcHpvBp5R+WhYGA3vAR00S38ITqaz/k35s=)
                          2: 5069A4E034B311F0B93A6228C4F9AE02.roa (hash: Ds5OYRTGE1+nmc/fXAPDPY24vX1TYbGT7zDa8IDd+kc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl
                          rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B391F, serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B
        Validity
            Not Before: Mar  1 06:31:57 2026 GMT
            Not After : Mar  8 06:31:57 2026 GMT
        Subject: CN=69a3dd5d-9054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:48:12:ff:46:80:61:8c:0c:1e:68:21:5e:95:
                    39:97:0a:1d:9b:f7:b7:91:d2:a8:ae:81:c8:76:e3:
                    9e:f0:14:72:ab:89:a1:f4:86:47:75:73:e0:af:27:
                    8a:26:bd:09:86:55:cd:9c:7b:51:8b:1b:c4:23:75:
                    e4:c4:2d:c4:f1:8f:26:d3:cd:6d:c2:0f:97:c9:66:
                    e7:87:45:06:8e:4e:c3:df:29:88:3f:a0:03:0a:31:
                    b9:13:0e:6c:3c:30:03:31:9e:10:e9:36:87:82:4b:
                    82:61:02:0b:31:73:48:71:2c:48:b3:2b:7f:0f:40:
                    f4:67:0c:87:5b:6b:fb:7a:6f:c5:ba:c9:d6:41:55:
                    31:91:a4:ee:01:5a:a9:98:6f:6b:58:29:db:78:d8:
                    a1:e6:c3:a1:84:4a:1a:c0:cd:03:1b:e9:24:68:1b:
                    b3:e8:e5:a4:fb:bd:e8:3c:8a:49:8e:d4:62:78:3d:
                    0f:ef:3b:19:32:7d:2d:92:99:c6:f7:d2:66:5c:11:
                    46:cd:41:c0:0a:8e:aa:d2:bb:04:bf:4b:f3:c4:74:
                    eb:1d:4d:51:46:4c:2a:61:34:2f:74:9b:07:94:13:
                    18:4c:3b:60:50:88:94:43:51:7e:ef:33:d1:b3:87:
                    5f:45:ca:d5:c2:52:96:03:19:da:0f:69:d3:fa:0c:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:60:93:4E:92:6D:A2:30:88:AA:5E:24:6D:A1:B9:0D:62:4F:38:61
            X509v3 Authority Key Identifier:
                keyid:66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:e1:a0:af:b6:26:a9:d5:3a:aa:55:1b:b1:1c:78:97:d7:5a:
         52:fd:bd:36:10:05:dc:06:73:65:2d:d6:f0:15:74:88:1d:f7:
         2e:67:02:a8:20:c7:17:2a:30:8c:93:2c:7a:4e:55:33:4d:e5:
         b0:3b:1f:99:da:8d:a6:98:f5:11:09:0a:63:dc:9d:b7:e8:06:
         1a:12:f1:e7:2d:2b:45:f2:c1:8d:de:e7:02:1e:fd:c4:6c:6b:
         a6:9f:14:93:52:db:55:45:71:c8:5d:73:1b:4f:ed:d7:1f:4c:
         bd:fc:a4:5f:68:9d:a6:f1:b2:c2:d2:cb:92:cf:9f:77:7b:9f:
         6d:48:8c:2f:30:59:9f:d4:9a:ad:72:5d:e2:2e:71:a1:05:5f:
         d5:39:bc:0e:9b:ec:0c:fc:7d:67:ed:4c:2f:cd:3e:02:cb:19:
         d3:10:60:c8:ce:7b:6a:02:e9:c9:42:fc:4d:13:33:39:97:a0:
         da:98:86:06:5b:64:2d:f9:50:be:5d:99:e4:68:93:3b:9e:7d:
         69:ed:96:7a:e1:72:05:d8:1f:76:8d:d5:22:71:9f:1b:ab:7f:
         14:a0:dd:a4:42:b4:97:9d:15:f5:2e:d4:4a:de:91:79:c4:2b:
         fe:f8:ba:12:d3:aa:55:e4:28:f7:90:7d:62:60:fd:73:e8:14:
         61:d6:ce:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:26 2026 by rpki-client