Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
File:                     zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft (raw, json)
Hash identifier:          YmGNXo/YEkK1+9UKlq9E+FK5wwiM+9fI3/CtWERwiQ8=
Subject key identifier:   89:B7:46:3D:D1:97:84:1D:43:5C:06:5E:22:6A:53:62:A9:78:42:29
Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
Certificate issuer:       /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
Manifest number:          016B
Signing time:             Sun 01 Mar 2026 06:02:23 +0000
Manifest this update:     Sun 01 Mar 2026 06:02:23 +0000
Manifest next update:     Sun 08 Mar 2026 06:02:23 +0000
Files and hashes:         1: zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl (hash: THUybA616KsfL4JgDL5Tv0SRT8G6lns3CHWw6cWD6Ak=)
                          2: F6BB410AA34E11F0B508F67EC4F9AE02.roa (hash: 8K1O69m1bstFL8LZIqUFWVOg/nAR4GoraVpfB2EqwyY=)
                          3: 51030EF09B9C11F09447A92BC4F9AE02.roa (hash: S3cyIXZVoOkRNLShFeU9F6eot2kvd0U8U4Swy25JVmk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl
                          rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
        Validity
            Not Before: Mar  1 06:02:23 2026 GMT
            Not After : Mar  8 06:02:23 2026 GMT
        Subject: CN=69a3d66f-176a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cd:99:c8:91:fe:a9:73:57:9a:8e:79:54:b9:
                    41:a3:1b:ed:61:3e:c3:d5:6b:a5:9b:96:d3:55:2c:
                    8d:35:94:50:f0:e3:9e:db:f3:01:88:06:ec:34:5f:
                    9d:2b:01:fe:f4:2d:2a:02:c6:d5:de:b5:1d:e8:81:
                    c2:a6:5f:ce:e9:f4:7b:c9:2e:63:33:91:d4:db:6a:
                    42:23:b7:80:0d:65:8f:85:ff:e3:ae:b1:66:f6:0f:
                    68:fc:2f:19:99:72:c8:ce:10:dc:3a:f5:ed:16:36:
                    88:78:d8:4a:41:4a:77:11:7f:ba:a3:db:5b:b5:12:
                    e8:23:d1:28:e7:7b:64:65:2a:8e:f5:60:93:6f:23:
                    4b:7b:f1:2e:cb:1e:3a:56:eb:2a:ee:28:8e:9e:66:
                    be:23:62:bb:df:9f:47:7e:c0:b8:fc:f3:00:ff:36:
                    99:98:4f:52:64:5d:2a:14:9d:dd:75:9f:c6:83:81:
                    c9:ab:2e:06:eb:33:44:ef:fd:1e:e0:f4:2b:ca:6e:
                    c2:f8:90:d4:67:3b:1b:c1:f0:8a:66:65:d4:7b:e4:
                    7a:da:b3:d6:cf:6e:89:c7:2d:db:cd:30:05:64:df:
                    40:10:5a:b4:9a:0a:a6:f3:44:99:bf:35:7f:05:f2:
                    ac:6f:e6:6d:6d:6e:24:7f:5e:31:96:46:eb:0b:60:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B7:46:3D:D1:97:84:1D:43:5C:06:5E:22:6A:53:62:A9:78:42:29
            X509v3 Authority Key Identifier:
                keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:04:cf:22:a2:a1:fa:2f:65:fb:88:16:09:44:52:92:91:a3:
         d8:f0:c1:2e:4b:a7:38:92:0c:65:3b:cd:e3:e0:a8:d0:0f:f1:
         fa:8c:89:6d:a5:39:36:18:15:41:70:10:7c:53:17:92:b0:1b:
         85:10:9b:a8:24:85:3a:24:4f:00:02:a8:af:9c:5e:80:9a:cc:
         d0:f4:a9:16:9e:cf:a1:7d:6d:66:65:78:5b:3d:a8:1f:7f:9f:
         86:c0:8f:7c:cb:07:e4:21:6d:74:48:82:f0:27:5f:b6:bf:9f:
         73:a5:93:60:52:6e:48:38:8f:e3:5d:a8:0d:13:8f:24:54:d8:
         bd:c2:f4:05:01:9e:54:2e:f5:84:2d:9e:6c:fb:b6:e1:36:8e:
         53:e1:6d:2e:ab:f4:03:c3:31:19:05:5b:ef:30:bd:b3:d3:99:
         3a:14:a4:fb:4d:3c:81:83:19:79:2b:46:47:3b:bf:fc:aa:19:
         3e:85:33:71:28:f8:9a:0a:68:94:d5:2b:45:3d:bb:38:1e:18:
         6b:f6:5f:3c:ca:2b:f5:98:98:c2:e9:f6:a2:61:38:a1:d4:19:
         ea:63:a4:96:ee:c2:f3:84:70:fa:fb:f6:3e:1c:ad:d8:27:77:
         6f:f9:9b:55:8e:1c:81:7f:55:85:a2:6d:c7:7a:fb:2e:d9:4e:
         84:f0:13:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:34 2026 by rpki-client