Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft
File:                     Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft (raw, json)
Hash identifier:          iGsJ0bseahIAb30EhPfUFlkpQzD6sTjClwmOTND9v+E=
Subject key identifier:   DE:8A:B6:1F:A5:60:07:AD:F9:C3:31:2F:11:F5:EC:18:78:EB:B9:48
Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA
Certificate issuer:       /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA
Certificate serial:       CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft
Manifest number:          C9
Signing time:             Sun 01 Mar 2026 08:02:11 +0000
Manifest this update:     Sun 01 Mar 2026 08:02:10 +0000
Manifest next update:     Sun 08 Mar 2026 08:02:10 +0000
Files and hashes:         1: Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl (hash: qAwYJeNAr5oBeYV+jIauxYFC7KKmSgJvA4uSgECbmjo=)
                          2: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (hash: HEKgeQjMhMYDkC2JrcKXdt5Voc5+W7Do5jSGbSkekDc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl
                          rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA
        Validity
            Not Before: Mar  1 08:02:10 2026 GMT
            Not After : Mar  8 08:02:10 2026 GMT
        Subject: CN=69a3f282-aff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:03:20:e8:cc:29:6f:c7:d3:3c:12:a0:8e:48:
                    a4:14:ac:27:76:ce:1b:9f:22:3a:58:9d:92:23:af:
                    ee:ca:e8:ec:a4:6a:82:e5:67:2d:ea:99:b7:c0:15:
                    4b:d3:be:7b:65:2a:f8:0f:9e:e3:af:d2:62:40:e4:
                    d1:66:7c:ac:c8:51:ce:02:20:4d:ae:3c:2f:26:ad:
                    d2:b8:f7:3c:df:50:10:ec:6f:30:f6:b9:29:d9:07:
                    e3:c6:af:59:47:0e:07:70:32:41:71:27:f6:03:51:
                    9e:c7:27:45:3b:a7:ea:1c:0e:e1:64:ff:ff:af:45:
                    c2:d2:10:f2:c1:28:35:d2:9e:a4:ea:59:02:0d:a0:
                    cf:15:11:ab:bd:b1:7e:b1:31:bb:fd:47:c2:1a:40:
                    b2:b0:2c:57:37:c9:3b:90:4e:ae:ed:64:39:4a:00:
                    58:d8:6c:0f:86:23:f1:97:d7:2e:8a:2a:cb:2e:5f:
                    af:b3:f4:7c:95:1f:fa:f5:bd:9b:de:4c:9a:c0:69:
                    aa:9f:8b:70:7f:17:49:0d:26:a8:39:40:c6:ff:2e:
                    26:13:90:58:85:ec:dd:4e:28:07:a9:9c:99:39:ae:
                    6e:ec:5a:83:34:3b:b1:aa:84:c6:a5:60:58:e8:35:
                    a1:42:fa:61:a5:2f:34:33:4f:2a:81:34:be:89:87:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8A:B6:1F:A5:60:07:AD:F9:C3:31:2F:11:F5:EC:18:78:EB:B9:48
            X509v3 Authority Key Identifier:
                keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:23:1e:e7:d1:35:c1:41:dc:9d:3a:18:09:51:51:bc:80:c4:
         59:8a:6a:f8:75:e2:6b:ff:06:85:10:f3:73:3f:80:80:bf:e1:
         59:c5:50:42:f0:53:54:08:d6:80:09:a6:c1:88:5b:da:dd:f4:
         62:54:c2:61:59:c1:5d:35:3f:b7:4d:f7:a9:7c:f1:a9:bc:3f:
         51:71:c0:62:d3:12:83:9b:bd:04:26:b9:38:77:3e:98:a7:86:
         a8:64:bf:30:39:42:a7:97:3d:cd:b4:71:dd:72:f4:a6:51:dd:
         0c:86:d7:4f:45:9d:71:5f:92:61:22:48:04:3b:2f:a5:7a:3b:
         d9:34:fa:47:58:fe:7e:f5:87:ef:1d:4a:11:62:38:97:28:ff:
         15:56:de:0f:51:6e:6e:0d:33:4e:81:13:06:af:a4:7f:16:2a:
         74:cb:f3:52:37:4e:c0:1a:f7:6f:0b:72:c1:81:a9:2c:ee:52:
         17:d4:b7:8a:f5:4e:78:b1:93:f5:3e:b7:41:d1:bc:8f:7c:20:
         6c:97:e4:87:5a:2d:1d:85:32:ad:e6:b2:69:77:6f:98:2b:15:
         6d:f5:2c:8a:eb:a5:46:7a:83:b5:70:eb:09:c9:80:f8:9e:8c:
         19:ee:dd:01:aa:d6:49:e7:9b:13:d1:1f:f9:23:d6:17:ea:b7:
         2a:5c:e6:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVDMzExMTAvBgNVBAUTKDY3RDc5QzNCMTExNkQzNkZCOUUxNzFENjY1OEY4RjQz
QjUzQzcyRkEwHhcNMjYwMzAxMDgwMjEwWhcNMjYwMzA4MDgwMjEwWjAYMRYwFAYD
VQQDEw02OWEzZjI4Mi1hZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtAMg6Mwpb8fTPBKgjkikFKwnds4bnyI6WJ2SI6/uyujspGqC5Wct6pm3wBVL
0757ZSr4D57jr9JiQOTRZnysyFHOAiBNrjwvJq3SuPc831AQ7G8w9rkp2Qfjxq9Z
Rw4HcDJBcSf2A1GexydFO6fqHA7hZP//r0XC0hDywSg10p6k6lkCDaDPFRGrvbF+
sTG7/UfCGkCysCxXN8k7kE6u7WQ5SgBY2GwPhiPxl9cuiirLLl+vs/R8lR/69b2b
3kyawGmqn4twfxdJDSaoOUDG/y4mE5BYhezdTigHqZyZOa5u7FqDNDuxqoTGpWBY
6DWhQvphpS80M08qgTS+iYfLVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6Kth+l
YAet+cMxLxH17Bh467lIMB8GA1UdIwQYMBaAFGfXnDsRFtNvueFx1mWPj0O1PHL6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUMzMS8zQ0Y1MzYyMkU0
QTQxMUVGQjI3NkYyNURDNEY5QUUwMi9aOWVjT3hFVzAyLTU0WEhXWlktUFE3VThj
dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1o5ZWNPeEVXMDItNTRYSFdaWS1QUTdVOGN2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RUMzMS8zQ0Y1MzYyMkU0QTQxMUVGQjI3NkYyNURDNEY5QUUwMi9aOWVjT3hFVzAy
LTU0WEhXWlktUFE3VThjdm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZyMe59E1wUHcnToYCVFRvIDEWYpq+HXia/8GhRDzcz+AgL/hWcVQQvBTVAjW
gAmmwYhb2t30YlTCYVnBXTU/t033qXzxqbw/UXHAYtMSg5u9BCa5OHc+mKeGqGS/
MDlCp5c9zbRx3XL0plHdDIbXT0WdcV+SYSJIBDsvpXo72TT6R1j+fvWH7x1KEWI4
lyj/FVbeD1Fubg0zToETBq+kfxYqdMvzUjdOwBr3bwtywYGpLO5SF9S3ivVOeLGT
9T63QdG8j3wgbJfkh1otHYUyreayaXdvmCsVbfUsiuulRnqDtXDrCcmA+J6MGe7d
AarWSeebE9Ef+SPWF+q3KlzmRg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:58 2026 by rpki-client