Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
File:                     zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json)
Hash identifier:          npoEru9SaVoi83zfAXcv0FTB11M8NFBDzn1wL0JfBMY=
Subject key identifier:   8B:B6:2D:F6:B2:6E:67:29:1B:10:AC:9F:35:9C:2B:20:82:19:63:3B
Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
Certificate issuer:       /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
Manifest number:          012D
Signing time:             Sun 01 Mar 2026 06:35:35 +0000
Manifest this update:     Sun 01 Mar 2026 06:35:34 +0000
Manifest next update:     Sun 08 Mar 2026 06:35:34 +0000
Files and hashes:         1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: teEOfFfE04iFj7ICYjL4oGk15BPhbzwVZ1vcOPQ1Jm8=)
                          2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: aOiSDYOcKoNPJK5dAvtJf70EvscXRCj0p7VI3j21/MI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
                          rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
        Validity
            Not Before: Mar  1 06:35:34 2026 GMT
            Not After : Mar  8 06:35:34 2026 GMT
        Subject: CN=69a3de37-e7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:d0:16:d1:5d:f4:f6:a8:52:5d:c3:a2:d0:
                    2c:91:43:97:df:f3:91:a6:b5:72:66:7d:fd:56:81:
                    8a:59:31:6e:ff:ba:39:21:e4:c6:29:e4:d4:39:ea:
                    22:a5:8b:b8:a4:19:91:97:5b:b2:8e:24:b7:e3:44:
                    3b:42:35:08:bf:af:a8:49:52:e4:0e:23:90:fc:04:
                    a1:a8:06:90:93:f7:b5:26:f9:87:e9:1f:c1:a0:99:
                    7a:8b:bb:ef:f5:06:6c:73:28:5a:2e:91:9f:a3:eb:
                    7d:a8:6e:ad:17:f6:4d:d3:8c:f8:e9:f6:c8:57:4f:
                    a7:d6:da:ab:10:44:2d:81:7c:a6:44:dd:50:2c:cf:
                    40:5c:dd:84:72:ff:bb:af:e8:ec:34:20:00:8c:ef:
                    d1:9e:95:3b:c7:94:45:6c:59:fc:6a:11:56:03:2f:
                    b5:59:47:c2:64:21:69:4a:56:52:f7:d1:2b:c4:64:
                    5f:18:26:3f:76:eb:11:a7:03:24:56:6c:b3:8e:b4:
                    75:bf:21:08:52:b8:6f:89:72:61:8c:69:01:fe:19:
                    96:1b:3f:43:88:e4:a2:89:04:f2:cd:bc:9d:a8:98:
                    62:fe:98:83:e4:bc:31:f8:88:c2:31:95:dd:af:db:
                    66:2d:c2:34:03:3d:73:4f:55:b6:94:cc:e2:2c:d7:
                    2d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B6:2D:F6:B2:6E:67:29:1B:10:AC:9F:35:9C:2B:20:82:19:63:3B
            X509v3 Authority Key Identifier:
                keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:fb:37:ee:f8:72:45:25:b0:15:06:b9:dc:66:6a:fa:44:c3:
         1f:e0:b0:0b:0b:20:22:c6:8b:a5:f2:01:9e:e9:6b:4a:1d:08:
         8f:40:e9:e2:8e:53:83:54:d6:a2:ed:bd:7b:b5:07:ad:82:b5:
         9f:79:74:5f:2f:9e:b3:ee:a4:a3:5f:e6:0e:81:c3:49:57:db:
         e1:ee:cc:04:cc:71:c3:74:ac:c8:3c:02:61:c2:d4:eb:4b:18:
         46:2e:65:81:66:57:96:79:9a:70:39:7f:a0:04:0a:b0:27:fb:
         0b:68:fd:79:26:8d:43:be:7d:d2:6a:aa:c7:f5:e9:a2:62:d4:
         18:90:b4:3e:cc:9e:58:cc:a1:73:59:ca:ed:11:15:1d:23:21:
         57:b5:c6:87:b3:ab:e5:42:77:1b:ed:5b:9e:7e:5b:04:1b:6b:
         0c:69:f9:fd:47:36:cd:25:68:d9:77:8c:ed:ac:52:53:04:e3:
         ff:f8:a6:74:57:39:e9:58:01:3e:b8:7a:83:e5:33:cd:d3:d4:
         9e:80:08:4c:56:82:7c:19:38:27:1e:16:f9:b0:c5:9e:ec:26:
         ef:d5:59:9a:8d:43:4b:a5:b0:2e:3b:61:ff:b0:66:45:01:6a:
         91:ed:c4:1b:d1:9f:30:a8:b1:c5:dd:41:ec:a5:ef:bb:89:27:
         fd:b3:c9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:51 2026 by rpki-client