Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
File:                     0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json)
Hash identifier:          26Rj8Qhb6/TIzbNTJeZF6jVhqCYfFMk5yqq9wP+hY88=
Subject key identifier:   09:13:52:2E:E4:7C:E7:A6:13:4A:45:A9:31:7A:C9:F7:CA:21:11:25
Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24
Certificate issuer:       /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
Manifest number:          4C
Signing time:             Sun 01 Mar 2026 09:42:36 +0000
Manifest this update:     Sun 01 Mar 2026 09:42:35 +0000
Manifest next update:     Sun 08 Mar 2026 09:42:35 +0000
Files and hashes:         1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: Eccd/fKMMELwxRQ/6gK3bNZxDX4qaX6HmBLJ/cN7/Ss=)
                          2: 06ED25D2A7CF11F0927DA829C4F9AE02.roa (hash: x1p58QyGOEEZzvkP+F1o5eBxOfZdy5EZehyc+fW6wlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24
        Validity
            Not Before: Mar  1 09:42:35 2026 GMT
            Not After : Mar  8 09:42:35 2026 GMT
        Subject: CN=69a40a0b-c8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1c:41:74:c8:b7:86:ea:99:c8:06:65:a2:b3:
                    5f:db:1d:d9:11:97:67:01:8a:25:14:c4:6f:17:bf:
                    a2:ce:1f:ed:96:de:51:19:0b:42:a4:c8:e0:0f:d6:
                    5b:35:73:d1:3d:42:5b:88:e3:8e:c0:53:17:79:2c:
                    75:3e:b4:86:5c:e1:3f:05:9e:0a:3f:cc:ab:cf:12:
                    be:d6:50:67:d3:0f:ee:d5:3a:b1:fa:b0:ae:b5:f0:
                    27:4a:f8:95:17:0a:b3:87:b4:9c:95:ea:d8:ac:d8:
                    48:0a:36:76:45:49:cf:89:7b:93:b9:aa:b6:50:45:
                    b8:e9:44:ff:78:55:fa:18:70:bf:55:bb:00:76:14:
                    e8:e4:59:12:da:03:cf:48:0b:c2:da:47:ee:62:87:
                    1f:af:cb:ed:08:c3:d0:b0:79:0a:72:d3:2a:6a:d6:
                    d4:06:cd:53:56:fe:aa:8d:08:02:82:48:bc:d2:fd:
                    5a:5a:82:d3:d6:7e:ac:4b:ec:3a:8c:c1:d9:4f:65:
                    6c:cc:f6:a5:2c:30:90:00:a7:04:0d:6d:29:49:f9:
                    93:ae:e6:d4:15:f7:ec:fe:5f:4b:00:83:7e:17:1b:
                    0c:65:26:e7:74:b2:15:46:84:85:b4:e3:54:b1:b7:
                    4b:18:e8:56:2e:14:7e:d1:1a:1c:6e:0e:ca:53:16:
                    4f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:13:52:2E:E4:7C:E7:A6:13:4A:45:A9:31:7A:C9:F7:CA:21:11:25
            X509v3 Authority Key Identifier:
                keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:91:90:4f:8b:41:fc:19:5b:92:38:d5:25:9b:a2:99:a0:a6:
         5c:71:42:5e:85:d5:9d:77:c4:58:b9:fa:17:53:31:2c:e8:65:
         7a:11:c1:88:ba:c2:74:b9:f6:36:14:10:73:8a:63:8a:6f:e8:
         0f:b7:cd:41:9c:57:97:ac:e2:b4:a0:76:5d:ca:8d:0d:f1:00:
         d0:e7:86:f6:70:39:fe:23:f5:e4:8e:6e:5a:35:92:1f:21:a4:
         41:b5:11:e1:ae:5b:fe:62:b2:c4:de:95:7f:d1:24:39:8c:32:
         46:11:28:16:08:20:4d:18:46:ee:39:bc:e7:b4:19:12:a1:ee:
         b2:83:4b:c6:b5:dc:ed:24:2c:0f:0a:23:c5:fb:c0:5e:c5:90:
         85:46:ea:32:84:b9:d4:fc:f9:5d:49:1d:ae:a9:a4:a0:96:6f:
         ff:a5:62:92:19:29:ed:2d:b9:07:a5:85:e8:02:da:3f:10:21:
         9e:26:6d:e9:ba:ea:0f:2d:15:23:3b:62:cc:f4:08:2c:fd:a2:
         c8:cf:43:13:f6:5b:0d:66:dc:35:b7:6d:88:dd:fc:de:fe:0e:
         8d:6b:1e:9f:0d:0f:14:04:2b:15:15:4e:ff:dc:d9:8c:63:3a:
         6b:01:98:dc:d4:05:34:61:5e:97:a6:29:65:43:74:d7:81:75:
         fb:47:a2:9c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NDMwQjExMC8GA1UEBRMoRDE5QkI2OEUzQ0NEQzRCNzhDRTM2Rjg3Rjk0RTdGNzEw
NTEyM0EyNDAeFw0yNjAzMDEwOTQyMzVaFw0yNjAzMDgwOTQyMzVaMBgxFjAUBgNV
BAMTDTY5YTQwYTBiLWM4YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTHEF0yLeG6pnIBmWis1/bHdkRl2cBiiUUxG8Xv6LOH+2W3lEZC0KkyOAP1ls1
c9E9QluI447AUxd5LHU+tIZc4T8Fngo/zKvPEr7WUGfTD+7VOrH6sK618CdK+JUX
CrOHtJyV6tis2EgKNnZFSc+Je5O5qrZQRbjpRP94VfoYcL9VuwB2FOjkWRLaA89I
C8LaR+5ihx+vy+0Iw9CweQpy0ypq1tQGzVNW/qqNCAKCSLzS/VpagtPWfqxL7DqM
wdlPZWzM9qUsMJAApwQNbSlJ+ZOu5tQV9+z+X0sAg34XGwxlJud0shVGhIW041Sx
t0sY6FYuFH7RGhxuDspTFk/rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCRNSLuR8
56YTSkWpMXrJ98ohESUwHwYDVR0jBBgwFoAU0Zu2jjzNxLeM42+H+U5/cQUSOiQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MzBCLzgyMzZFMjYwQTdD
RTExRjA5Nzg5NDUyOEM0RjlBRTAyLzBadTJqanpOeExlTTQyLUgtVTVfY1FVU09p
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMFp1Mmpqek54TGVNNDItSC1VNV9jUVVTT2lRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0
MzBCLzgyMzZFMjYwQTdDRTExRjA5Nzg5NDUyOEM0RjlBRTAyLzBadTJqanpOeExl
TTQyLUgtVTVfY1FVU09pUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA1kZBPi0H8GVuSONUlm6KZoKZccUJehdWdd8RYufoXUzEs6GV6EcGIusJ0ufY2
FBBzimOKb+gPt81BnFeXrOK0oHZdyo0N8QDQ54b2cDn+I/Xkjm5aNZIfIaRBtRHh
rlv+YrLE3pV/0SQ5jDJGESgWCCBNGEbuObzntBkSoe6yg0vGtdztJCwPCiPF+8Be
xZCFRuoyhLnU/PldSR2uqaSglm//pWKSGSntLbkHpYXoAto/ECGeJm3puuoPLRUj
O2LM9Ags/aLIz0MT9lsNZtw1t22I3fze/g6Nax6fDQ8UBCsVFU7/3NmMYzprAZjc
1AU0YV6XpillQ3TXgXX7R6Kc
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:24 2026 by rpki-client