Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
File:                     _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json)
Hash identifier:          daawlIx2JseW9fk6NHAJGWfeA/fwfpgWT3RVmyfNBCI=
Subject key identifier:   2B:55:87:68:5F:7B:1D:7E:13:C9:C2:2F:3C:2F:DC:CD:E3:3C:40:20
Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
Certificate issuer:       /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Certificate serial:       3579
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
Manifest number:          3549
Signing time:             Sat 28 Feb 2026 14:29:05 +0000
Manifest this update:     Sat 28 Feb 2026 14:29:05 +0000
Manifest next update:     Sat 07 Mar 2026 14:29:05 +0000
Files and hashes:         1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: o/GQunT9hrqv90f5a4iOZWVYKQOgDVe/BgWl4fjIC2w=)
                          2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: CZL34a4C5G0DmjPgUV/R8LPE+CW74MjYbH1UBH/HsLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13689 (0x3579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
        Validity
            Not Before: Feb 28 14:29:05 2026 GMT
            Not After : Mar  7 14:29:05 2026 GMT
        Subject: CN=69a2fbb1-e4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:68:8a:91:c0:15:3e:01:9b:e1:a1:cc:da:0d:
                    c8:5d:1d:ea:91:f4:ad:e2:98:c4:3b:d6:0d:ec:5b:
                    9e:53:52:18:34:63:b4:5f:09:27:9f:89:1c:dd:58:
                    22:4e:22:4d:1b:19:8e:0b:d8:b6:2b:5d:b7:5a:06:
                    39:e2:cd:95:ab:53:dd:36:c8:f0:54:e3:63:d4:55:
                    1e:6f:2c:db:4b:40:66:39:0a:f8:4d:7f:11:49:03:
                    fa:3e:b4:20:d5:fc:c5:dc:f4:42:8a:9f:c2:18:28:
                    91:78:92:8e:a9:15:ba:32:e1:35:73:06:96:e5:75:
                    f4:71:19:86:18:19:22:04:1a:53:ba:46:22:8f:e3:
                    56:ac:fb:74:83:51:d8:54:4b:1a:97:29:06:8f:d6:
                    88:88:63:bb:11:3b:fa:cf:82:d9:2d:8d:28:94:6a:
                    86:e7:5e:b4:14:a4:33:90:1f:33:b8:86:01:1d:0f:
                    16:72:3f:1e:0e:df:df:c9:24:7e:e8:0e:70:e4:ff:
                    38:29:1b:9c:44:76:38:b1:61:68:1a:88:ff:a0:de:
                    11:b6:d3:2f:63:a2:5c:cd:1b:93:83:eb:6c:ab:84:
                    23:b0:45:94:2a:12:01:3c:92:53:d5:d6:df:62:ff:
                    28:b4:2e:3d:08:3d:5f:2e:c2:53:63:38:92:fd:32:
                    d9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:55:87:68:5F:7B:1D:7E:13:C9:C2:2F:3C:2F:DC:CD:E3:3C:40:20
            X509v3 Authority Key Identifier:
                keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d8:d2:c1:a6:3a:fa:b4:d5:8f:ad:87:ee:d7:32:65:a0:1f:
         4c:61:fc:74:32:0f:43:7e:3f:26:8a:6d:ec:12:f0:71:8e:08:
         81:66:34:f5:39:8f:b8:16:e5:f2:60:3a:56:f7:00:ef:31:68:
         91:7c:8f:1a:18:4c:f2:f3:f8:37:e5:0c:f1:80:ab:a2:a9:c3:
         0b:87:2e:d3:33:24:76:27:13:04:83:d5:7d:74:05:36:d5:e5:
         50:6a:69:76:89:2b:18:e8:e5:c8:1d:8f:74:ab:e1:8c:c6:06:
         ec:b7:dc:0f:b6:80:c4:f4:22:46:77:3e:37:03:33:bd:44:7b:
         38:71:bc:12:b2:67:5e:07:db:d3:69:12:47:17:af:7c:8e:b7:
         36:43:3d:38:c3:84:1c:91:91:c1:0d:d6:cc:f6:e5:b4:a6:78:
         a5:ec:dc:07:e5:e8:d4:e4:e6:f7:d7:a0:51:d8:3b:4c:52:cc:
         55:81:d0:bb:47:f7:d4:8b:3c:da:2c:ff:59:86:0e:3e:01:ac:
         ff:38:fb:94:8b:88:8c:db:7c:ce:ae:ef:f6:2a:35:a8:28:bd:
         db:e9:7f:4f:e9:4d:3c:56:5b:04:e6:75:9b:91:e4:fd:88:c8:
         fb:12:7c:d4:99:3e:9d:dd:d2:bf:2f:5e:20:da:d8:97:cf:2d:
         64:fa:7a:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZERDgxMTAvBgNVBAUTKEZEOUZENDU3NDU4MjE4ODM4Nzc2QzBEQzA4RUZCNjE1
NTIwMUUzNjgwHhcNMjYwMjI4MTQyOTA1WhcNMjYwMzA3MTQyOTA1WjAYMRYwFAYD
VQQDDA02OWEyZmJiMS1lNGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwGiKkcAVPgGb4aHM2g3IXR3qkfSt4pjEO9YN7FueU1IYNGO0Xwknn4kc3Vgi
TiJNGxmOC9i2K123WgY54s2Vq1PdNsjwVONj1FUebyzbS0BmOQr4TX8RSQP6PrQg
1fzF3PRCip/CGCiReJKOqRW6MuE1cwaW5XX0cRmGGBkiBBpTukYij+NWrPt0g1HY
VEsalykGj9aIiGO7ETv6z4LZLY0olGqG5160FKQzkB8zuIYBHQ8Wcj8eDt/fySR+
6A5w5P84KRucRHY4sWFoGoj/oN4RttMvY6JczRuTg+tsq4QjsEWUKhIBPJJT1dbf
Yv8otC49CD1fLsJTYziS/TLZ8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtVh2hf
ex1+E8nCLzwv3M3jPEAgMB8GA1UdIwQYMBaAFP2f1FdFghiDh3bA3AjvthVSAeNo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkREOC9GMDQ4NTI0MjFE
ODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJT0hkc0RjQ08tMkZWSUI0
MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19aX1VWMFdDR0lPSGRzRGNDTy0yRlZJQjQyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkREOC9GMDQ4NTI0MjFEODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJ
T0hkc0RjQ08tMkZWSUI0MmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbdjSwaY6+rTVj62H7tcyZaAfTGH8dDIPQ34/Jopt7BLwcY4IgWY09TmPuBbl
8mA6VvcA7zFokXyPGhhM8vP4N+UM8YCroqnDC4cu0zMkdicTBIPVfXQFNtXlUGpp
dokrGOjlyB2PdKvhjMYG7LfcD7aAxPQiRnc+NwMzvUR7OHG8ErJnXgfb02kSRxev
fI63NkM9OMOEHJGRwQ3WzPbltKZ4pezcB+Xo1OTm99egUdg7TFLMVYHQu0f31Is8
2iz/WYYOPgGs/zj7lIuIjNt8zq7v9io1qCi92+l/T+lNPFZbBOZ1m5Hk/YjI+xJ8
1Jk+nd3Svy9eINrYl88tZPp62g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:48 2026 by rpki-client