Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
File:                     Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json)
Hash identifier:          3FuvyPq9hoqHvVBH7xII5aL58KsQq06hotPrGLeBWso=
Subject key identifier:   63:8D:35:2B:04:F1:BD:CD:1F:65:51:8A:F4:04:5D:30:92:02:1D:67
Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
Certificate issuer:       /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Certificate serial:       1882
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
Manifest number:          1869
Signing time:             Mon 02 Mar 2026 01:07:52 +0000
Manifest this update:     Mon 02 Mar 2026 01:07:51 +0000
Manifest next update:     Mon 09 Mar 2026 01:07:51 +0000
Files and hashes:         1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: GPcNNdCx6pXNimvwYeyFMNHdppgzYQX3TuH19ImXzPo=)
                          2: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: ZFGFBfx4/7JIn5J81VyjxgzCJGuEFQLjcxwfK1UOBRQ=)
                          3: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: rdOZCJ3dicwt2ZQgE2QnLuQhDeAJoxWmp9bzW22pmwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6274 (0x1882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
        Validity
            Not Before: Mar  2 01:07:51 2026 GMT
            Not After : Mar  9 01:07:51 2026 GMT
        Subject: CN=69a4e2e8-4a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:71:8d:4d:e3:26:75:d8:6d:2a:e4:19:9f:38:
                    c5:b5:5c:63:97:03:ba:21:11:61:a9:27:a1:f2:23:
                    7a:6a:a1:29:30:d7:72:ef:53:42:bd:3d:9b:66:1c:
                    c6:a5:7d:27:79:3d:3f:0a:35:66:1b:df:39:0d:4f:
                    04:f2:d7:9f:f0:08:bf:5f:60:3e:dd:87:ca:4d:d1:
                    91:f5:6a:a3:d3:2a:a3:cf:95:a2:27:b9:18:bf:3b:
                    6e:7e:e0:b7:74:2e:8f:db:3a:4a:ba:59:37:c8:ae:
                    97:6b:db:d8:58:45:a7:c4:44:bb:67:fe:63:fc:64:
                    53:46:d0:7b:fe:6a:4f:6d:d3:e0:ba:2f:28:cd:8a:
                    65:a2:03:47:88:93:77:36:34:d5:8a:28:ec:c0:c8:
                    1d:2e:59:fb:66:b1:4c:01:1c:b3:99:55:67:09:7b:
                    4b:12:9e:60:7e:5d:c0:99:9f:eb:06:2e:7d:74:fb:
                    d9:ec:f2:68:9e:79:4f:e2:93:cd:b6:09:5e:28:c0:
                    3a:4c:d5:5b:fa:1b:db:b2:0b:ef:69:5c:76:9e:82:
                    fe:03:02:41:ca:36:98:52:96:fa:87:9b:19:b4:5e:
                    65:83:68:c0:74:fc:3a:8e:0a:34:0a:66:ca:e2:50:
                    85:de:34:fb:70:25:39:ac:f2:0f:97:db:18:21:ad:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8D:35:2B:04:F1:BD:CD:1F:65:51:8A:F4:04:5D:30:92:02:1D:67
            X509v3 Authority Key Identifier:
                keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:2c:9d:11:f5:f7:01:04:6b:31:7a:26:76:4c:9a:7b:89:3f:
         a2:ac:0e:a4:a4:16:ec:4f:9b:b3:ed:e3:47:02:37:9a:61:af:
         e9:88:5b:06:81:e0:5c:3d:6a:56:52:3c:48:2c:48:79:ed:f5:
         ac:26:39:d7:c8:f3:71:f5:11:06:37:8a:86:8f:a4:6c:b4:a9:
         b8:ac:b0:d2:19:d6:97:1c:59:57:85:ec:b0:0d:99:3c:e7:de:
         63:f4:63:c0:34:46:df:11:d6:be:8e:00:c2:1f:fb:ac:d1:7c:
         42:d1:29:70:a9:ed:d3:27:da:c1:89:43:82:8f:21:1f:eb:c4:
         4d:31:6d:1c:8d:f8:71:0e:ce:40:e6:af:88:43:3c:17:66:47:
         35:a8:e2:59:da:c3:ef:e5:57:71:cd:47:a4:51:53:3e:30:6d:
         b7:95:c7:1f:77:9c:fb:de:ce:2e:ab:12:fb:77:6e:04:95:29:
         41:2c:c9:3b:c6:82:4d:2f:1e:3a:bf:af:fa:21:45:d3:45:fe:
         80:f6:63:0c:b1:31:da:6b:fc:93:3f:88:e1:3d:fa:2c:00:3c:
         fb:0a:a4:ae:71:ed:bc:1e:01:2a:14:33:46:55:ac:02:77:24:
         d2:f6:88:ff:e0:37:e5:37:a3:c7:da:86:1e:c9:e4:a0:53:b2:
         13:ee:a6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:21 2026 by rpki-client