Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
File:                     ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json)
Hash identifier:          gtpJzYrjSJ1h94f73kiIJt+VtqHBvwd0IoehLOkyFhI=
Subject key identifier:   73:DF:3C:B8:1A:E5:91:68:DB:67:44:04:60:07:3A:A1:F8:B8:E2:51
Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
Certificate issuer:       /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Certificate serial:       0EC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
Manifest number:          0EB4
Signing time:             Sat 28 Feb 2026 17:48:29 +0000
Manifest this update:     Sat 28 Feb 2026 17:48:28 +0000
Manifest next update:     Sat 07 Mar 2026 17:48:28 +0000
Files and hashes:         1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: LgMrjUdB6n5pGvuzinE5uQ2rPrMRnVrl87LvD/tHIzc=)
                          2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: +kCLBh2YGSzCnhz2gSh1rvEq4IKXwlVr0gntvPGayP4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
                          rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3778 (0xec2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
        Validity
            Not Before: Feb 28 17:48:28 2026 GMT
            Not After : Mar  7 17:48:28 2026 GMT
        Subject: CN=69a32a6d-d5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:81:ec:e5:37:a7:fa:a1:37:1e:96:aa:66:66:
                    c5:c7:bb:77:6b:5f:db:cd:4c:06:ad:d1:15:5e:2b:
                    6b:93:73:68:c4:f4:05:dd:f5:ea:b3:cd:f3:15:f2:
                    cc:8f:ac:1e:07:e2:06:03:8e:f8:70:21:e5:5f:4a:
                    9b:6f:49:53:20:70:46:ee:05:7d:33:7a:13:65:08:
                    7f:29:12:57:50:57:41:68:e8:2b:f4:9a:d2:83:4c:
                    9f:6b:56:5c:ac:6d:49:7d:33:20:6d:ed:bc:6d:f1:
                    83:40:78:c3:51:62:45:2f:4f:62:2c:17:e3:a7:ee:
                    de:8b:5a:68:02:43:13:3f:ea:c5:44:8d:e1:bd:54:
                    07:ba:fb:14:b3:56:b2:75:e5:ac:f0:0f:7e:b0:3b:
                    cc:9b:98:db:84:ca:00:7d:45:31:72:be:e8:06:b4:
                    73:45:31:3c:db:dc:27:3f:ff:a1:97:2f:25:5a:fa:
                    aa:3b:ab:8c:b7:b5:03:c2:98:16:5e:3b:33:35:c9:
                    fe:91:f5:df:90:0b:1e:22:3e:b4:27:2f:f0:0a:91:
                    42:6c:75:a7:08:15:be:0c:77:f6:24:6c:69:a9:e8:
                    f5:5e:a3:39:7f:0d:9f:c6:d3:94:5a:4d:72:5f:f5:
                    d5:e9:e7:12:68:fe:58:99:89:3c:fb:eb:ca:b2:50:
                    98:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DF:3C:B8:1A:E5:91:68:DB:67:44:04:60:07:3A:A1:F8:B8:E2:51
            X509v3 Authority Key Identifier:
                keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:41:1c:8c:ff:ac:b8:16:7d:d5:e4:69:78:31:47:4a:d9:0e:
         b8:d5:91:1a:98:fa:93:a2:2d:4b:f5:fa:b4:e0:9d:d9:22:b4:
         c2:84:eb:7d:55:c2:98:20:57:6f:a4:f5:ad:a3:1e:5c:0c:4e:
         e9:f3:7c:ec:d2:8d:07:da:67:29:61:e8:9d:d7:23:64:f3:35:
         54:3b:70:8e:3e:42:ba:0a:f1:c8:50:13:bf:16:ee:76:88:15:
         d0:08:8e:f9:f9:5f:20:17:ef:96:38:14:1c:b2:b7:91:0b:5f:
         51:14:66:8d:22:f8:bf:a6:c8:2f:db:1e:b2:21:e1:58:22:6f:
         10:4e:4f:7d:7b:3c:4c:a5:7d:02:94:5a:b2:bd:73:98:92:c3:
         62:c3:d2:f5:d9:d0:0c:03:ad:b7:92:52:68:34:31:d6:17:8f:
         ba:a0:83:84:50:d4:db:db:2f:5d:94:31:7e:6a:7d:6b:8b:68:
         48:a3:8d:f0:2d:cc:3a:ae:1a:aa:ac:fd:51:dd:41:28:a4:ea:
         c1:09:40:cb:d5:50:d3:4e:58:f6:45:ae:3f:03:2b:94:cd:ba:
         9f:f6:66:45:e4:7e:8b:e0:37:45:ec:3e:8e:11:74:6d:a8:36:
         d6:07:14:0c:23:4c:86:e1:a3:d4:a6:ce:53:d7:3a:ad:d7:a7:
         13:56:6c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:07:17 2026 by rpki-client