Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
File:                     Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json)
Hash identifier:          n9j00i+PukiOm4Mi4jyREeokwU+GziSJQbvmIuoBSGA=
Subject key identifier:   A8:10:E8:99:21:E2:BA:33:6C:24:F0:66:32:96:81:8B:2D:42:F3:E4
Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
Certificate issuer:       /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Certificate serial:       08F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
Manifest number:          08E5
Signing time:             Sun 01 Mar 2026 23:37:14 +0000
Manifest this update:     Sun 01 Mar 2026 23:37:12 +0000
Manifest next update:     Sun 08 Mar 2026 23:37:12 +0000
Files and hashes:         1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: hA83tfPPzAW/Lpw33SqLdjUsLKF+xGiUPLxJ3VZwjCg=)
                          2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: 2P5OTTpkzgPQNPnWpqe7PnEj5CbcnDOLb7qDMaxfHTE=)
                          3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: 8aOJR7dq5H1FSBWehu29UN5DlJmLrfgs2ryVPbFuTNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2295 (0x8f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
        Validity
            Not Before: Mar  1 23:37:12 2026 GMT
            Not After : Mar  8 23:37:12 2026 GMT
        Subject: CN=69a4cdaa-20ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:87:6c:39:03:7a:a1:53:2d:3e:a9:73:65:
                    b7:94:df:c6:9d:61:1d:79:96:fb:20:61:56:b8:52:
                    4e:98:b9:31:a6:c9:72:a0:74:ba:4b:b2:71:77:f6:
                    ce:d7:32:b2:76:5d:b5:ca:01:44:b6:22:05:5e:5a:
                    92:ca:6a:68:fb:86:d0:aa:12:76:25:b9:74:96:97:
                    25:06:b0:10:ad:44:eb:10:68:7b:13:9f:1c:31:6b:
                    8d:36:49:37:fc:51:4b:a4:6f:05:21:cb:f8:aa:04:
                    85:3c:3a:9c:08:ff:38:21:9f:42:c6:88:68:25:08:
                    96:c2:dd:42:5f:f9:78:d7:f8:9b:ae:47:95:4d:41:
                    a6:f2:60:63:29:4a:5b:44:3e:2a:8b:f4:50:8d:2a:
                    db:3f:b6:96:1e:ce:bf:16:e3:7f:ce:6e:f1:78:e6:
                    50:6b:57:33:a3:be:ac:17:1f:95:f3:b2:ca:27:cd:
                    1c:47:86:09:8c:9a:f2:3f:68:07:eb:f6:10:34:55:
                    9f:ed:ae:d6:6f:4a:ae:9f:85:81:5b:7e:11:18:07:
                    2d:e1:57:c3:ef:f3:40:9f:ed:79:32:b6:72:82:d4:
                    bb:61:fb:d6:83:c6:73:2e:74:0c:e5:46:ee:b8:cb:
                    48:0f:18:b4:be:f0:c0:85:b9:9b:8b:f3:5d:48:90:
                    85:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:10:E8:99:21:E2:BA:33:6C:24:F0:66:32:96:81:8B:2D:42:F3:E4
            X509v3 Authority Key Identifier:
                keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3f:2a:c0:8d:90:83:a2:82:af:ac:41:20:44:ec:e9:f1:9f:
         96:06:db:02:88:9a:e1:0d:80:07:e0:34:ec:5e:3f:63:1f:44:
         fb:cc:99:31:78:4c:34:89:d6:7d:89:c7:38:ac:a7:96:e7:37:
         d0:20:5e:c4:8d:be:07:ad:59:83:0b:fc:77:71:f3:f2:32:a4:
         f0:b9:5d:6b:1c:2f:ac:75:05:4c:d2:1e:23:dc:5e:55:fe:21:
         06:42:94:0c:e3:bf:c0:1b:ae:f3:2b:d8:17:93:cc:25:6d:05:
         5a:8f:c1:d1:c9:76:dc:15:ae:fa:6e:52:88:e5:d8:93:4f:c5:
         ad:1a:a2:a7:f7:e4:4f:21:27:d5:7c:a7:a6:54:b6:69:9b:d6:
         95:5a:46:eb:12:07:90:bc:32:9a:59:84:b7:35:bf:19:1b:9f:
         51:a2:9f:74:76:c2:23:90:3a:45:19:7f:ea:30:c2:66:4d:79:
         51:9f:e9:03:a5:18:fc:be:3a:95:d9:60:8d:69:c8:17:de:2d:
         7a:2d:e1:b8:d5:d0:49:3d:79:31:9a:c0:18:cd:fb:fc:04:d6:
         ec:f9:55:dd:3e:06:8f:72:98:fa:d8:f4:ff:37:7e:63:c6:91:
         fb:c2:02:09:ab:2b:50:1d:4b:9f:ff:ef:6c:f0:eb:86:29:ce:
         3d:80:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:25 2026 by rpki-client