Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
File:                     cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json)
Hash identifier:          4SphiUJePE9KOB2ml1i/Da/kLq5O0tT7np2U2Wo4eKM=
Subject key identifier:   84:E2:A0:6D:23:00:8F:33:68:21:F8:BC:4A:5F:7C:A8:0A:1D:C2:2A
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Certificate issuer:       /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial:       05C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
Manifest number:          0593
Signing time:             Sat 28 Feb 2026 23:57:38 +0000
Manifest this update:     Sat 28 Feb 2026 23:57:38 +0000
Manifest next update:     Sat 07 Mar 2026 23:57:38 +0000
Files and hashes:         1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: 4woCFt7YZSDLzgHWumWX0Ar6HHTlGVQKn6WE2aWoXsM=)
                          2: 2A490316D97011F0A9AB95F59AD3641D.roa (hash: DMj/7tmpQ/nmbhEkwyw/tp+gJpMzZLhg72S9/+TVe10=)
                          3: F93DE378B66911F09D7E8031C4F9AE02.roa (hash: /hP6RI7E6dXuopaTBp1V0bPHajqNWLoEHVZxzKBu1UQ=)
                          4: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: 7pgWej23b80g6BAye7XK6ZW+PkmS+EkTXRGsbDwGPHI=)
                          5: E2256F74D97011F0A26925FA9AD3641D.roa (hash: diBgUHCuWxCsrUKo2z8nkKuYx+/V0PX1Z2jBaelCkhc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1473 (0x5c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
        Validity
            Not Before: Feb 28 23:57:38 2026 GMT
            Not After : Mar  7 23:57:38 2026 GMT
        Subject: CN=69a380f2-381e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:b0:c3:c4:36:6b:0d:63:a8:a1:63:3b:bc:
                    2d:65:e4:9b:4d:11:42:99:b2:af:0a:25:5d:f2:13:
                    22:9b:c4:82:07:d7:00:42:f0:86:bb:ed:61:a2:4d:
                    c9:0a:91:f7:d6:ce:00:2c:fb:12:d9:32:c0:99:05:
                    3c:62:4d:59:f8:89:9f:27:0b:48:2a:be:52:98:7f:
                    f1:7b:98:13:aa:9b:1d:de:aa:3b:1a:23:f1:7b:aa:
                    5c:b8:1f:e7:e0:7d:9b:4d:e5:20:c0:b5:2b:5f:69:
                    ab:41:f4:35:19:42:d0:1a:8d:ce:64:9a:37:e0:15:
                    d6:14:eb:16:53:21:51:29:76:22:94:3c:6e:73:c5:
                    4b:0d:88:f8:0a:d9:a6:19:55:04:f2:23:8b:7e:b4:
                    32:9d:4a:68:76:1c:c2:c6:f7:2a:ee:53:c0:cf:ec:
                    0a:52:d5:3c:c2:59:ed:75:5d:24:2c:96:93:0d:40:
                    78:08:97:69:0e:8f:da:5b:9a:43:c9:19:08:ba:e1:
                    dd:49:a1:13:14:f7:16:06:8e:cb:91:cc:ff:fd:9b:
                    ce:d0:ce:fa:a3:d6:21:5b:93:6e:e2:87:47:d6:2f:
                    1f:21:87:d0:04:aa:50:a3:79:2e:d2:19:2a:e0:ca:
                    40:17:98:07:b7:13:97:6b:47:3e:93:d1:17:ca:43:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E2:A0:6D:23:00:8F:33:68:21:F8:BC:4A:5F:7C:A8:0A:1D:C2:2A
            X509v3 Authority Key Identifier:
                keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f3:d3:fd:7e:a5:2d:b7:bc:df:96:e6:f6:9e:ed:1c:c1:62:
         91:e2:bf:18:03:7a:d0:52:3e:12:d5:53:37:c9:d4:44:79:c6:
         2c:e7:33:3f:4c:5c:00:2d:08:d5:b5:3f:74:64:4c:f6:24:60:
         d9:94:ff:87:a9:cd:bf:7c:56:e6:d3:31:35:59:0f:6f:f0:32:
         81:2c:d7:40:d2:fe:6e:49:26:6e:be:f6:20:70:c1:58:64:94:
         8e:f3:ac:47:51:3d:8c:28:8d:52:62:b7:37:38:fa:b4:2c:8e:
         5d:a4:ed:76:ec:3f:bf:7a:2b:4c:cc:7e:06:52:e4:e0:51:1b:
         b5:fe:f7:79:e7:0b:68:e4:8e:73:77:14:83:3d:8c:6f:04:11:
         26:73:3c:23:71:5e:89:36:19:c5:1c:12:38:6b:f4:ae:f3:60:
         d5:c8:14:a3:26:7b:aa:6d:97:14:23:80:78:04:47:0e:0c:6b:
         f4:9d:1e:c5:aa:8c:b4:91:f3:6a:ac:a8:e2:23:aa:33:3e:78:
         ce:b0:7e:1a:f5:07:a5:67:74:0b:fb:d2:0c:0b:28:3e:54:9c:
         27:2e:17:13:92:38:da:c8:fe:93:61:68:73:58:07:6a:47:af:
         7a:5b:60:c3:81:82:de:49:ca:b7:86:0d:5c:79:cb:e7:06:73:
         f7:9e:ab:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5
RkEwNjA4QTcwHhcNMjYwMjI4MjM1NzM4WhcNMjYwMzA3MjM1NzM4WjAYMRYwFAYD
VQQDDA02OWEzODBmMi0zODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo8uww8Q2aw1jqKFjO7wtZeSbTRFCmbKvCiVd8hMim8SCB9cAQvCGu+1hok3J
CpH31s4ALPsS2TLAmQU8Yk1Z+ImfJwtIKr5SmH/xe5gTqpsd3qo7GiPxe6pcuB/n
4H2bTeUgwLUrX2mrQfQ1GULQGo3OZJo34BXWFOsWUyFRKXYilDxuc8VLDYj4Ctmm
GVUE8iOLfrQynUpodhzCxvcq7lPAz+wKUtU8wlntdV0kLJaTDUB4CJdpDo/aW5pD
yRkIuuHdSaETFPcWBo7Lkcz//ZvO0M76o9YhW5Nu4odH1i8fIYfQBKpQo3ku0hkq
4MpAF5gHtxOXa0c+k9EXykO0iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFITioG0j
AI8zaCH4vEpffKgKHcIqMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx
RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3
cVpNX0tVUGNKcE9mb0dDS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATvPT/X6lLbe835bm9p7tHMFikeK/GAN60FI+EtVTN8nURHnGLOczP0xcAC0I
1bU/dGRM9iRg2ZT/h6nNv3xW5tMxNVkPb/AygSzXQNL+bkkmbr72IHDBWGSUjvOs
R1E9jCiNUmK3Nzj6tCyOXaTtduw/v3orTMx+BlLk4FEbtf73eecLaOSOc3cUgz2M
bwQRJnM8I3FeiTYZxRwSOGv0rvNg1cgUoyZ7qm2XFCOAeARHDgxr9J0exaqMtJHz
aqyo4iOqMz54zrB+GvUHpWd0C/vSDAsoPlScJy4XE5I42sj+k2Foc1gHakeveltg
w4GC3knKt4YNXHnL5wZz956rkA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:15 2026 by rpki-client