Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
File:                     ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json)
Hash identifier:          OZh/oHlOlCHOcje42NdWNAFX4Zgamp8IQlchr1S5QYk=
Subject key identifier:   6A:44:E9:81:CB:6C:04:F5:A5:07:39:5F:9A:FB:2B:12:3A:36:BE:95
Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0
Certificate issuer:       /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
Manifest number:          014F
Signing time:             Mon 02 Mar 2026 00:53:02 +0000
Manifest this update:     Mon 02 Mar 2026 00:53:01 +0000
Manifest next update:     Mon 09 Mar 2026 00:53:01 +0000
Files and hashes:         1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: Za8kNL9Shf3JuYQZy4O0MMfPsz8/JZNC8flfF3HA+wM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl
                          rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0
        Validity
            Not Before: Mar  2 00:53:01 2026 GMT
            Not After : Mar  9 00:53:01 2026 GMT
        Subject: CN=69a4df6d-04f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:ca:9c:58:f8:dd:1f:33:d4:17:2e:1b:41:
                    6d:fb:22:2f:62:7a:40:5c:b1:bf:25:83:4d:1e:e1:
                    63:8b:00:f2:37:ec:66:d7:24:09:4a:be:d3:0f:97:
                    2d:3f:81:ee:0b:12:45:8e:22:9a:7b:bc:29:8e:71:
                    6e:14:1f:59:ea:45:76:d0:7d:0b:c6:5e:45:65:15:
                    df:bb:d4:28:bf:d0:e8:c2:69:51:02:9b:29:85:b7:
                    fb:e6:6a:a1:bc:7d:c3:bc:a3:58:b6:a6:31:54:72:
                    e8:03:46:0b:25:ce:c6:e5:6a:ca:7d:55:8d:42:42:
                    38:86:d7:db:b8:98:5d:9b:7c:1f:4b:a3:4b:aa:55:
                    27:71:85:86:5c:63:d3:e4:ae:ad:51:62:45:ed:04:
                    dd:39:a5:7c:92:f8:2b:34:0f:9a:c4:36:8e:8c:22:
                    7b:ae:25:c9:4b:07:67:3c:f9:87:6c:4f:77:2e:9a:
                    a9:65:5f:17:78:2e:9d:d5:94:29:11:c7:f4:73:ab:
                    26:f7:b2:9c:27:d1:1f:dd:d3:61:10:ec:29:a5:3b:
                    88:ef:d5:ce:82:50:5f:76:3e:bf:4c:ed:36:69:eb:
                    95:45:36:a7:f8:db:46:3b:6b:32:f5:13:ef:5f:20:
                    25:db:57:3f:73:84:dc:6a:66:f2:8f:41:26:e5:5b:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:44:E9:81:CB:6C:04:F5:A5:07:39:5F:9A:FB:2B:12:3A:36:BE:95
            X509v3 Authority Key Identifier:
                keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:03:3d:0b:96:dd:12:4b:cb:93:50:7a:06:f7:ea:97:fc:0b:
         20:e0:2f:85:d9:01:a0:ab:d7:50:3d:a4:20:98:98:76:3a:8d:
         3d:8b:c2:0e:59:e8:7f:ce:58:ed:58:47:09:41:66:61:56:92:
         4d:1e:9a:e2:d4:2a:6f:a4:e0:b2:32:e2:cc:f9:5d:cb:02:d3:
         15:aa:ff:5c:d1:52:67:a4:a5:6a:31:5c:7a:c7:da:5b:33:dd:
         e1:33:95:a3:9b:f4:ec:40:98:78:e9:d5:d6:8a:b6:53:33:f9:
         25:e0:2c:2d:d8:6a:9d:d0:84:45:42:ab:a9:32:34:77:a2:4f:
         4b:5d:df:62:c4:24:27:58:41:8f:d5:b6:cf:15:81:a5:ad:8a:
         02:91:d0:fb:70:d9:35:44:0a:14:8f:d4:be:74:f8:f2:ba:b4:
         20:36:cd:a1:c7:03:52:cd:77:ac:c5:f6:78:90:27:c2:67:b1:
         37:71:f5:b0:a0:db:0b:b3:37:df:4e:e8:00:9c:48:11:a2:ef:
         c9:21:f0:dd:cf:be:81:11:7c:21:37:74:65:8b:9b:f7:ca:ae:
         b1:64:0b:86:6d:15:a1:3e:98:cb:8d:cb:4e:c9:6f:0b:76:89:
         97:ef:70:bf:c5:20:64:ca:4c:5b:20:d3:cd:97:0d:e7:d2:18:
         93:82:ea:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:09 2026 by rpki-client