Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
File:                     ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft (raw, json)
Hash identifier:          DtBXNERpk7ksaQ188zWFbYq82gW9+eJpUafanKyl8aY=
Subject key identifier:   7C:F3:F4:A0:43:3A:FF:69:21:5B:43:CD:E2:5B:6E:28:CB:1C:AE:E6
Authority key identifier: 64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14
Certificate issuer:       /CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
Manifest number:          F8
Signing time:             Sun 01 Mar 2026 07:18:23 +0000
Manifest this update:     Sun 01 Mar 2026 07:18:23 +0000
Manifest next update:     Sun 08 Mar 2026 07:18:23 +0000
Files and hashes:         1: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl (hash: ax41fSv9jzBOnFuebqRbJwvVzt/71GBGMDgXky3UasI=)
                          2: 841585749B1211EFBFBF913CC4F9AE02.roa (hash: gdDMQEhJKbqQYoRrpzaidx3PSUdHajAqC/+MOePDuxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F09FE, serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814
        Validity
            Not Before: Mar  1 07:18:23 2026 GMT
            Not After : Mar  8 07:18:23 2026 GMT
        Subject: CN=69a3e83f-60ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4f:62:cf:4d:37:16:10:c8:2d:79:b6:46:d8:
                    2b:67:57:f6:2d:dd:06:1f:0d:20:52:07:d6:4b:d7:
                    55:56:dd:dd:76:25:c8:ed:41:cd:c5:c6:43:e8:0f:
                    bd:9c:fd:79:a7:64:ba:13:dd:f1:92:8c:16:75:f8:
                    a6:76:89:51:4e:9d:f6:08:1b:c3:dd:44:b9:c1:66:
                    e5:85:b0:7c:06:d2:9b:f9:2b:d8:9f:3e:cc:ca:5f:
                    18:17:fc:de:bc:b8:27:c6:9e:ff:b3:25:34:cc:fe:
                    e3:7e:bf:ea:58:d2:15:61:9c:fb:1a:2c:33:96:2b:
                    9e:c9:51:48:25:6c:a2:f6:ee:51:e0:ce:12:c0:f5:
                    70:3b:e4:31:b9:3c:d6:e2:69:ba:fc:8a:29:99:0a:
                    08:91:2c:00:20:4e:e5:aa:35:65:16:ec:e6:7a:db:
                    48:b9:62:f5:7d:07:8b:eb:0e:61:44:d7:2d:f5:5f:
                    f1:4c:23:57:25:59:c1:fd:93:43:d5:eb:5e:c3:b4:
                    73:91:7d:82:e8:1c:75:46:bd:6a:b3:b5:6e:14:f4:
                    1f:d1:65:31:c4:c4:db:9c:22:61:7b:19:b1:52:39:
                    fc:ca:f0:a9:b8:5c:0e:60:d7:16:de:6e:6b:6a:a9:
                    eb:a5:29:35:ca:4f:d6:ab:ad:3c:2f:95:b7:3d:5e:
                    9a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F3:F4:A0:43:3A:FF:69:21:5B:43:CD:E2:5B:6E:28:CB:1C:AE:E6
            X509v3 Authority Key Identifier:
                keyid:64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:13:71:c5:51:92:4a:fd:37:36:ae:dc:84:4a:3a:64:11:35:
         5f:35:e9:fa:37:b6:a9:c7:08:17:0e:76:86:36:5b:f1:b5:54:
         9f:4f:93:f9:9d:f3:87:3a:f9:e7:d6:61:e4:ae:38:c5:1c:c1:
         bb:36:13:c8:60:bb:3e:0a:b6:52:64:4f:fc:7b:9f:73:98:a3:
         e8:9c:33:ba:8a:05:16:58:85:ea:7f:b1:4b:d9:60:6f:74:fb:
         ec:5d:b9:62:77:c7:6a:e7:5c:eb:07:de:68:d5:1d:9c:60:03:
         0a:f3:c6:4a:d3:3e:85:e0:4a:d4:d3:62:89:05:5a:14:fa:29:
         6a:81:80:63:04:55:b3:45:92:90:87:8d:1a:8d:41:83:93:9f:
         ac:09:bb:36:8c:7c:1d:23:7d:0b:36:81:d7:d9:79:c1:f1:f5:
         82:41:94:96:96:df:ac:12:d5:be:6a:44:00:56:5d:ac:19:d0:
         c1:f6:dd:08:30:e7:55:95:1e:93:03:14:14:82:19:4d:5f:3f:
         0e:15:61:b5:f3:f1:e4:fe:91:66:67:98:e6:4f:c8:a2:c4:90:
         bd:6f:bf:62:97:33:bc:26:22:c6:79:45:9c:a2:ad:b7:be:ac:
         fa:4a:84:36:ea:66:3b:8a:69:35:b1:46:fd:0c:2f:96:2c:c7:
         32:aa:e0:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA5RkUxMTAvBgNVBAUTKDY0Q0NDMTY2QzU4QzM4RkU4Q0MxOTc2RjVDRjA3QzFE
RDA2RjY4MTQwHhcNMjYwMzAxMDcxODIzWhcNMjYwMzA4MDcxODIzWjAYMRYwFAYD
VQQDEw02OWEzZTgzZi02MGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApU9iz003FhDILXm2RtgrZ1f2Ld0GHw0gUgfWS9dVVt3ddiXI7UHNxcZD6A+9
nP15p2S6E93xkowWdfimdolRTp32CBvD3US5wWblhbB8BtKb+SvYnz7Myl8YF/ze
vLgnxp7/syU0zP7jfr/qWNIVYZz7GiwzliueyVFIJWyi9u5R4M4SwPVwO+QxuTzW
4mm6/IopmQoIkSwAIE7lqjVlFuzmettIuWL1fQeL6w5hRNct9V/xTCNXJVnB/ZND
1etew7RzkX2C6Bx1Rr1qs7VuFPQf0WUxxMTbnCJhexmxUjn8yvCpuFwOYNcW3m5r
aqnrpSk1yk/Wq608L5W3PV6aGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHzz9KBD
Ov9pIVtDzeJbbijLHK7mMB8GA1UdIwQYMBaAFGTMwWbFjDj+jMGXb1zwfB3Qb2gU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDlGRS8zODAzQUExQzlC
MTIxMUVGQTg3QkI0M0JDNEY5QUUwMi9aTXpCWnNXTU9QNk13WmR2WFBCOEhkQnZh
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pNekJac1dNT1A2TXdaZHZYUEI4SGRCdmFCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDlGRS8zODAzQUExQzlCMTIxMUVGQTg3QkI0M0JDNEY5QUUwMi9aTXpCWnNXTU9Q
Nk13WmR2WFBCOEhkQnZhQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANBNxxVGSSv03Nq7chEo6ZBE1XzXp+je2qccIFw52hjZb8bVUn0+T+Z3zhzr5
59Zh5K44xRzBuzYTyGC7Pgq2UmRP/Hufc5ij6JwzuooFFliF6n+xS9lgb3T77F25
YnfHaudc6wfeaNUdnGADCvPGStM+heBK1NNiiQVaFPopaoGAYwRVs0WSkIeNGo1B
g5OfrAm7Nox8HSN9CzaB19l5wfH1gkGUlpbfrBLVvmpEAFZdrBnQwfbdCDDnVZUe
kwMUFIIZTV8/DhVhtfPx5P6RZmeY5k/IosSQvW+/YpczvCYixnlFnKKtt76s+kqE
NupmO4ppNbFG/QwvlizHMqrg3Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:10 2026 by rpki-client