Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
File:                     Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json)
Hash identifier:          C611Ywiv4zAjfEzyb5znp7Eb6j2T7bDMlcI2lgeSXlA=
Subject key identifier:   7B:38:FA:26:89:0F:09:DE:D2:B5:3E:6D:9D:43:78:32:23:46:07:A0
Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
Certificate issuer:       /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
Manifest number:          0245
Signing time:             Sun 01 Mar 2026 03:12:43 +0000
Manifest this update:     Sun 01 Mar 2026 03:12:43 +0000
Manifest next update:     Sun 08 Mar 2026 03:12:43 +0000
Files and hashes:         1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: gQwKxzPzPHSrKWa1K6njQm/ev9BkNvG04e9IwZGBzlE=)
                          2: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: VApl5gOnxtdCywBPMR0dXxKkqk3t+bnPo30E9g9b6bA=)
                          3: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 5MB2PDcakDg/26VL0TUZlY6MMrD+mZ34XPyyIZou81c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
        Validity
            Not Before: Mar  1 03:12:43 2026 GMT
            Not After : Mar  8 03:12:43 2026 GMT
        Subject: CN=69a3aeab-755a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:49:fa:50:21:21:17:14:13:d5:dd:2f:0a:a8:
                    a0:a8:2c:d9:f8:de:c7:83:22:6b:f1:0d:36:79:9e:
                    f3:af:1e:f3:c2:f9:fd:72:2e:e1:21:84:67:73:c3:
                    6b:45:44:22:d3:3f:48:8c:2a:7a:95:3c:51:8a:06:
                    82:84:ee:4e:e7:fd:90:c8:bc:40:b8:01:64:01:3a:
                    d6:40:a5:38:78:b0:41:c4:9b:35:eb:9a:e3:af:4c:
                    67:ba:be:45:5c:f1:34:3e:2f:8a:88:ac:29:f1:7d:
                    44:8a:95:5c:40:fa:bd:09:7d:18:72:12:3f:4b:6e:
                    f7:e5:46:b7:d5:64:78:2e:f2:90:6e:a5:51:3e:e4:
                    a7:06:05:98:b4:37:9a:bf:85:e0:05:db:90:dc:c5:
                    6d:1c:09:23:b6:8b:fe:92:b7:6c:cc:fa:ef:c1:0e:
                    94:48:f7:7d:d8:06:1d:2d:74:66:a0:82:ca:fb:51:
                    09:60:85:c5:94:8a:cc:ba:e6:83:5a:4d:59:1c:9e:
                    c6:77:7c:83:4b:40:09:4d:6e:7d:28:dd:26:ed:6f:
                    49:7a:76:4a:02:ff:08:21:bc:f6:dd:63:92:a8:8e:
                    5c:b6:3c:df:85:39:b3:6b:f8:ae:6d:71:21:55:75:
                    10:f8:0f:ba:c2:17:05:69:a6:aa:09:3e:26:b7:00:
                    1e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:38:FA:26:89:0F:09:DE:D2:B5:3E:6D:9D:43:78:32:23:46:07:A0
            X509v3 Authority Key Identifier:
                keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f9:34:61:ee:ee:e0:70:8f:19:ed:85:48:26:04:12:fa:a5:
         96:d8:cc:9b:6d:83:c8:75:fb:d9:24:0c:df:02:2c:cb:71:86:
         85:ad:6f:e9:9c:de:a8:2e:53:01:06:67:3b:f2:32:96:1b:06:
         cf:4d:cb:08:b5:30:a8:1d:a8:a7:f8:a8:4d:bf:96:f5:0a:6e:
         af:34:3d:11:5f:0b:0f:ef:8f:7d:aa:e1:15:fa:fe:a7:09:09:
         f4:03:af:f0:50:23:bf:81:63:2b:d3:d1:42:1e:bf:d4:3a:79:
         40:1c:4d:9a:20:74:e6:a5:fb:bc:73:a3:28:ee:7d:e2:f4:25:
         ad:8c:6e:50:b3:9f:a5:4f:ff:dc:51:ee:c8:1f:b9:0e:37:17:
         13:9c:25:96:30:10:82:b8:24:3b:90:94:c9:cf:1c:f4:da:02:
         b5:3a:09:42:49:4d:68:9b:b1:b6:26:08:83:b5:3b:57:c9:50:
         4c:bd:54:e7:39:65:37:c5:9b:1e:8a:64:11:0d:4b:95:3c:bd:
         e2:d5:62:3b:5f:f1:4e:1a:c0:38:29:a8:ef:ff:ce:bc:cf:9e:
         37:f9:de:4c:93:6c:d5:3d:59:7b:ac:72:b7:e7:87:66:65:a1:
         ae:4e:e5:4c:80:e6:a4:c7:4b:53:e6:81:06:7c:78:96:0b:59:
         b3:e3:df:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:00 2026 by rpki-client