Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
File:                     zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json)
Hash identifier:          nqP7Ug9We4cE3fgRTf4KHF5ZnaR3qtevJ8soG/GGmjA=
Subject key identifier:   02:1C:ED:B4:0A:A8:FC:BC:82:48:6C:3C:51:FA:21:E2:38:D9:6B:66
Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59
Certificate issuer:       /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
Certificate serial:       0990
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
Manifest number:          097E
Signing time:             Sat 28 Feb 2026 20:22:20 +0000
Manifest this update:     Sat 28 Feb 2026 20:22:20 +0000
Manifest next update:     Sat 07 Mar 2026 20:22:20 +0000
Files and hashes:         1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: 0cb2ilbEzjlA1QKms/Mqs9VwCNuI9TH/zvEW0oBtHo8=)
                          2: DA0B639E89E711F08DD17A55C4F9AE02.roa (hash: 92JEuDCm1e9WQ8I7GIzUujJiphmCChYv7JlAxtt8zqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2448 (0x990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
        Validity
            Not Before: Feb 28 20:22:20 2026 GMT
            Not After : Mar  7 20:22:20 2026 GMT
        Subject: CN=69a34e7c-f7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:55:fe:b0:f1:8a:42:c5:06:ef:ef:f4:df:
                    a6:18:ef:1d:97:67:30:be:10:a3:41:f0:d2:19:b0:
                    e9:dc:64:60:21:f2:03:85:1a:9e:46:02:d5:44:4b:
                    3e:2e:ee:4f:77:bf:09:6b:0a:a2:06:2c:bf:f0:ef:
                    c4:19:97:47:8b:68:b7:4c:c1:43:61:fb:9d:ce:48:
                    2b:b5:47:99:ad:10:d9:1d:bd:3b:51:f3:ff:05:c9:
                    81:7c:c0:35:86:fa:71:f3:80:df:da:d0:16:b9:ab:
                    16:54:f1:4a:5c:dd:40:85:8e:42:6a:63:b4:54:af:
                    f0:25:d0:57:49:2a:e2:11:01:03:12:aa:ae:b6:c2:
                    03:63:d7:0f:5e:77:48:c2:d9:88:af:56:4c:ed:23:
                    5d:db:d6:eb:23:76:16:44:ef:80:a1:cf:85:49:46:
                    cf:7a:78:0a:a5:cf:03:29:b9:17:75:ee:cf:09:1b:
                    25:ff:5d:96:69:35:9f:63:d2:90:9c:10:49:d9:c0:
                    46:25:19:9e:70:4c:cf:75:87:07:43:06:d9:18:06:
                    c9:a6:82:1d:36:b8:8a:af:b6:85:22:c1:43:a0:4a:
                    19:24:11:cd:dc:12:a6:71:74:8b:fd:21:03:24:eb:
                    b3:02:2b:26:ea:05:18:05:0e:34:ef:89:ae:65:f3:
                    67:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1C:ED:B4:0A:A8:FC:BC:82:48:6C:3C:51:FA:21:E2:38:D9:6B:66
            X509v3 Authority Key Identifier:
                keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9c:22:cd:86:4a:f5:a2:25:b1:5b:b8:60:c9:fe:69:80:c2:
         b1:70:d4:b3:17:bd:51:7a:98:c8:98:c4:ee:31:f5:0c:73:33:
         6a:9f:6f:85:8d:6a:3f:0d:dc:a6:08:aa:50:87:0f:e3:c9:9e:
         0e:1e:3c:24:c9:48:9a:ef:42:ac:66:0a:83:13:8b:b7:51:7e:
         a7:df:ba:ee:45:9f:ed:3e:24:ca:8d:5b:d9:79:70:07:71:b0:
         f6:df:3e:2c:2f:d8:56:cd:e1:68:b0:80:11:26:bd:b8:d3:0b:
         53:47:88:68:9f:c4:4c:a5:38:97:d1:48:d4:df:9f:5b:3c:be:
         c4:d9:2e:a0:27:de:93:a5:eb:fb:83:37:28:ff:24:da:5c:6c:
         b6:96:d7:01:84:3a:d3:72:49:6a:28:90:3c:1e:62:a8:39:91:
         2d:21:f5:3a:ea:a2:99:21:b6:51:b8:e2:be:ab:77:3b:4d:c2:
         ac:e3:e0:47:5f:14:c3:8b:aa:12:3f:cd:76:8f:63:dd:f1:65:
         78:4f:80:90:9f:9c:e3:ad:0c:35:12:ca:91:bf:f6:b2:a4:7e:
         b6:c0:23:25:84:38:f8:ff:00:df:ab:d6:48:e7:22:66:e2:af:
         f1:24:f8:92:d6:58:3a:44:86:ba:f2:8e:9f:ec:c6:62:c1:28:
         63:f9:a3:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz
QzRBRDVDNTkwHhcNMjYwMjI4MjAyMjIwWhcNMjYwMzA3MjAyMjIwWjAYMRYwFAYD
VQQDDA02OWEzNGU3Yy1mN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt8VV/rDxikLFBu/v9N+mGO8dl2cwvhCjQfDSGbDp3GRgIfIDhRqeRgLVREs+
Lu5Pd78JawqiBiy/8O/EGZdHi2i3TMFDYfudzkgrtUeZrRDZHb07UfP/BcmBfMA1
hvpx84Df2tAWuasWVPFKXN1AhY5CamO0VK/wJdBXSSriEQEDEqqutsIDY9cPXndI
wtmIr1ZM7SNd29brI3YWRO+Aoc+FSUbPengKpc8DKbkXde7PCRsl/12WaTWfY9KQ
nBBJ2cBGJRmecEzPdYcHQwbZGAbJpoIdNriKr7aFIsFDoEoZJBHN3BKmcXSL/SED
JOuzAism6gUYBQ4074muZfNnrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIc7bQK
qPy8gkhsPFH6IeI42WtmMB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF
QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REM3OC8xNTQ3NDAwOEFFQUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhx
UEJjcXB5ZzBBYTg4U3RYRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbJwizYZK9aIlsVu4YMn+aYDCsXDUsxe9UXqYyJjE7jH1DHMzap9vhY1qPw3c
pgiqUIcP48meDh48JMlImu9CrGYKgxOLt1F+p9+67kWf7T4kyo1b2XlwB3Gw9t8+
LC/YVs3haLCAESa9uNMLU0eIaJ/ETKU4l9FI1N+fWzy+xNkuoCfek6Xr+4M3KP8k
2lxstpbXAYQ603JJaiiQPB5iqDmRLSH1OuqimSG2Ubjivqt3O03CrOPgR18Uw4uq
Ej/Ndo9j3fFleE+AkJ+c460MNRLKkb/2sqR+tsAjJYQ4+P8A36vWSOciZuKv8ST4
ktZYOkSGuvKOn+zGYsEoY/mj6A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:51:40 2026 by rpki-client