Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
File:                     zk5vKarqdsaUOXp2Em3DgNPbb74.mft (raw, json)
Hash identifier:          MYHWKJ0YA1aFHKcHKJHT8opexhcXZlKZo1nbFXsWdQE=
Subject key identifier:   6B:F1:FC:02:A2:83:68:C4:54:91:15:5C:D1:B6:53:2F:4C:1E:CA:27
Authority key identifier: CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE
Certificate issuer:       /CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE
Certificate serial:       3524
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
Manifest number:          3524
Signing time:             Thu 26 Mar 2026 14:42:31 +0000
Manifest this update:     Thu 26 Mar 2026 14:42:30 +0000
Manifest next update:     Thu 02 Apr 2026 14:42:30 +0000
Files and hashes:         1: zk5vKarqdsaUOXp2Em3DgNPbb74.crl (hash: E+Zec0rer/W3v5Ix2fgSpsv3UfLDgIEw/RUDOnLAy0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl
                          rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13604 (0x3524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110B82, serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE
        Validity
            Not Before: Mar 26 14:42:30 2026 GMT
            Not After : Apr  2 14:42:30 2026 GMT
        Subject: CN=69c545d7-fad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:9a:95:c1:bf:3e:13:d7:87:d4:93:8c:30:
                    80:91:6c:59:f9:33:ff:37:00:32:8c:2e:f7:3f:a9:
                    da:b7:21:33:bb:22:72:db:79:8a:19:29:b1:af:e6:
                    12:eb:1a:ee:e1:3d:a0:05:1a:50:4d:d9:d1:6d:0b:
                    66:52:b3:45:99:a2:fa:6a:69:83:09:68:7e:0a:26:
                    7c:fb:41:01:a5:be:77:89:37:27:2b:5a:5a:91:d0:
                    82:65:9d:17:8e:c7:00:61:28:91:15:f5:7a:c1:47:
                    ff:58:c1:83:7c:72:cc:4d:e1:b9:72:d5:0f:cb:b8:
                    7e:88:28:fa:e7:d6:c0:45:ef:ab:db:df:f0:ef:3a:
                    60:75:e7:d3:ec:84:dc:3e:a2:30:df:81:ff:5b:86:
                    49:75:d7:e5:04:45:85:05:db:a8:cf:d5:59:3c:e9:
                    41:be:6b:96:95:7f:98:2d:b6:60:95:27:86:1c:20:
                    10:66:e1:c8:84:6b:3f:fd:8d:9e:81:0e:9e:a2:b3:
                    ea:88:9a:dc:47:55:84:cb:31:55:be:84:8b:02:ba:
                    57:6e:c5:5a:71:23:c3:e1:d7:4a:5c:e4:e5:d2:a7:
                    b2:c9:3f:28:42:05:58:ae:e8:d5:6d:a6:b9:e2:05:
                    d7:b5:82:ce:f6:b8:bc:64:83:64:f3:26:9d:d8:8a:
                    39:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F1:FC:02:A2:83:68:C4:54:91:15:5C:D1:B6:53:2F:4C:1E:CA:27
            X509v3 Authority Key Identifier:
                keyid:CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:00:58:89:71:fc:78:c2:7d:c4:44:3c:74:1f:a0:dd:42:92:
         65:73:7c:00:49:b4:72:67:9e:73:c8:53:30:d4:50:ed:6f:3b:
         02:c4:6c:b1:4b:d2:a9:92:1c:87:0e:4c:0e:81:2a:6e:f1:e2:
         cf:7b:36:36:87:3f:a7:f5:89:27:26:66:df:09:6f:32:7e:92:
         12:bf:cf:c6:c9:07:e0:0f:37:76:44:6d:d5:03:86:db:7d:88:
         88:73:6b:bc:66:08:a6:ce:5f:24:33:01:0a:b3:15:15:e7:72:
         15:b6:08:5f:f9:22:a2:e2:3f:04:8a:aa:17:ad:a1:5f:e0:88:
         36:7c:db:cc:30:44:ae:9e:22:5e:90:ca:37:60:fd:15:a3:f0:
         9a:85:af:e0:90:54:65:be:2d:98:34:02:95:a7:f2:02:f6:b1:
         5b:d6:80:a7:72:5a:70:a1:47:75:29:7f:4c:d9:8e:51:44:51:
         65:38:4c:b5:cf:ea:12:64:3f:dc:5b:bc:0d:a8:58:03:77:26:
         38:f6:6e:3e:22:65:36:72:2f:43:7c:4e:5b:b7:30:57:c7:6b:
         b6:df:a3:51:8a:6f:b2:ee:43:0e:13:2e:3f:fd:3c:b7:f8:81:
         aa:0a:a6:98:a8:fc:b5:b5:d1:84:7a:6c:b1:ad:2f:0a:2e:67:
         2c:80:7a:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBCODIxMTAvBgNVBAUTKENFNEU2RjI5QUFFQTc2QzY5NDM5N0E3NjEyNkRDMzgw
RDNEQjZGQkUwHhcNMjYwMzI2MTQ0MjMwWhcNMjYwNDAyMTQ0MjMwWjAYMRYwFAYD
VQQDEw02OWM1NDVkNy1mYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnm2alcG/PhPXh9STjDCAkWxZ+TP/NwAyjC73P6natyEzuyJy23mKGSmxr+YS
6xru4T2gBRpQTdnRbQtmUrNFmaL6ammDCWh+CiZ8+0EBpb53iTcnK1pakdCCZZ0X
jscAYSiRFfV6wUf/WMGDfHLMTeG5ctUPy7h+iCj659bARe+r29/w7zpgdefT7ITc
PqIw34H/W4ZJddflBEWFBduoz9VZPOlBvmuWlX+YLbZglSeGHCAQZuHIhGs//Y2e
gQ6eorPqiJrcR1WEyzFVvoSLArpXbsVacSPD4ddKXOTl0qeyyT8oQgVYrujVbaa5
4gXXtYLO9ri8ZINk8yad2Io5+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvx/AKi
g2jEVJEVXNG2Uy9MHsonMB8GA1UdIwQYMBaAFM5Obymq6nbGlDl6dhJtw4DT22++
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEI4Mi8yM0Q0QUNCNjFE
OEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRzYVVPWHAyRW0zRGdOUGJi
NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3prNXZLYXJxZHNhVU9YcDJFbTNEZ05QYmI3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEI4Mi8yM0Q0QUNCNjFEOEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRz
YVVPWHAyRW0zRGdOUGJiNzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANgBYiXH8eMJ9xEQ8dB+g3UKSZXN8AEm0cmeec8hTMNRQ7W87AsRssUvSqZIc
hw5MDoEqbvHiz3s2Noc/p/WJJyZm3wlvMn6SEr/PxskH4A83dkRt1QOG232IiHNr
vGYIps5fJDMBCrMVFedyFbYIX/kiouI/BIqqF62hX+CINnzbzDBErp4iXpDKN2D9
FaPwmoWv4JBUZb4tmDQClafyAvaxW9aAp3JacKFHdSl/TNmOUURRZThMtc/qEmQ/
3Fu8DahYA3cmOPZuPiJlNnIvQ3xOW7cwV8drtt+jUYpvsu5DDhMuP/08t/iBqgqm
mKj8tbXRhHpssa0vCi5nLIB6rg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 08:42:55 2026 by rpki-client