Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
File:                     ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft (raw, json)
Hash identifier:          KK+jrHAFujtPwGMl+QfxNuW25mCCg94OsPW1r6T/EL0=
Subject key identifier:   EA:D2:7B:5B:11:36:5E:4E:D1:37:C2:E3:72:F5:5F:4E:18:44:89:00
Authority key identifier: 64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E
Certificate issuer:       /CN=A9115AC8/serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
Certificate serial:       0290
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
Manifest number:          027B
Signing time:             Wed 25 Mar 2026 01:24:15 +0000
Manifest this update:     Wed 25 Mar 2026 01:24:14 +0000
Manifest next update:     Wed 01 Apr 2026 01:24:14 +0000
Files and hashes:         1: ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl (hash: COw0si7GR9olUntMdeT9u3ke2FiuA3AWlyHkuX9creM=)
                          2: 9261B5942D7511F0AE6EEE7CC4F9AE02.roa (hash: VgKZr+Yro+WCDJDk8+sd8xGuOog1T6cOqydm30PIbLc=)
                          3: 9333456E2D7511F0AE6EEE7CC4F9AE02.roa (hash: ZKWuilMC1mbTpNIhkFg3PCRossx3ZxzSiZXfGCxostY=)
                          4: 98F2F9C8762611F09B1FE90DC4F9AE02.roa (hash: KS7F+OziKhDMCnUVMBfodEKMFb07L8NYOvPjvyYchaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl
                          rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115AC8, serialNumber=6445237E56EE89442BF314352CFC543D65D1B60E
        Validity
            Not Before: Mar 25 01:24:14 2026 GMT
            Not After : Apr  1 01:24:14 2026 GMT
        Subject: CN=69c3393f-ad95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:e7:fa:73:35:56:1b:2f:88:3d:c6:36:d2:
                    a8:9f:eb:90:13:f9:43:ea:8b:d5:4e:bf:67:26:15:
                    25:a4:b8:50:51:bb:63:20:25:1e:68:43:c3:3e:ba:
                    cf:fc:3d:44:a5:52:d8:bd:62:63:32:eb:25:5f:30:
                    ad:cf:6f:b3:8c:41:86:15:4f:9e:c2:74:c9:ca:e4:
                    60:7f:5b:93:09:f2:23:df:1b:2a:d1:50:7f:c7:58:
                    83:87:83:bb:f3:bc:bb:53:8d:df:5c:e7:9a:a4:3c:
                    8b:d0:51:46:88:19:4a:f1:af:74:64:60:ba:4d:6d:
                    ea:82:8d:3e:6a:10:72:a0:e7:70:de:92:ff:45:2f:
                    db:2c:f5:ae:23:5d:dd:f6:07:ea:b8:cf:d6:a7:52:
                    1c:38:50:cc:42:63:12:64:a3:f4:e5:2c:50:2c:42:
                    00:3e:0d:5d:9f:52:a3:a1:72:cf:92:16:a3:0e:fa:
                    5c:e1:7d:10:42:bc:04:09:df:1e:dc:4a:94:a3:5c:
                    5e:21:2a:4c:cb:38:04:06:d8:64:f5:83:8e:98:c9:
                    ae:26:93:b5:4b:e8:52:c5:76:a5:cf:62:85:67:a0:
                    c6:82:ec:13:f6:da:5e:6a:14:27:b1:ac:14:93:cb:
                    05:91:7f:cd:67:41:a8:52:5b:84:0c:56:8f:d1:ae:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D2:7B:5B:11:36:5E:4E:D1:37:C2:E3:72:F5:5F:4E:18:44:89:00
            X509v3 Authority Key Identifier:
                keyid:64:45:23:7E:56:EE:89:44:2B:F3:14:35:2C:FC:54:3D:65:D1:B6:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115AC8/BA6D27D46C5D11ED8C5C641CC4F9AE02/ZEUjflbuiUQr8xQ1LPxUPWXRtg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:65:fa:92:ba:d4:03:88:21:62:36:13:5c:ba:9f:ed:fa:eb:
         d6:b5:84:c8:17:7b:bb:bf:4c:c7:05:95:5b:14:be:77:0f:92:
         5c:f3:2b:f5:da:ed:35:8b:6c:8e:7e:59:96:90:24:3d:74:a9:
         a2:e4:d7:0c:77:66:88:1f:f2:e0:37:eb:8c:cb:db:b5:00:96:
         62:bf:c5:67:a0:fb:f9:da:04:82:2b:c2:d6:93:ab:80:0c:d3:
         af:39:bb:35:cd:b6:08:f6:8d:2c:59:77:1e:a9:9e:b7:71:9d:
         9d:3b:24:67:6d:7f:be:94:01:ea:76:95:0d:1a:13:d4:13:76:
         bc:43:39:7e:09:8b:88:2b:2b:64:39:bc:2a:db:47:70:95:be:
         39:c6:18:b9:51:b4:91:bf:d2:3d:5f:9a:62:52:db:98:85:35:
         2d:56:62:f6:c7:07:f4:d2:5d:f9:69:8d:9f:af:59:ea:7b:76:
         ce:24:4a:de:f5:65:c2:e3:c5:20:07:e7:5f:ed:a2:6f:1f:35:
         91:54:4e:3c:45:0e:87:96:1f:5e:14:58:a2:ec:3c:a3:20:50:
         51:4d:46:00:19:5a:4d:e1:85:9d:40:e6:e2:00:f6:5f:e5:fb:
         ae:e2:8e:ed:db:67:b2:7b:fb:15:86:71:1b:0f:8b:8d:43:8f:
         7e:bc:ab:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:25 2026 by rpki-client