Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
File:                     zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json)
Hash identifier:          BmkhqxjhglH0P7KhYSWxazlkw5DoFD4UcpWJUzxzF/0=
Subject key identifier:   5B:64:19:E0:76:EB:16:F5:46:43:56:CB:3B:B0:FA:A0:A2:F4:0A:A9
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Certificate issuer:       /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
Manifest number:          0220
Signing time:             Fri 27 Mar 2026 02:26:06 +0000
Manifest this update:     Fri 27 Mar 2026 02:26:06 +0000
Manifest next update:     Fri 03 Apr 2026 02:26:06 +0000
Files and hashes:         1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: NATpbjjWnw9E/vO7+zh2qOKzB/11dUtdzcWOw61HqXo=)
                          2: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: /BmEORI4Sm9n04Z4+KTIuZ6zRVPGTZM+9NIuoZsaL/0=)
                          3: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: scwVpzCeBkgVHdEK5Uge9iAKaQk6Xc85PZeD5yXXw14=)
                          4: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: wnHWbEnfjZ63RYB0ismM9UJFoOh9ccy7t7IsH2bosjo=)
                          5: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: xOcV+Ws+Sc04FIxL3ePl5cuu7X8jyPVzdlvtQncOg3Y=)
                          6: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: DCEbqUc1yheRBTgF9eKK2YLM6+N73DDKwX1+nfluYt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
                          rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
        Validity
            Not Before: Mar 27 02:26:06 2026 GMT
            Not After : Apr  3 02:26:06 2026 GMT
        Subject: CN=69c5eabe-a7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:09:d4:c5:67:87:61:81:0f:cb:1e:42:9f:
                    6e:3c:e4:70:6d:bd:23:50:23:45:cf:a3:1e:78:c9:
                    30:3b:8c:dc:55:29:07:52:f4:d8:d0:e2:d7:5e:a0:
                    40:57:f5:62:19:d3:af:7e:70:40:de:6c:51:52:1e:
                    d9:ce:71:79:d2:56:77:00:eb:40:7d:2c:24:24:12:
                    80:7c:55:e2:2d:70:c8:7b:09:d1:3c:11:b6:15:84:
                    0f:1d:be:f3:97:69:b4:3c:3f:4a:86:56:08:d7:2a:
                    bf:82:7d:79:64:ad:93:d7:ce:6e:28:10:36:15:a2:
                    21:b7:9f:4d:17:2c:ea:47:0a:ef:70:c7:16:53:f4:
                    40:0a:8a:99:79:e9:b4:1a:95:66:b6:7d:28:88:9f:
                    46:e5:f9:8a:28:82:79:24:cd:4c:5e:45:59:a8:26:
                    6d:48:a6:e1:4e:18:aa:a7:7b:13:70:c5:7f:16:2e:
                    57:47:6b:50:46:37:59:66:e8:9c:fe:1b:e2:5f:0a:
                    66:e3:02:03:27:5f:24:bd:19:4e:f8:57:4a:7a:b8:
                    30:5f:23:42:aa:44:e1:9d:d9:26:4f:b0:ca:b3:53:
                    07:e9:13:33:ee:e7:b3:81:ee:4e:db:12:c5:f0:cb:
                    36:f5:06:57:d4:82:bb:8f:cb:fa:e5:b5:5e:b8:62:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:64:19:E0:76:EB:16:F5:46:43:56:CB:3B:B0:FA:A0:A2:F4:0A:A9
            X509v3 Authority Key Identifier:
                keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6b:4f:80:d5:ab:cf:2c:ba:bf:f1:94:a7:de:b7:36:18:03:
         65:98:2b:ca:ee:0e:44:4e:5d:13:94:47:d1:ca:01:40:6f:94:
         3e:7e:7f:0a:a2:24:dc:28:fb:9e:05:45:2c:58:40:c9:58:e4:
         49:77:29:9d:47:5c:15:e4:fd:3f:54:d4:fd:f4:67:ad:e8:c7:
         a5:e5:7d:57:5c:c8:09:94:f2:34:7c:6e:bc:4a:a8:75:7b:49:
         14:8f:d4:b5:ab:95:4c:44:28:86:eb:7e:06:2b:72:34:5c:1b:
         0f:9b:2b:f4:96:2c:79:88:f2:3f:1c:0a:a9:3c:b3:47:f0:ab:
         11:a6:72:25:e0:bf:8c:b8:66:6e:4c:81:97:5e:7d:46:b0:ab:
         df:a9:bc:0b:25:db:7b:92:62:7c:2e:00:61:af:26:51:34:39:
         e8:dd:15:4c:26:2e:e5:a9:06:80:57:50:f0:23:1a:d2:6c:72:
         b4:42:81:5c:e1:e7:c7:fc:e2:71:0d:90:aa:af:e8:b7:d8:6a:
         79:d5:61:1b:36:54:84:b4:6a:54:61:31:dc:43:68:94:ea:5b:
         a6:20:2c:ba:90:f2:b4:01:ab:9d:d8:b4:23:1b:a5:74:d0:bd:
         85:a0:0c:46:80:3d:ec:e1:84:01:a6:87:da:ed:91:7a:31:30:
         da:93:fb:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTcxMEUxMTAvBgNVBAUTKENEMTg0MUI2QzVCRUY3QzQ3ODJFNjdGNjYzRjNDMTk3
NDYxOTkzODMwHhcNMjYwMzI3MDIyNjA2WhcNMjYwNDAzMDIyNjA2WjAYMRYwFAYD
VQQDEw02OWM1ZWFiZS1hN2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtL4J1MVnh2GBD8seQp9uPORwbb0jUCNFz6MeeMkwO4zcVSkHUvTY0OLXXqBA
V/ViGdOvfnBA3mxRUh7ZznF50lZ3AOtAfSwkJBKAfFXiLXDIewnRPBG2FYQPHb7z
l2m0PD9KhlYI1yq/gn15ZK2T185uKBA2FaIht59NFyzqRwrvcMcWU/RACoqZeem0
GpVmtn0oiJ9G5fmKKIJ5JM1MXkVZqCZtSKbhThiqp3sTcMV/Fi5XR2tQRjdZZuic
/hviXwpm4wIDJ18kvRlO+FdKergwXyNCqkThndkmT7DKs1MH6RMz7uezge5O2xLF
8Ms29QZX1IK7j8v65bVeuGJ8GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFtkGeB2
6xb1RkNWyzuw+qCi9AqpMB8GA1UdIwQYMBaAFM0YQbbFvvfEeC5n9mPzwZdGGZOD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzEwRS9DOTNFMTc4QTAx
QjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4UjRMbWYyWV9QQmwwWVpr
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pSaEJ0c1ctOThSNExtZjJZX1BCbDBZWms0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzEwRS9DOTNFMTc4QTAxQjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4
UjRMbWYyWV9QQmwwWVprNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcWtPgNWrzyy6v/GUp963NhgDZZgryu4ORE5dE5RH0coBQG+UPn5/CqIk3Cj7
ngVFLFhAyVjkSXcpnUdcFeT9P1TU/fRnrejHpeV9V1zICZTyNHxuvEqodXtJFI/U
tauVTEQohut+BityNFwbD5sr9JYseYjyPxwKqTyzR/CrEaZyJeC/jLhmbkyBl159
RrCr36m8CyXbe5JifC4AYa8mUTQ56N0VTCYu5akGgFdQ8CMa0mxytEKBXOHnx/zi
cQ2Qqq/ot9hqedVhGzZUhLRqVGEx3ENolOpbpiAsupDytAGrndi0IxuldNC9haAM
RoA97OGEAaaH2u2RejEw2pP7uA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:42 2026 by rpki-client