Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
File:                     ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft (raw, json)
Hash identifier:          JvcQsW+q/y6DLxJar5NxpaKpcKcRbbrtYjATMgTzqY8=
Subject key identifier:   EF:9C:4B:F7:81:17:BE:E8:59:F4:9D:6A:AD:09:ED:C4:1B:1C:AF:48
Authority key identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13
Certificate issuer:       /CN=A911B5AC/serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
Manifest number:          4D
Signing time:             Wed 25 Mar 2026 01:30:34 +0000
Manifest this update:     Wed 25 Mar 2026 01:30:33 +0000
Manifest next update:     Wed 01 Apr 2026 01:30:33 +0000
Files and hashes:         1: ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl (hash: bGyMK2eXu5quH4hOpAT2zxaIDM8RKKhnCqmPdX0tPp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl
                          rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5AC, serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213
        Validity
            Not Before: Mar 25 01:30:33 2026 GMT
            Not After : Apr  1 01:30:33 2026 GMT
        Subject: CN=69c33aba-68c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:63:9a:07:dc:eb:c3:72:92:a8:02:a5:c1:
                    53:5a:05:83:3f:47:05:65:58:36:5b:19:94:1f:52:
                    21:a6:75:13:a4:a9:be:e6:ba:ea:32:2f:ef:4b:26:
                    a3:02:1e:28:04:ba:f2:95:48:05:c6:6e:c6:d2:a3:
                    fd:4e:65:0a:59:17:ab:60:9a:42:95:19:28:ce:39:
                    fe:01:bd:bc:ce:fd:57:04:64:4d:43:61:f4:80:41:
                    57:63:8f:fb:2a:9f:77:bb:04:86:a9:3c:9c:b7:61:
                    9a:01:c2:1e:46:64:92:1e:3d:95:66:4b:81:d3:77:
                    12:31:35:69:82:3d:cb:fa:e0:f2:6a:71:26:21:9c:
                    1c:69:11:f2:89:3e:4c:af:14:a5:78:4d:b2:a5:64:
                    51:61:09:fc:8e:6b:4d:a3:61:90:fc:78:f9:65:23:
                    da:d4:05:f2:f8:86:56:8b:97:b6:40:8a:59:44:3f:
                    1f:71:23:5d:64:44:a2:5a:9c:d4:23:c2:7a:88:27:
                    7d:c9:7d:f2:80:45:7e:be:98:0a:7f:68:5f:26:bf:
                    d5:63:0b:99:d7:41:20:e9:5a:24:f5:d0:5c:89:4f:
                    3c:6e:92:b2:a5:55:22:ee:55:ef:21:91:46:4d:d4:
                    78:44:a4:7f:ac:e5:23:d4:05:17:0e:56:4c:35:0e:
                    5e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9C:4B:F7:81:17:BE:E8:59:F4:9D:6A:AD:09:ED:C4:1B:1C:AF:48
            X509v3 Authority Key Identifier:
                keyid:64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:ee:f6:b6:32:b8:b3:99:ff:8d:c4:73:a9:57:d5:61:6e:ae:
         65:81:ea:3b:b8:cb:a4:55:8c:a9:46:0a:cd:45:4f:dc:ae:d1:
         67:c0:e9:42:02:8e:28:2a:70:e0:a6:08:7f:24:88:cf:d0:f9:
         bd:48:c3:26:c4:76:37:90:4c:0f:29:84:62:5f:9f:5c:06:6c:
         cd:3f:b5:74:7d:b5:b4:26:ed:5a:72:5d:86:cd:bd:e7:a4:04:
         5e:4d:bf:61:44:58:a8:2a:a7:1a:c0:74:b1:e7:6c:27:04:ea:
         69:f5:be:68:e3:d4:09:2e:a2:73:d1:ae:d6:cf:a7:e8:7f:9f:
         86:fd:25:83:97:b2:9c:31:f5:c6:b4:ff:ac:a1:7e:8a:c5:fc:
         c8:a0:06:91:df:b8:6a:8a:25:a6:e8:53:74:96:0d:ed:22:d4:
         96:1c:a2:1b:e8:0b:66:5e:98:34:42:e1:4e:29:c6:0c:8a:27:
         ce:2b:b3:ca:f8:84:5b:dc:31:98:78:d7:d8:5d:9f:b5:5b:69:
         2e:9d:9e:a9:19:e5:c9:fd:07:d9:3f:07:80:53:c5:03:4e:31:
         60:f8:14:3e:fe:e0:16:52:c0:9d:2f:44:2f:e0:1c:6e:90:e0:
         32:0d:fd:8e:a5:e6:ac:f5:b2:13:b8:eb:a0:a4:69:9e:9a:2b:
         22:e3:7f:4d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
QjVBQzExMC8GA1UEBRMoNjQ1MTU1M0UwOURDMjRERERCQzU0MDczRTY2MjVCMUEx
NkU3NTIxMzAeFw0yNjAzMjUwMTMwMzNaFw0yNjA0MDEwMTMwMzNaMBgxFjAUBgNV
BAMTDTY5YzMzYWJhLTY4YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvNmOaB9zrw3KSqAKlwVNaBYM/RwVlWDZbGZQfUiGmdROkqb7muuoyL+9LJqMC
HigEuvKVSAXGbsbSo/1OZQpZF6tgmkKVGSjOOf4BvbzO/VcEZE1DYfSAQVdjj/sq
n3e7BIapPJy3YZoBwh5GZJIePZVmS4HTdxIxNWmCPcv64PJqcSYhnBxpEfKJPkyv
FKV4TbKlZFFhCfyOa02jYZD8ePllI9rUBfL4hlaLl7ZAillEPx9xI11kRKJanNQj
wnqIJ33JffKARX6+mAp/aF8mv9VjC5nXQSDpWiT10FyJTzxukrKlVSLuVe8hkUZN
1HhEpH+s5SPUBRcOVkw1Dl6LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU75xL94EX
vuhZ9J1qrQntxBscr0gwHwYDVR0jBBgwFoAUZFFVPgncJN3bxUBz5mJbGhbnUhMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNUFDL0JDMUY3REI2Qjky
MTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4zYnhVQno1bUpiR2hiblVo
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWkZGVlBnbmNKTjNieFVCejVtSmJHaGJuVWhNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC
NUFDL0JDMUY3REI2QjkyMTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4z
YnhVQno1bUpiR2hiblVoTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDD7va2Mrizmf+NxHOpV9Vhbq5lgeo7uMukVYypRgrNRU/crtFnwOlCAo4oKnDg
pgh/JIjP0Pm9SMMmxHY3kEwPKYRiX59cBmzNP7V0fbW0Ju1acl2Gzb3npAReTb9h
RFioKqcawHSx52wnBOpp9b5o49QJLqJz0a7Wz6fof5+G/SWDl7KcMfXGtP+soX6K
xfzIoAaR37hqiiWm6FN0lg3tItSWHKIb6AtmXpg0QuFOKcYMiifOK7PK+IRb3DGY
eNfYXZ+1W2kunZ6pGeXJ/QfZPweAU8UDTjFg+BQ+/uAWUsCdL0Qv4BxukOAyDf2O
peas9bITuOugpGmemisi439N
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:39 2026 by rpki-client