Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
File:                     zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft (raw, json)
Hash identifier:          XMz/JzS/mSudx4EbjK644GvAxYkaWQ5xv8Hlka/kua4=
Subject key identifier:   2D:6C:17:AF:22:7D:D3:1C:DF:AB:31:62:E2:7B:F6:95:0B:96:B2:08
Authority key identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94
Certificate issuer:       /CN=A911E93B/serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
Manifest number:          4B
Signing time:             Wed 25 Mar 2026 07:30:55 +0000
Manifest this update:     Wed 25 Mar 2026 07:30:55 +0000
Manifest next update:     Wed 01 Apr 2026 07:30:55 +0000
Files and hashes:         1: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl (hash: k9oJSh1Tohn8WTNraGqA0mxQY68nM6o1KCDnIo7g/SU=)
                          2: DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa (hash: jnfPIPnbj8UH8ywNxN8KKwG7Kyd3mOWwDkCemwVHNFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl
                          rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E93B, serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594
        Validity
            Not Before: Mar 25 07:30:55 2026 GMT
            Not After : Apr  1 07:30:55 2026 GMT
        Subject: CN=69c38f2f-d1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:f0:93:aa:eb:ae:29:0a:6a:cd:6e:95:3f:
                    cb:46:e9:cf:46:d5:50:9c:9a:63:60:c0:c6:f2:9e:
                    ae:ad:23:bf:3d:63:c2:67:e5:58:db:a0:3a:4e:71:
                    66:59:88:07:3b:9b:bd:bc:23:d0:b4:7d:a6:d5:25:
                    62:50:e9:16:a9:29:fc:c3:de:8f:eb:3f:a2:4b:97:
                    95:76:f1:75:65:fe:23:2f:b1:68:3c:3b:45:c1:6f:
                    f8:45:5c:30:67:53:1f:73:25:34:f0:5d:31:05:a2:
                    9d:f3:83:a0:d4:fc:89:2b:a0:29:47:c3:e0:8d:30:
                    fc:2c:3d:dd:e8:dc:42:ca:94:71:cf:f1:b8:d5:a9:
                    5b:33:ef:ef:29:66:35:9d:4c:a9:e7:66:57:ea:a8:
                    4f:c9:1a:46:13:e5:8e:96:20:1a:55:16:ae:44:0c:
                    d9:13:dd:b5:44:5a:e8:a5:3c:dd:14:0e:26:d0:1e:
                    27:8c:72:ef:9e:17:e4:c5:e7:11:23:2d:5c:33:6c:
                    57:d9:7e:a8:87:a5:3d:34:67:fd:19:53:04:fc:a3:
                    3a:d2:3d:67:4a:14:e2:05:fe:ab:a2:e9:ed:66:f3:
                    c8:f6:86:4e:eb:2c:e0:ad:d5:e3:a7:30:28:b0:1a:
                    42:f2:a6:31:d4:c5:5e:51:e1:1c:fd:e5:ae:e2:e1:
                    73:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6C:17:AF:22:7D:D3:1C:DF:AB:31:62:E2:7B:F6:95:0B:96:B2:08
            X509v3 Authority Key Identifier:
                keyid:CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:42:9b:2f:c3:c4:ad:e2:a4:a1:60:0d:0d:7f:e4:8c:f7:30:
         d8:ea:f5:49:36:be:b8:fa:de:ca:02:a0:74:16:83:c3:bf:99:
         70:7c:25:06:e2:13:61:c0:26:de:20:32:32:c2:bf:1e:cd:55:
         18:b5:f3:98:e0:25:ef:1d:51:a1:be:5a:d8:0a:b9:9b:fc:ed:
         12:a9:c9:c8:ad:05:17:73:2f:09:05:82:d5:57:b8:a5:49:8d:
         71:ea:22:f8:a1:e7:21:06:34:05:cd:91:d4:2a:9c:36:ed:03:
         2b:49:fc:18:98:1e:38:38:8d:27:8d:72:41:74:1e:94:50:ba:
         c9:f0:a1:0b:d2:89:28:a2:94:ae:e7:44:db:bd:1c:21:9d:4f:
         de:ff:f3:18:78:41:2c:aa:fe:27:34:ad:f1:1a:d7:25:a9:f2:
         56:ab:59:3d:7e:b4:4a:ac:b0:82:e7:7d:9b:ba:a3:68:dc:de:
         a4:f3:f9:b8:ee:bc:f9:4d:ec:95:90:07:f1:94:29:7a:c1:35:
         a0:bb:83:ff:89:b9:0c:26:04:27:d3:1f:7f:f8:e4:bb:76:9c:
         e7:c0:77:11:8f:e7:bd:94:b8:c8:8e:27:c3:13:ad:6b:f2:d2:
         12:4c:97:03:b1:51:11:10:e3:7b:76:2c:16:d9:ad:41:3b:2a:
         73:46:34:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:12 2026 by rpki-client