Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft
File:                     ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft (raw, json)
Hash identifier:          Usz9YaTGvRHV8FX2IRaWKtWmzSGVu5qFITdGlcOMrk4=
Subject key identifier:   50:8C:C0:C9:49:A5:BA:6C:93:A5:2B:BF:0A:4D:E1:B5:4E:F3:8B:94
Authority key identifier: 67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39
Certificate issuer:       /CN=A913075E/serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft
Manifest number:          A1
Signing time:             Wed 25 Mar 2026 06:30:31 +0000
Manifest this update:     Wed 25 Mar 2026 06:30:31 +0000
Manifest next update:     Wed 01 Apr 2026 06:30:31 +0000
Files and hashes:         1: ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl (hash: GxxSY0VJZ5SIChiJTyqYc5YBupy1I4q3saew4Mg1tJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl
                          rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913075E, serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39
        Validity
            Not Before: Mar 25 06:30:31 2026 GMT
            Not After : Apr  1 06:30:31 2026 GMT
        Subject: CN=69c38107-ef41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:44:34:31:fe:ef:dd:38:41:25:e3:40:2f:91:
                    08:f4:f6:02:a0:35:cd:1e:e3:de:9b:80:50:e9:3e:
                    75:cc:f3:8d:41:eb:07:2f:ef:a3:b6:a8:b5:85:72:
                    21:10:6f:bb:f9:a3:0b:02:77:aa:db:e5:67:c1:1e:
                    41:d0:66:c5:96:59:73:89:0f:31:1b:1f:bb:47:1f:
                    94:ca:47:a1:a7:bf:ff:1d:bd:8f:5c:5c:98:60:5f:
                    bd:81:50:85:8a:d8:ea:df:fe:4e:86:43:ac:d3:95:
                    b7:0c:32:74:05:ac:4e:ed:31:04:1a:81:fc:e2:d4:
                    56:c0:a0:9d:f1:6c:d8:ca:10:f4:7c:0a:aa:e6:4c:
                    6e:0f:5b:2c:13:2e:6c:aa:00:8e:51:15:45:ad:4a:
                    76:58:3d:bf:e4:dc:0f:35:fb:46:8c:dc:da:0b:7a:
                    78:30:89:d0:6a:b4:a8:ca:e6:d4:0c:c2:e2:f0:3a:
                    5a:e8:cb:de:38:08:af:3e:77:bc:d1:e0:f0:7f:02:
                    9c:a8:ba:f1:7c:4c:ee:dd:8b:aa:a6:7d:0d:cd:d2:
                    b5:d3:10:e2:60:70:49:b9:2f:1a:40:e8:0d:06:5e:
                    bb:d8:93:85:e2:1d:fb:06:7c:79:87:7c:9d:de:1d:
                    ae:c3:16:b1:59:55:82:5a:a8:b6:24:87:f7:a2:e4:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8C:C0:C9:49:A5:BA:6C:93:A5:2B:BF:0A:4D:E1:B5:4E:F3:8B:94
            X509v3 Authority Key Identifier:
                keyid:67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f1:46:9e:9e:91:da:6d:ba:bd:df:da:ea:6f:73:7c:08:98:
         f8:5a:a0:2a:80:a7:32:50:ca:b0:f0:e0:26:2b:c6:32:ee:88:
         84:c5:67:47:90:75:e2:26:5e:3c:94:de:d5:ee:2c:fc:27:df:
         6c:1d:6c:ee:a7:85:31:b2:3d:82:a2:95:14:09:51:3c:74:49:
         88:7a:f1:c5:12:e4:81:ac:c8:8a:f5:b2:e5:4e:93:f8:71:03:
         d8:d0:1c:ea:ac:d9:24:87:1a:82:87:56:ce:1b:71:8c:ab:9b:
         14:55:8d:49:5e:1a:e8:8a:c0:40:8c:c5:29:fd:3f:ec:0d:d1:
         e0:06:8d:84:a5:3d:ae:a6:06:8a:b8:5c:7d:1e:d9:7d:5a:3b:
         0d:8b:a3:32:1b:13:23:94:dd:50:5f:a5:14:b5:72:36:62:cb:
         1e:d1:17:1d:96:e4:d0:fa:ba:84:08:c5:95:f9:98:b7:e2:a9:
         bc:70:9b:2f:4f:02:5b:de:b5:ba:a8:38:a5:09:55:77:8e:9f:
         f3:b6:11:39:73:a6:c9:95:29:98:47:81:f3:83:e3:4b:d5:77:
         a9:0b:41:e6:d1:ca:61:5f:4a:92:46:d8:3e:e8:b4:7e:d1:10:
         8d:82:39:28:04:38:c4:cc:db:8b:9e:2a:47:91:27:db:a5:56:
         b0:6d:ea:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:19 2026 by rpki-client