Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
File:                     Z0fEVgFDfWEgWyv7QGfO0i6358E.mft (raw, json)
Hash identifier:          FuRJQDtF6el3SkfQ+N1DNNLOh79ViNbue/PkzeWwhxY=
Subject key identifier:   64:41:B7:29:77:0F:B6:1E:6F:E3:7C:F9:6C:B2:F4:D3:3A:4E:01:94
Authority key identifier: 67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1
Certificate issuer:       /CN=A914AA99/serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
Manifest number:          45
Signing time:             Wed 25 Mar 2026 07:32:15 +0000
Manifest this update:     Wed 25 Mar 2026 07:32:15 +0000
Manifest next update:     Wed 01 Apr 2026 07:32:15 +0000
Files and hashes:         1: Z0fEVgFDfWEgWyv7QGfO0i6358E.crl (hash: lhggjRMBFrpmwWLNCIFJF7V1dHJXs2j8EOipyaKRPHQ=)
                          2: 734D9ACCC2D711F09CE49A22C4F9AE02.roa (hash: DigoBL3jZPsvK4vfvJdvl7CVTthXEYN0He/kSRgVttQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl
                          rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AA99, serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
        Validity
            Not Before: Mar 25 07:32:15 2026 GMT
            Not After : Apr  1 07:32:15 2026 GMT
        Subject: CN=69c38f7f-4a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:ba:e4:a6:99:2e:14:ee:ef:01:27:ce:d2:
                    fd:d4:9e:7a:b6:e0:f5:0c:ad:05:f6:3f:c4:89:7a:
                    00:71:34:91:41:fc:55:f1:ef:a9:21:84:a5:66:75:
                    b7:bc:1b:ce:98:5c:9e:4f:37:56:5e:13:ce:5a:77:
                    f7:3a:dd:d9:30:da:9a:e8:46:3b:36:7c:2c:e1:c9:
                    34:62:f6:a1:d2:25:2c:c0:57:6b:17:7d:0a:f1:d3:
                    ed:17:d4:2d:ea:35:0b:b2:1d:18:d5:29:89:b1:b6:
                    5e:37:d4:a8:bb:ae:73:2d:11:14:39:30:af:ed:e3:
                    99:0e:9d:0d:65:8b:95:9e:74:99:83:20:79:98:0f:
                    2b:70:11:5c:fd:2d:a1:85:cf:78:48:cd:da:9f:81:
                    b4:7f:90:cb:76:60:8a:5c:b9:f4:e9:fe:26:49:e2:
                    6c:77:77:33:f4:94:8b:51:0f:e2:dd:8e:9e:67:17:
                    47:fd:ba:8a:4c:00:47:8d:f2:99:c8:ba:31:a3:9f:
                    8e:da:af:47:3b:d5:54:2f:ed:8e:f2:f0:23:2c:2f:
                    53:51:47:53:50:46:36:8a:a0:28:db:d8:7e:4b:3f:
                    78:e1:a1:76:17:52:c3:9e:5e:ae:4c:69:3f:15:54:
                    a0:b9:de:eb:3f:52:19:93:82:f1:64:27:51:76:22:
                    3c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:41:B7:29:77:0F:B6:1E:6F:E3:7C:F9:6C:B2:F4:D3:3A:4E:01:94
            X509v3 Authority Key Identifier:
                keyid:67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c7:b8:c6:25:48:3c:22:c3:aa:01:86:f6:8f:62:7a:33:26:
         eb:10:56:57:9d:c6:78:bc:f8:b9:b0:da:f0:d5:92:04:7f:06:
         e4:08:72:ba:f6:83:e6:a6:7d:71:cb:31:a4:f6:4f:61:90:d6:
         92:8a:80:b4:11:a3:6c:bf:c9:c9:6d:64:f8:bb:a7:89:60:2e:
         02:fa:c2:c7:31:8b:51:21:d3:90:a6:dc:3e:36:ce:f2:e0:a7:
         00:23:c3:5d:4e:cf:f5:24:21:04:f2:dc:27:5b:17:5b:cd:00:
         f1:91:27:ed:a8:a6:77:05:41:00:25:b2:a0:5f:e1:2d:38:03:
         76:75:63:af:d1:4e:29:0c:6d:74:93:78:4d:d2:bb:58:9a:df:
         c5:80:8e:3d:f1:e7:d6:6e:0c:05:3b:15:bf:7e:58:5b:4b:85:
         e2:85:b3:ed:73:b1:9f:97:db:69:37:33:e1:cf:fe:6f:11:15:
         43:b3:0e:d6:76:d0:b7:e6:39:c8:47:cf:01:56:05:20:3b:d0:
         77:79:7a:d0:99:9d:b9:ef:55:b4:4e:40:a3:00:51:34:26:7f:
         af:fe:25:19:82:73:5d:7b:ea:ed:0c:42:c7:3f:ae:bb:cc:6c:
         ee:85:c2:7d:c4:35:ee:e1:1b:c0:00:1d:1f:86:29:33:6f:93:
         9e:fc:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:38:09 2026 by rpki-client