Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
File:                     ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json)
Hash identifier:          kio3w+HImzSFwwRKBpFoPzPr6o6hGJl1u32IXzXZTz8=
Subject key identifier:   DD:4F:13:02:24:A8:99:C2:CC:36:D6:81:CB:A3:F5:A0:9E:F0:A2:D1
Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44
Certificate issuer:       /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
Certificate serial:       099D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
Manifest number:          099C
Signing time:             Tue 24 Mar 2026 19:45:05 +0000
Manifest this update:     Tue 24 Mar 2026 19:45:04 +0000
Manifest next update:     Tue 31 Mar 2026 19:45:04 +0000
Files and hashes:         1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: 7phiBLJ1mydXNHoK8x/iDET/h+X+P4qaXurquywwmp8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2461 (0x99d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444
        Validity
            Not Before: Mar 24 19:45:04 2026 GMT
            Not After : Mar 31 19:45:04 2026 GMT
        Subject: CN=69c2e9c0-4671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:fe:ea:38:93:c9:51:44:d7:5d:c2:60:23:
                    be:f4:90:a3:f1:7e:5f:a5:5b:7d:77:a5:83:ec:55:
                    d7:f3:f8:6f:1f:1c:c0:55:2e:f7:d2:52:a8:14:f2:
                    79:d1:ee:19:02:01:f0:5f:19:a9:82:ce:13:3a:0c:
                    a7:08:9a:dc:6c:fd:3e:74:c4:0f:f9:eb:5b:56:bd:
                    b7:93:70:41:f9:b7:7f:76:f2:21:77:a7:05:66:31:
                    f5:6f:c5:10:a6:c1:fd:a9:49:d2:bb:31:7c:45:13:
                    8d:82:ea:ca:3e:37:6b:e1:6d:a0:92:8d:6e:5b:e0:
                    03:32:6c:9f:9d:8a:2a:3d:c5:d8:8f:bc:62:de:91:
                    fa:82:3c:6f:47:e0:7c:a4:a1:52:f3:d4:71:22:2f:
                    f6:1d:ff:1f:78:f1:e0:26:32:88:e5:f9:07:6b:ac:
                    d8:dd:7c:e7:9f:7b:27:85:c2:b4:03:5e:58:b2:a4:
                    b7:db:bd:35:cc:89:a6:d7:95:c2:cf:ce:73:03:7f:
                    34:e2:8f:72:31:4e:da:a5:c4:6a:de:da:d6:ea:6e:
                    89:2b:c0:20:ed:e2:44:4e:a6:37:2d:25:39:fd:80:
                    5a:ca:a6:c5:be:01:b2:dc:28:95:fa:55:20:f9:e1:
                    bb:69:07:e7:a1:ed:28:7f:ee:98:a1:b7:a2:67:b3:
                    57:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4F:13:02:24:A8:99:C2:CC:36:D6:81:CB:A3:F5:A0:9E:F0:A2:D1
            X509v3 Authority Key Identifier:
                keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b0:b4:2d:96:1c:50:e4:02:a2:4c:46:a1:d6:da:4d:7a:97:
         d8:67:47:e2:ef:b0:6c:af:bf:f3:f1:d8:57:41:8f:5e:75:c4:
         40:9f:93:17:ec:f7:8c:8a:73:13:d2:ec:06:9f:14:5c:29:6b:
         dd:4f:79:3e:0b:af:45:3a:35:be:9c:91:dc:06:63:26:21:74:
         77:89:e6:65:a1:78:a0:19:79:32:b2:85:30:89:b3:db:1d:a6:
         50:27:95:33:b6:ab:d7:27:13:ef:71:62:db:3d:d3:e0:46:63:
         f0:6b:9a:69:80:3a:ff:0a:2d:95:ad:39:04:78:5b:08:43:65:
         76:f4:cd:ba:fc:2b:60:7e:48:68:ea:92:63:3b:74:78:46:54:
         f1:f6:68:96:17:2b:c5:41:48:48:ec:7d:c9:29:64:d3:ef:63:
         2f:d4:3f:79:6b:79:02:a1:68:ac:d9:e9:ac:f3:41:27:cd:92:
         f0:51:d5:5d:47:f4:02:6e:0d:fa:e7:16:67:5d:e4:78:07:ab:
         8c:0a:54:4c:da:00:14:1a:6d:92:f7:e3:d3:d0:3c:b5:24:53:
         ac:bd:7d:21:b8:e7:99:70:ee:2c:7d:4c:9e:a0:9a:df:75:41:
         38:18:a1:66:17:dd:e7:d1:5f:c1:ce:2e:88:32:da:ad:59:9e:
         d7:ca:7e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:42:48 2026 by rpki-client