Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
File:                     Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json)
Hash identifier:          9B8gsqEu6juDT74/j2jfrTLARNktudymMT3uLe5bPcY=
Subject key identifier:   3B:3C:39:01:4E:E1:AC:71:32:E3:95:64:2F:CE:83:0E:B8:1F:91:7A
Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
Certificate issuer:       /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Certificate serial:       09B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
Manifest number:          09AD
Signing time:             Tue 24 Mar 2026 19:43:55 +0000
Manifest this update:     Tue 24 Mar 2026 19:43:55 +0000
Manifest next update:     Tue 31 Mar 2026 19:43:55 +0000
Files and hashes:         1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: /Qrqxz9ECefCxbMJjSEIGZhrUxrnhEQncfRn7llf/zc=)
                          2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: vhdqqkcNqmMd48JT0EbRdWraEL2WjKdJfgJwZYRmNdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
                          rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2485 (0x9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
        Validity
            Not Before: Mar 24 19:43:55 2026 GMT
            Not After : Mar 31 19:43:55 2026 GMT
        Subject: CN=69c2e97b-1339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:48:78:77:ae:9e:dc:42:1d:7e:eb:92:66:
                    f6:28:95:c4:88:89:12:1c:8e:11:70:8a:55:b3:73:
                    5d:c8:e3:74:f3:fa:7f:49:5d:c8:24:47:6a:3f:bf:
                    d8:16:4e:08:41:2d:6d:44:c4:1d:ea:04:e2:04:eb:
                    53:5a:bb:c9:35:c2:82:f2:3c:df:fd:c7:c4:98:30:
                    d6:48:7b:d9:d0:e9:85:d4:fe:4d:ab:bd:3f:62:29:
                    54:40:b2:6f:0f:f6:d6:a4:6e:7f:a4:2f:29:90:c9:
                    7a:bf:9a:3c:6e:f1:6a:06:33:c0:ee:61:4b:9e:38:
                    39:19:03:d7:0c:90:39:14:db:df:de:ef:c5:8a:3c:
                    85:23:25:74:93:fc:31:9a:f0:f2:f8:3e:ca:71:d1:
                    fd:ff:fd:90:7b:61:70:de:a8:6d:83:77:a5:4d:ec:
                    62:e5:3b:60:8e:6c:96:6d:81:9c:24:f5:66:18:fe:
                    13:59:d5:2a:3b:93:d5:07:02:18:99:6e:f3:03:0d:
                    6c:56:48:b4:cf:a6:2e:bf:9c:4b:f2:e5:d2:9b:77:
                    a4:7b:72:65:79:92:91:fa:71:3e:78:34:38:a7:10:
                    2e:08:25:92:00:3c:d2:eb:fb:ae:a2:70:2f:23:68:
                    33:d0:60:3b:cb:e4:00:7e:8c:c5:0e:cb:a3:9f:29:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3C:39:01:4E:E1:AC:71:32:E3:95:64:2F:CE:83:0E:B8:1F:91:7A
            X509v3 Authority Key Identifier:
                keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:70:da:ff:d2:ec:33:28:db:fd:c8:f2:8f:ee:94:87:45:25:
         cd:00:76:06:4c:f1:fd:08:75:34:3b:a9:af:74:a3:1b:8f:49:
         06:c7:ea:b9:0d:27:00:2c:50:b6:67:95:b3:c9:75:76:2b:9a:
         41:b7:61:bd:37:16:13:22:89:46:43:e2:33:29:8a:cd:60:85:
         2f:57:4d:20:6a:10:41:12:98:5e:96:30:f7:d0:40:09:4d:a3:
         16:1b:4f:4e:14:ba:73:73:d4:96:d4:2e:1c:f9:25:1f:5b:53:
         3f:cc:24:2f:45:94:92:d7:b5:97:18:ae:63:ea:4c:ea:bf:37:
         0e:49:a5:a5:72:40:a9:2f:cd:28:6f:f0:49:77:e8:06:fb:99:
         60:d7:dc:f1:d8:1c:1f:b9:b8:08:14:81:02:56:5c:06:e7:91:
         b0:0a:3a:ff:f4:db:88:cb:6f:c3:88:dc:e2:d2:6f:a2:8d:d1:
         32:fa:9b:af:2f:eb:01:cf:c6:dd:72:78:d2:b2:f1:dd:b4:4d:
         73:61:7a:4c:d3:4c:23:f8:b5:19:83:67:5b:cb:d8:7d:31:0c:
         5a:81:45:0c:69:d1:51:74:08:d2:90:3f:55:9a:72:c8:9a:ea:
         0f:bc:74:a5:b4:ab:c5:31:12:de:43:39:5e:33:36:6d:83:95:
         71:ce:92:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:54 2026 by rpki-client