Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
File:                     Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json)
Hash identifier:          IsWSTeHRe7KPKLclu7VV3yWXOtU9H0B91oDfLqTxVoI=
Subject key identifier:   65:38:4B:32:11:20:30:EA:04:54:AB:9E:A6:89:4F:E9:C6:08:9B:1C
Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D
Certificate issuer:       /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
Certificate serial:       1DB9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
Manifest number:          1DA9
Signing time:             Tue 24 Mar 2026 16:02:13 +0000
Manifest this update:     Tue 24 Mar 2026 16:02:12 +0000
Manifest next update:     Tue 31 Mar 2026 16:02:12 +0000
Files and hashes:         1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: mj/ygKbGpY4WHT6Hi+XAJcUrtfCByizJJ7PqGzXk+KA=)
                          2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: aoK1qMo+XLiglTyrOyoKUd3w0AOhsSnhUEAZl5VjK2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl
                          rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7609 (0x1db9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D
        Validity
            Not Before: Mar 24 16:02:12 2026 GMT
            Not After : Mar 31 16:02:12 2026 GMT
        Subject: CN=69c2b585-de7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:be:66:f1:39:a0:e4:ce:f6:de:cb:a9:aa:
                    b6:66:c3:31:5d:d1:46:87:cd:b5:12:27:ab:4e:f8:
                    b5:60:bc:6e:9d:3b:c9:f3:c9:e6:1f:b9:40:e9:dc:
                    53:63:33:cf:92:59:ed:f7:a6:f2:43:dd:32:b4:02:
                    b9:ca:5f:6f:b8:a9:8e:a5:24:8e:89:e6:4d:e1:fa:
                    4e:97:26:cb:a4:38:d3:1e:30:f0:51:e4:05:fe:17:
                    23:ba:d5:93:25:07:b7:a7:10:cd:2a:c9:95:82:1a:
                    54:de:b8:de:95:cf:95:18:cc:ef:7e:39:89:1e:43:
                    10:a9:c8:9b:f5:76:fc:3c:d4:86:60:92:30:cc:73:
                    79:c5:b3:36:52:be:34:a3:05:06:88:56:f2:94:2e:
                    ef:96:18:28:4e:77:56:1b:94:53:96:86:ed:91:0d:
                    c6:3e:00:4c:8c:0f:49:4b:9f:30:99:c8:a1:4f:f3:
                    19:ce:cc:39:77:1c:8f:8c:f2:fe:15:1c:aa:02:e1:
                    0c:32:5d:80:a9:6c:d2:72:0a:f8:8d:ec:12:45:22:
                    50:3f:e3:aa:d0:b3:d7:46:8d:23:d4:7b:6d:32:59:
                    26:00:9e:af:38:6f:5e:2d:2c:d1:74:2a:ac:7e:b7:
                    a9:6e:c4:c0:6f:a7:08:cf:aa:48:a3:dd:ca:68:cc:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:38:4B:32:11:20:30:EA:04:54:AB:9E:A6:89:4F:E9:C6:08:9B:1C
            X509v3 Authority Key Identifier:
                keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4c:cc:57:2e:1b:9c:9d:3d:d7:8c:e7:1d:79:07:ba:2b:85:
         47:04:ef:a9:db:93:cb:cb:88:0d:be:9d:f8:6d:6d:b7:cb:cf:
         1c:1d:6d:8d:9d:47:03:fe:5c:78:aa:aa:6f:4e:22:31:f9:88:
         a4:e8:0a:62:cd:ca:41:cc:44:e5:19:4d:da:00:26:05:da:63:
         8e:7b:72:d3:a6:ec:2b:9e:4b:7c:df:56:d2:33:15:5b:df:fc:
         b6:b4:dc:42:68:5a:fc:1e:af:16:20:f2:d8:61:91:a3:62:40:
         4a:d6:33:40:e6:33:11:24:8d:da:2c:b1:e5:e5:ba:1b:95:c5:
         a6:cf:a9:9d:23:70:19:42:17:e9:08:06:c1:bf:97:85:d4:fa:
         f7:dd:c9:e2:a8:ca:42:8b:cb:d9:8c:68:c7:50:63:9d:aa:33:
         9a:d7:4e:90:63:81:ac:0d:a4:eb:ca:72:0a:98:7e:29:5e:d4:
         5c:cd:8f:0d:2c:28:fd:1d:37:6d:b4:b0:75:55:74:35:39:66:
         45:b1:4d:19:ae:2d:c4:7d:81:5f:d5:ce:41:e8:76:58:01:10:
         7e:6f:06:98:02:8c:b2:53:34:36:01:00:a4:a2:b1:44:41:8d:
         cd:4a:53:6a:b4:ac:2f:7f:2d:52:2c:79:15:86:aa:4b:15:26:
         12:34:c1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:50 2026 by rpki-client