Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File:                     Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier:          HusNSkCTT4CQtDbDUEDREUMm/761jPLV9FNylFw4D4U=
Subject key identifier:   CE:BD:60:E2:38:25:23:63:E6:93:FA:0F:CB:A1:19:10:AC:2B:76:0F
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer:       /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial:       0821
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number:          0811
Signing time:             Tue 24 Mar 2026 20:51:02 +0000
Manifest this update:     Tue 24 Mar 2026 20:51:02 +0000
Manifest next update:     Tue 31 Mar 2026 20:51:02 +0000
Files and hashes:         1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: 5BypDzHl4+Dnl2aUZtMTK/XgHzXIeubjsWamSpuB03s=)
                          2: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: U1wbDqDunlaKuYqjqIcFyq/5UG7Pub5IpvN+buNY/uw=)
                          3: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: c2NbvzRPb3OX8yUH2vwhzYHB05TOx09RU6yJUt7vO/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
                          rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:51:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2081 (0x821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
        Validity
            Not Before: Mar 24 20:51:02 2026 GMT
            Not After : Mar 31 20:51:02 2026 GMT
        Subject: CN=69c2f936-945a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:57:48:be:91:ee:08:aa:3f:ee:7a:ad:87:
                    f2:45:cf:57:2c:5c:de:84:fd:b5:70:da:2d:6f:02:
                    2b:1b:ff:d4:dc:c3:4b:2e:e2:a9:9f:6c:21:3e:d4:
                    f9:85:9d:12:aa:16:4d:5b:7b:68:0c:45:64:0e:35:
                    e1:7e:0f:2b:4d:be:1d:02:06:ab:1c:05:a3:bb:a7:
                    ab:62:d5:49:f4:7c:51:bc:4c:a6:6c:5a:6c:c1:d7:
                    9a:ab:7b:0c:a9:bf:17:92:7b:8d:c7:f4:b2:d8:6c:
                    54:c1:f9:da:af:be:cb:26:d0:bb:57:7e:cc:99:60:
                    52:2e:66:4a:55:5c:89:c2:d7:4e:a7:61:cf:54:d1:
                    87:72:db:7a:41:10:ac:d6:51:83:cb:5e:eb:98:09:
                    98:2f:f3:15:46:48:9b:5f:09:7a:c5:34:55:20:a0:
                    44:a0:25:48:60:eb:f4:9a:db:cd:a3:97:c5:28:18:
                    8f:13:5e:e9:a1:ce:bc:3e:6c:40:97:7d:97:6a:c1:
                    d7:36:7c:c9:50:ec:38:43:6a:a6:ec:f9:20:e8:36:
                    cb:ec:a2:82:69:2a:77:2c:30:ed:63:b8:ac:f1:ac:
                    49:45:d4:56:e9:d0:47:72:28:9b:ea:a0:c4:97:34:
                    d1:36:b9:4b:b2:24:24:00:fc:b3:3c:78:7d:63:99:
                    a9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BD:60:E2:38:25:23:63:E6:93:FA:0F:CB:A1:19:10:AC:2B:76:0F
            X509v3 Authority Key Identifier:
                keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b1:0e:c4:ab:23:04:87:1b:9a:e6:3d:6d:0c:c9:d1:8a:0f:
         e0:34:53:97:24:6e:35:40:a7:05:42:7a:23:d0:5c:45:03:15:
         a0:1e:83:63:90:5c:71:bb:fc:06:57:91:30:e9:2e:4c:dc:91:
         e0:fa:5f:4d:1b:72:fc:34:93:0b:52:19:ed:6a:9a:9b:9c:17:
         2c:b5:f2:8a:11:29:7b:3b:b8:1b:7e:09:2f:57:2a:5a:41:28:
         4a:82:5d:e6:5d:cc:d9:dd:68:39:bc:a8:0b:18:40:51:02:28:
         d6:49:b4:93:a2:03:ab:aa:21:d1:34:b7:96:3c:86:f7:3f:f7:
         63:ee:94:cc:c2:34:ed:07:09:53:9c:02:47:66:16:d3:ea:6f:
         6c:8b:dd:c2:3e:5a:07:f8:dd:ba:a7:2c:c7:a3:25:fb:ec:95:
         9e:45:ef:8f:9e:d8:01:a9:d5:8e:c5:e2:ef:5e:dc:0d:d5:c9:
         24:7a:56:cb:f0:1a:07:10:12:d8:53:e6:f5:f4:c3:7c:1b:16:
         7c:af:f7:6b:42:9d:43:57:46:ed:5c:65:4c:3b:b8:89:af:17:
         30:f9:58:2c:f9:89:47:45:15:96:ae:15:67:c2:54:3e:fc:e6:
         1e:62:13:91:95:84:5e:8d:a7:75:f6:ef:cd:de:ce:32:25:b5:
         b4:36:c9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:51 2026 by rpki-client