Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
File:                     mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft (raw, json)
Hash identifier:          O1M50X0xS2RQVDTipCor36SnbQuX8pm5zzPPnT8f2Is=
Subject key identifier:   18:89:20:85:ED:FA:35:39:E5:D0:4D:B5:70:9F:1B:66:30:53:A6:7F
Authority key identifier: 9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4
Certificate issuer:       /CN=A9196492/serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4
Certificate serial:       07C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
Manifest number:          07B8
Signing time:             Tue 24 Mar 2026 21:09:11 +0000
Manifest this update:     Tue 24 Mar 2026 21:09:10 +0000
Manifest next update:     Tue 31 Mar 2026 21:09:10 +0000
Files and hashes:         1: mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl (hash: urPB/XfjAZIKO+lr1sKlKkPHK0e1LRLPwPDWD+ckwTg=)
                          2: 20DAF9FA384011EBA5FE7359C4F9AE02.roa (hash: VU8EGqA6/9L/gVHdKQWryNGUy+eypSc63U+ICibk+rs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl
                          rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1984 (0x7c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196492, serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4
        Validity
            Not Before: Mar 24 21:09:10 2026 GMT
            Not After : Mar 31 21:09:10 2026 GMT
        Subject: CN=69c2fd77-c0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ca:3d:87:61:04:dd:5f:fe:7f:b1:3e:37:ec:
                    a2:fd:ac:a3:fb:96:0a:e8:88:68:8c:91:3d:5a:00:
                    c3:84:af:3a:12:fb:e8:4b:04:a9:2e:67:f1:d9:b2:
                    e5:23:67:42:33:c4:44:1f:8b:4f:f6:b3:d4:6e:e0:
                    24:07:6e:02:24:5b:26:39:29:8d:ba:c2:da:d4:37:
                    36:51:a7:29:79:42:c2:58:22:2c:30:14:00:2c:c0:
                    14:6b:f3:7e:8f:95:50:1f:a0:7c:84:92:3e:7c:c2:
                    2c:14:d9:bc:87:8e:11:f5:36:f9:5e:dd:84:00:7f:
                    d5:d8:b3:34:bc:5f:17:1f:f2:ca:a0:9e:a4:a6:73:
                    fe:58:13:0c:12:91:16:81:b2:18:a7:f3:07:2c:e9:
                    bc:38:bc:6d:82:d4:fd:48:f2:28:32:f2:0f:a0:9c:
                    87:13:20:ca:08:9d:0e:cd:72:19:62:de:f6:7e:d4:
                    d6:70:84:bf:3c:c4:05:aa:cc:e1:72:40:5f:20:cb:
                    e9:eb:d6:8f:82:55:ff:5e:f3:6f:51:50:88:6a:a2:
                    49:86:5c:6f:e7:5c:a5:9e:6c:4f:38:74:4c:41:de:
                    a7:4f:49:00:38:61:13:79:30:0d:77:d9:68:7d:be:
                    cc:4f:0c:36:e9:d9:95:1b:44:24:54:9a:3d:c2:38:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:89:20:85:ED:FA:35:39:E5:D0:4D:B5:70:9F:1B:66:30:53:A6:7F
            X509v3 Authority Key Identifier:
                keyid:9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ed:5e:d3:b3:fc:bb:80:de:ce:5c:45:2b:7c:39:97:bc:d8:
         5c:b1:5d:20:a5:0a:ab:75:8b:d7:1e:b9:84:7f:27:8a:d0:47:
         04:23:c1:2c:ca:f5:37:03:fe:c3:69:72:5f:a1:89:c4:8e:60:
         40:61:b5:19:00:dc:35:e2:34:4d:8e:0c:fa:70:8a:93:71:a6:
         0e:7b:6c:aa:b9:04:19:95:ab:4f:9e:1d:14:ad:5f:b2:53:ab:
         91:52:27:2b:8d:b2:f9:18:2d:39:0d:48:f7:ed:8e:f3:f3:03:
         c0:d3:d9:78:6f:b6:da:55:84:2b:19:41:fe:f6:43:c8:a2:dd:
         c1:7b:28:1c:e7:8a:85:59:b9:99:d4:50:1a:f9:7d:fa:98:4b:
         8f:5d:f8:71:52:65:cf:96:d2:05:a2:0d:63:f2:89:fe:5f:0b:
         3c:ce:8c:99:fd:28:e5:55:04:0e:ad:cc:b1:24:a7:c8:cb:a3:
         50:d6:35:62:89:08:f9:57:b8:93:6a:1f:4f:9b:77:aa:8a:d4:
         8c:ad:d2:18:2d:d3:55:4e:18:8e:9c:06:d1:b3:8c:40:b5:4d:
         ae:96:82:78:b8:38:8f:9e:c4:62:5c:78:91:f6:4b:f5:4e:0e:
         14:a6:68:de:ca:3a:d5:3a:8e:9c:14:c7:a6:cc:20:ce:2d:38:
         08:16:23:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:54 2026 by rpki-client