Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
File:                     zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json)
Hash identifier:          oraAro2cY9l1KUlAAnIIehXSoaUhEuu2UA+pr7TCQk8=
Subject key identifier:   BD:0B:E0:58:2D:82:6D:74:15:AA:7B:04:19:41:1E:A9:9B:EE:1E:8B
Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02
Certificate issuer:       /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
Manifest number:          B6
Signing time:             Wed 25 Mar 2026 06:16:56 +0000
Manifest this update:     Wed 25 Mar 2026 06:16:56 +0000
Manifest next update:     Wed 01 Apr 2026 06:16:56 +0000
Files and hashes:         1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: rzw34LSPK+EiGJ94GTXzCHtJLDzF06S1cMZQNHTLMDk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl
                          rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02
        Validity
            Not Before: Mar 25 06:16:56 2026 GMT
            Not After : Apr  1 06:16:56 2026 GMT
        Subject: CN=69c37dd8-153c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:e1:ee:8a:5f:59:64:6f:43:55:bc:23:ca:
                    c5:16:8f:6c:87:9a:7e:d0:d6:dd:e9:b3:21:76:fa:
                    2c:3c:2d:b6:4e:0b:ec:05:65:46:24:46:e6:ba:47:
                    44:48:aa:2d:53:67:81:52:79:db:1a:55:c6:3d:1c:
                    68:c7:4a:89:3d:86:e0:ce:49:f7:e7:45:91:e8:ae:
                    56:90:79:2e:71:a8:0b:f5:fa:a7:d1:1f:5e:ec:82:
                    24:11:07:dc:fc:76:3b:99:c8:4e:cd:a2:57:f1:95:
                    96:2e:f0:fe:c7:9d:2f:9a:0a:61:f2:aa:f4:7e:f4:
                    45:95:6a:15:ae:fb:ef:eb:80:83:6f:51:64:1d:c2:
                    d7:07:b7:6b:fa:47:8c:82:c9:38:c2:75:d8:84:3a:
                    e6:64:6a:9a:9f:e8:a6:ea:5b:52:d9:96:69:07:a0:
                    84:37:cc:66:41:c8:9d:74:5b:06:7f:03:91:4e:bb:
                    a0:79:5d:e2:8d:e4:bf:73:bf:a8:c5:47:01:87:0d:
                    bc:d1:52:86:6a:87:f2:63:7c:92:37:5e:51:20:64:
                    21:6d:84:e6:2b:8f:76:35:3d:0d:10:d1:d1:a6:75:
                    6c:fa:ad:2a:5c:1c:a7:f9:5e:db:f9:10:53:45:6e:
                    9e:97:1a:48:ee:5d:06:a3:e2:d6:f8:9a:ed:72:c1:
                    fb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0B:E0:58:2D:82:6D:74:15:AA:7B:04:19:41:1E:A9:9B:EE:1E:8B
            X509v3 Authority Key Identifier:
                keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ab:0c:13:b3:c8:fb:22:63:e2:97:5c:93:45:6a:80:70:6e:
         90:8e:0c:23:cf:25:6e:73:4a:b9:a6:58:65:b3:94:43:52:74:
         91:9a:fa:d1:6c:28:f7:cf:56:1b:35:29:41:a5:a5:1f:c2:0c:
         3c:80:ca:f4:80:b7:3d:9c:29:1c:52:c5:8f:91:31:80:c2:17:
         7b:03:5d:70:6d:dd:56:3e:e1:75:95:b3:0a:81:df:1c:d7:28:
         79:fa:2f:a6:b2:63:d0:91:88:73:88:e3:8a:38:2f:b4:a1:9f:
         d4:52:73:d5:ea:91:fb:5e:8b:62:5d:7c:50:eb:85:bf:e8:48:
         3b:8d:7a:e9:56:23:af:b0:98:7f:a9:34:6b:1c:57:80:99:fc:
         17:51:56:3e:71:d8:4e:ce:27:86:f0:3f:82:75:1e:58:69:5e:
         95:93:7a:cb:5d:60:8c:7c:28:91:21:96:52:96:48:f9:c2:57:
         eb:77:99:6f:9f:56:a5:11:d1:b7:b3:a4:21:47:bd:ca:45:14:
         02:6a:64:f8:fa:92:73:9f:0e:4f:d7:06:46:74:3e:67:ee:fd:
         af:de:37:2e:a3:44:d5:be:60:41:f1:4b:7f:c3:3a:08:63:37:
         1a:1e:8c:2e:1b:20:5e:e9:b4:0e:30:b8:ec:b3:dd:1c:31:6e:
         36:92:ac:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:17 2026 by rpki-client