Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft
File:                     ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft (raw, json)
Hash identifier:          2lysOayq7yc2WqBWvHSYP4vE4YbBFclXMFLa4QNR8Jc=
Subject key identifier:   D8:B5:BA:69:72:21:28:2B:4F:55:B5:1D:D7:0A:0E:89:A4:EE:47:48
Authority key identifier: 67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84
Certificate issuer:       /CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84
Certificate serial:       06DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft
Manifest number:          06D4
Signing time:             Tue 24 Mar 2026 21:56:39 +0000
Manifest this update:     Tue 24 Mar 2026 21:56:38 +0000
Manifest next update:     Tue 31 Mar 2026 21:56:38 +0000
Files and hashes:         1: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl (hash: uOJgeLDQYbpNee5CqvA9lxkL3k9c4V4rb4IljXLCmXw=)
                          2: BA7F7BA892C211EBBBF0055FC4F9AE02.roa (hash: YUrZLOlQIbVbSF0QAghzTfJkX8TRjZjNaS+pSJvcEdA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1756 (0x6dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7150, serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84
        Validity
            Not Before: Mar 24 21:56:38 2026 GMT
            Not After : Mar 31 21:56:38 2026 GMT
        Subject: CN=69c30897-96e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:e1:a8:97:5b:14:e0:2e:aa:1a:5f:67:2a:
                    14:31:26:43:c1:ca:07:cf:ac:a3:73:f2:db:1d:09:
                    c4:cb:2d:90:ee:f9:ed:12:e1:16:52:98:ed:ed:99:
                    b7:d8:56:e5:23:bb:32:bd:d6:0a:96:cb:dc:10:8e:
                    93:73:f6:e1:4a:85:c5:a7:26:f1:69:ef:d3:68:ca:
                    fc:62:46:b7:cb:49:13:45:0d:fb:36:cf:63:aa:3c:
                    45:c8:5b:ad:74:69:32:52:d1:95:3d:53:64:6a:bb:
                    d3:1d:54:cb:e7:02:7d:80:cb:09:cd:01:76:35:a0:
                    e9:07:f8:b6:65:db:61:96:e7:78:7c:bd:3c:4c:47:
                    87:ad:e6:26:13:92:43:e5:22:15:a7:3f:f0:d4:c0:
                    5b:ea:24:66:a6:da:53:83:b7:d9:1d:eb:95:30:08:
                    68:4d:d2:41:35:77:d5:c2:94:f8:b6:70:6a:37:14:
                    8c:62:ed:b2:f0:8a:84:ff:5c:9a:b8:0d:ee:63:e5:
                    13:8e:08:95:20:22:40:31:5f:31:6f:56:68:cc:47:
                    6b:c6:73:88:22:b5:a8:c1:be:66:0b:2f:b0:41:65:
                    fd:f9:09:40:bd:b3:b7:ab:6d:ba:c7:6b:b6:f7:1b:
                    e5:67:37:f1:61:e6:9b:ca:76:1c:29:5d:a6:28:2c:
                    b3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B5:BA:69:72:21:28:2B:4F:55:B5:1D:D7:0A:0E:89:A4:EE:47:48
            X509v3 Authority Key Identifier:
                keyid:67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0c:2b:bf:04:94:a3:93:41:75:d0:7f:19:08:8a:ef:2b:20:
         ef:87:ee:ba:e5:75:a2:49:d9:c2:5d:3b:fe:10:0d:ab:4b:3d:
         33:49:b1:66:fd:e0:d1:e0:b2:21:bd:ed:5c:12:a4:d6:f7:55:
         0c:85:03:e0:5f:ea:71:82:17:13:ee:a6:5a:89:a0:eb:14:bb:
         fa:a7:6e:00:d8:ab:12:fc:5b:ca:52:c1:fd:ec:e1:68:42:8f:
         85:6e:4a:dd:f6:0e:56:5a:08:67:da:7f:60:ee:69:1f:66:c1:
         81:c3:32:4a:e2:ae:59:ae:9a:0f:e9:7d:bb:45:85:22:db:66:
         11:c0:01:8d:0e:be:22:4d:49:33:47:80:6b:66:ab:1f:c8:8d:
         be:30:3e:63:18:e6:28:25:88:3b:cc:f4:86:4f:1b:b6:76:4c:
         a8:94:23:0d:40:a7:52:11:16:53:2b:9e:de:19:5e:3d:5b:d8:
         5d:f7:36:07:7b:1a:ed:00:5b:0b:86:dc:0a:26:1d:b5:7c:9b:
         e5:ff:60:c7:20:4b:f6:95:f6:76:78:27:4c:38:84:05:24:76:
         ea:86:ad:60:aa:4d:0f:39:90:bd:41:c1:a0:4f:fd:da:57:04:
         3f:68:47:f8:b2:46:2b:00:ab:b2:22:31:c0:85:d2:47:dc:94:
         cd:1c:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:38 2026 by rpki-client