Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
File:                     zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json)
Hash identifier:          0KhQs4ANkF4rEUKj5kH1xAGoGa1wxICcRoU9UJCfTlg=
Subject key identifier:   87:33:B7:81:2F:24:EE:B2:6E:E4:B0:D8:CE:81:39:ED:CB:B4:72:BC
Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
Certificate issuer:       /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
Manifest number:          012B
Signing time:             Wed 25 Mar 2026 04:50:10 +0000
Manifest this update:     Wed 25 Mar 2026 04:50:09 +0000
Manifest next update:     Wed 01 Apr 2026 04:50:09 +0000
Files and hashes:         1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: va5f9wiYxH5UiN8fxan0ka2v8q+ZRENqwZFeoZ1mHpg=)
                          2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: CXpCRLt60Gekc/Mc5tcE7Fr8HBob962lZTc++9cwTzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl
                          rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4C1B, serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
        Validity
            Not Before: Mar 25 04:50:09 2026 GMT
            Not After : Apr  1 04:50:09 2026 GMT
        Subject: CN=69c36982-589c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:fe:99:10:bb:e5:30:ac:7c:7b:1d:61:b7:
                    0e:dd:8d:44:8f:1d:97:0e:dc:7d:7d:a0:c3:8b:9d:
                    2a:0b:1d:1b:24:1a:f7:26:b4:52:33:a0:88:6d:03:
                    1b:65:4d:ea:46:8d:98:3d:67:01:6d:44:05:1b:0d:
                    84:b4:12:f6:b8:77:88:bc:6a:f8:24:95:f3:d3:bb:
                    af:6c:87:c9:ea:1a:e8:78:12:90:fa:01:ad:9b:a8:
                    49:b3:c7:01:f5:ce:0b:cd:e5:dd:99:e9:83:e1:86:
                    ec:82:55:f1:44:05:fc:8b:3d:3e:6c:c7:26:ce:9f:
                    e4:6b:5c:35:6e:dd:cf:3e:2f:1a:3f:c1:e7:d5:46:
                    56:e7:3d:84:23:e5:dc:a2:37:09:7f:87:57:76:31:
                    fc:c9:6d:bd:bc:44:ab:3d:50:c3:55:7c:c3:97:cd:
                    ae:b8:f6:9c:42:a1:01:14:95:52:0f:37:27:83:d1:
                    e9:82:e2:9e:69:5e:7f:63:e9:62:14:c4:24:0e:38:
                    14:89:50:5a:48:3f:6e:74:f5:8b:c6:b5:cc:62:b9:
                    58:cf:1e:bf:ca:32:bd:37:7a:fc:b3:26:e7:94:fe:
                    81:4e:b6:ca:48:c9:cb:a1:05:33:57:70:d7:fc:4b:
                    40:cf:1c:cd:67:90:68:31:92:44:be:86:d0:f9:cd:
                    85:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:33:B7:81:2F:24:EE:B2:6E:E4:B0:D8:CE:81:39:ED:CB:B4:72:BC
            X509v3 Authority Key Identifier:
                keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f9:b6:d4:8c:1a:6a:a6:71:82:55:df:20:a6:23:42:cf:49:
         85:dd:49:9a:2f:d2:19:41:ff:67:0c:57:8c:13:ad:18:36:1f:
         ca:11:bd:0f:dc:c0:e8:bf:f5:74:6e:d6:17:95:f1:e9:78:b5:
         d9:22:94:cf:3f:25:2b:b9:fb:b1:ce:af:13:36:3c:53:5c:20:
         a2:03:5a:25:52:69:9f:d0:2f:02:80:b3:11:17:cb:12:1d:0a:
         88:7e:7a:d7:5e:11:30:96:eb:7b:87:7e:98:9b:f2:c6:f8:e7:
         c7:54:61:11:9b:b5:2c:e3:93:be:20:62:c9:b9:d1:dd:ea:b2:
         d2:bf:45:63:6d:39:a7:da:ad:6c:c9:87:5d:51:91:72:52:03:
         87:a1:18:af:91:fd:69:19:ae:84:88:3b:c5:0f:61:8d:bc:bf:
         a8:ab:db:06:c3:7b:7b:bd:e4:56:90:08:f6:4e:6a:77:35:52:
         88:0c:81:0f:14:15:9e:97:2c:c4:8f:42:62:de:d6:38:57:d3:
         6d:8e:11:8f:03:18:7d:9d:f6:0e:28:d2:7a:8f:32:8e:73:7f:
         f5:45:f0:14:87:38:c9:2c:8e:f1:9e:b5:03:34:6a:18:20:9a:
         45:ba:80:df:ce:45:b2:67:d2:0b:75:de:4a:1a:a9:2a:1f:56:
         84:f6:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:23 2026 by rpki-client