Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
File:                     zoytNWIakBLECzY3U3ykDj0H6M8.mft (raw, json)
Hash identifier:          fNpAChNTgmX5aSPsDkmfemsfV8USaebl7ynjKkN6W24=
Subject key identifier:   F3:7C:51:97:49:60:5D:2B:6C:B8:7A:31:EA:A7:AA:4B:76:E8:A8:8D
Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
Certificate issuer:       /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Certificate serial:       0EEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
Manifest number:          0EDB
Signing time:             Thu 26 Mar 2026 17:35:48 +0000
Manifest this update:     Thu 26 Mar 2026 17:35:47 +0000
Manifest next update:     Thu 02 Apr 2026 17:35:47 +0000
Files and hashes:         1: zoytNWIakBLECzY3U3ykDj0H6M8.crl (hash: 4D6e0iXhxEiBQHd5q/49ao77VN3JbBMOHIHH94aBLrE=)
                          2: 8ADFF772924011ED867BE311C4F9AE02.roa (hash: TM/D4LHWNIZ9N9gTEfSEIkEH4FxQBGl0/P//YBmNd8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
                          rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3820 (0xeec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9F08, serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
        Validity
            Not Before: Mar 26 17:35:47 2026 GMT
            Not After : Apr  2 17:35:47 2026 GMT
        Subject: CN=69c56e74-1ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1a:be:92:01:93:7c:48:51:ee:47:f2:09:5f:
                    26:c6:f0:af:c1:e3:de:d5:b4:8f:2a:0a:fc:99:2b:
                    65:aa:af:2f:b7:3a:45:58:26:18:bb:20:f4:a4:bf:
                    8e:f9:24:65:c9:45:0c:d2:50:c1:24:69:f5:a3:37:
                    29:3a:9d:46:e2:d4:f1:35:13:6b:8b:ef:93:5f:79:
                    74:dd:64:69:e0:4b:a9:2f:14:82:77:1c:f3:61:d0:
                    6e:0d:ef:2b:82:1a:27:80:95:61:6d:0c:d8:6c:33:
                    70:1c:8c:e2:e4:04:de:5b:49:9c:d8:d2:52:8f:42:
                    de:52:cd:6c:d3:03:91:fc:b2:72:66:dc:ef:68:4d:
                    03:81:f3:e1:f3:38:dc:58:3f:b4:6c:e0:a8:11:17:
                    82:99:58:97:20:09:47:fb:e9:e4:bf:f4:b5:1d:e4:
                    5b:b6:a2:66:6a:89:bf:f9:c2:37:c9:7a:cf:0a:bf:
                    2a:ca:16:7f:8c:68:c2:a6:fd:d3:2c:d6:84:ae:66:
                    7e:f5:d6:48:08:ce:d6:c5:e7:dd:1a:ed:5a:f4:8b:
                    36:29:9c:ec:ed:89:88:fc:98:2b:75:fd:7e:c7:99:
                    44:be:1b:b6:f2:54:55:65:fd:bf:35:64:b0:32:92:
                    4d:d6:be:1e:31:c7:89:0b:ef:b4:02:b0:fa:7b:87:
                    cd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7C:51:97:49:60:5D:2B:6C:B8:7A:31:EA:A7:AA:4B:76:E8:A8:8D
            X509v3 Authority Key Identifier:
                keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c1:20:8f:07:83:f2:8c:6c:45:dc:af:f3:2c:61:f6:76:28:
         e1:2b:b9:24:9a:29:4a:85:cc:6e:86:5e:88:5e:0c:73:1c:a2:
         e7:d8:77:ce:93:2f:82:7d:df:a9:ca:52:7b:91:81:ac:cd:2e:
         e9:35:67:29:39:e5:71:a5:80:90:dc:3c:fc:23:b2:57:b3:6f:
         57:50:3c:b2:a7:32:87:d9:4f:01:a1:9f:de:94:eb:31:41:b8:
         72:a3:6b:a3:f7:51:e3:1e:71:d5:f2:44:bc:c4:bc:6e:7a:43:
         98:38:d2:68:75:18:f4:22:1f:08:dc:a4:75:1d:67:33:eb:bb:
         58:2b:51:0b:8c:a0:19:86:f0:5f:0b:7c:b4:2d:e1:34:29:1e:
         74:e8:75:85:ce:d8:69:09:98:48:23:b5:a8:2e:cf:e3:6a:c2:
         2d:88:a2:70:5c:5f:51:49:10:67:28:6a:a0:13:09:91:ad:51:
         ee:8d:23:11:f1:91:8e:56:56:9a:42:08:17:3e:03:90:dd:da:
         1d:31:2b:ca:8b:ee:cd:a4:b0:d6:f9:c2:bd:13:2d:79:e9:84:
         fd:67:49:0e:2a:41:4d:19:f2:ed:10:bc:c2:6e:64:00:ae:21:
         9c:64:f4:c5:f5:f6:73:21:53:dd:6f:58:5d:ae:1a:1c:be:b1:
         cd:c5:b8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:56:15 2026 by rpki-client