Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
File:                     zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json)
Hash identifier:          Kssxg9sEyRlQn3x5/mQ6CIl7jh6Z9r+hcxKSlNFJFNU=
Subject key identifier:   8C:9A:CE:69:94:F3:32:9B:0A:E0:25:59:AE:F7:0C:DA:1E:85:23:D3
Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
Certificate issuer:       /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
Manifest number:          013B
Signing time:             Wed 25 Mar 2026 04:38:02 +0000
Manifest this update:     Wed 25 Mar 2026 04:38:01 +0000
Manifest next update:     Wed 01 Apr 2026 04:38:01 +0000
Files and hashes:         1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: CWSRQ1CgYuy1AQ4p/rBfq3wz0o4ur8GDKtCIXRudRa4=)
                          2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: 5VZ6JaxYHvz/jnyWG4tULUFalKqQD2n3eSx0z0cU+H8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
                          rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
        Validity
            Not Before: Mar 25 04:38:01 2026 GMT
            Not After : Apr  1 04:38:01 2026 GMT
        Subject: CN=69c366a9-a5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:38:e3:27:cc:ea:4f:e0:1d:c2:b8:d9:96:17:
                    a5:f3:23:9f:e1:3b:59:f0:6e:d0:65:38:2b:ef:71:
                    07:55:05:ca:68:eb:ec:6a:d3:ad:28:ab:64:31:f5:
                    2b:c8:02:fa:8b:b2:eb:7f:6c:dc:8c:3b:40:e1:68:
                    45:cd:63:c6:8c:a1:4c:24:c0:1b:dc:d8:dc:22:ad:
                    c6:bc:2b:cf:f6:34:62:5c:bc:86:50:3d:15:fc:69:
                    65:8b:42:01:40:38:9e:40:5c:3c:ea:3f:77:cf:70:
                    f4:90:4a:95:0c:cb:61:10:05:ab:2c:69:21:cc:de:
                    3c:cc:c6:16:90:0b:11:27:13:38:8b:30:1a:70:cc:
                    fe:54:02:80:b1:9b:27:d7:42:c1:8a:e5:24:f1:a0:
                    03:bf:12:fb:0f:65:89:68:2e:82:22:c4:9c:bd:6b:
                    6f:58:e7:dd:db:2b:93:b0:04:61:81:68:ac:d5:47:
                    8c:7d:b7:74:0e:dc:94:8d:bd:b0:ac:35:f6:21:31:
                    77:f9:3a:fc:27:f2:97:7c:1c:3e:da:21:00:98:c4:
                    0f:61:6f:16:9a:a2:be:6c:1f:95:98:c0:15:0a:65:
                    1a:41:17:ed:24:8c:29:c9:5b:88:4d:99:4f:a1:d7:
                    c6:82:6c:ff:57:5b:c7:84:37:55:f4:68:9c:40:17:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9A:CE:69:94:F3:32:9B:0A:E0:25:59:AE:F7:0C:DA:1E:85:23:D3
            X509v3 Authority Key Identifier:
                keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:55:2c:6d:cb:f0:2f:9f:3a:cf:2b:68:af:7a:98:43:70:3f:
         21:76:ce:11:73:de:6b:9c:62:19:85:73:3a:ba:2b:71:99:22:
         f2:85:1c:bf:46:bb:f0:df:a0:97:d0:b8:e9:11:1a:f1:19:97:
         c4:dd:82:56:e6:4d:97:f9:3d:73:e5:f4:0b:f9:f1:af:42:82:
         fc:b4:d5:34:73:08:61:e6:59:ee:98:fb:66:19:5d:67:54:39:
         48:30:bd:ec:d5:b9:d2:ae:15:54:57:c5:35:65:32:7c:a4:03:
         ec:0e:7c:07:f0:3c:63:d4:bf:4c:bf:37:50:ef:11:74:e0:7e:
         10:b7:38:ce:fa:ba:3f:80:db:35:3a:30:37:48:54:b7:fb:62:
         fa:e3:60:32:cd:58:61:52:4c:5c:fe:7d:49:fd:86:d3:c0:42:
         e7:7c:2b:46:a2:9d:4a:fc:49:5d:17:85:00:e5:73:16:e7:72:
         61:6f:3b:0b:c1:58:5d:49:fe:70:02:c4:12:71:5c:ca:6d:dd:
         d7:e0:96:d4:97:0c:ac:2e:cf:63:a3:a5:c4:71:c5:8b:6a:5a:
         e0:05:b2:4c:34:72:bb:d2:84:48:ae:25:93:93:11:f9:ea:dd:
         7b:2c:00:bf:ef:b4:9d:9f:c5:12:1c:08:e7:dd:d3:8c:2f:8d:
         ef:4e:dd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:35 2026 by rpki-client