Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
File:                     ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json)
Hash identifier:          Dqaha3OpaMq7L4hipbjSdtrNm+SZgkHVGjP9dSZWm8o=
Subject key identifier:   27:96:06:52:DE:A7:0B:95:FC:15:67:EA:0D:A6:89:1C:5D:68:F8:21
Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B
Certificate issuer:       /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
Manifest number:          01A4
Signing time:             Wed 25 Mar 2026 03:42:12 +0000
Manifest this update:     Wed 25 Mar 2026 03:42:11 +0000
Manifest next update:     Wed 01 Apr 2026 03:42:11 +0000
Files and hashes:         1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: 3YSmDWg45xfiXxjvZbBSsk96wl4lnXproiC74rduZlI=)
                          2: 12331DA8098111F0B807472DC4F9AE02.roa (hash: UHApmas+hTdDUlF2H9mpnUy31ic+ROSnLqaHdClEfoo=)
                          3: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: d522JtU7ofK+iHBHN7f6Uf/7SL+MFyqmrLpi0e3t3i4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl
                          rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B
        Validity
            Not Before: Mar 25 03:42:11 2026 GMT
            Not After : Apr  1 03:42:11 2026 GMT
        Subject: CN=69c35994-8642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:08:0a:c9:65:21:aa:ce:86:a0:55:1e:fd:
                    67:a5:f2:49:27:58:5e:a9:42:70:a1:38:9a:f6:4c:
                    d0:f8:53:ce:dd:aa:55:1b:38:6b:d8:e2:ab:b4:3e:
                    16:83:ae:06:89:fe:40:1a:11:46:7a:95:fb:5f:75:
                    ad:30:d3:23:66:48:51:4c:57:0e:06:f4:33:61:6b:
                    c5:28:a2:11:69:2b:50:d5:39:e5:b3:4e:9e:f8:10:
                    0f:64:9f:97:e6:b9:00:8b:53:16:70:29:f9:52:3a:
                    19:36:f1:4d:4a:b4:5a:72:6b:82:95:49:66:e5:8f:
                    fa:e6:e0:0d:1e:83:25:71:94:27:86:69:3c:9e:89:
                    a2:ee:9a:9a:5f:6a:6e:5e:99:25:4b:1c:dc:93:ed:
                    78:90:81:be:77:4b:ec:42:fc:e9:da:03:e5:30:80:
                    7b:4b:46:78:55:47:55:db:21:6d:d0:cd:1d:7d:8f:
                    4b:1b:cb:c7:cb:16:22:b8:1a:02:ba:4e:e2:66:5d:
                    94:96:53:7e:e1:da:c8:a3:f3:af:f5:8c:fa:a9:c4:
                    01:64:50:e8:bf:19:3d:b1:35:0d:9f:7e:44:21:58:
                    b6:85:df:68:e5:1d:f1:e1:9c:11:79:45:60:03:93:
                    95:40:be:07:af:2a:ff:9f:a3:04:39:d1:5b:d9:04:
                    00:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:96:06:52:DE:A7:0B:95:FC:15:67:EA:0D:A6:89:1C:5D:68:F8:21
            X509v3 Authority Key Identifier:
                keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b8:4d:ea:c5:28:b3:bf:c6:54:de:66:ea:11:8e:c2:ef:e1:
         83:8d:96:4d:18:1c:33:98:2c:3e:f7:b5:bc:8c:f9:24:14:91:
         93:04:8d:66:47:b2:bc:6b:b7:d7:83:7d:93:1e:09:bd:0c:70:
         63:b8:41:ff:23:12:a1:c7:6f:8c:3f:aa:6b:fd:77:13:22:64:
         3e:df:b9:69:50:32:92:42:4e:d6:a5:24:61:78:9a:50:36:45:
         bb:12:e5:e9:69:6e:91:cc:52:1c:f9:f4:42:fa:d3:64:0a:d4:
         49:d6:7b:68:1c:2b:ea:c1:d7:56:c8:c5:d0:2a:71:1b:b1:4d:
         8d:86:55:9b:c4:af:d3:6f:f5:98:43:ff:f9:ac:03:7f:ce:42:
         40:6b:10:eb:5f:e0:8b:4d:d2:0d:0e:7e:b2:11:1c:25:3a:a5:
         b2:04:31:e5:71:6e:ba:23:ea:c5:3b:eb:ac:27:e7:0e:ba:72:
         89:d1:6e:66:41:85:a4:32:d2:8b:5a:d7:f1:5c:8b:8f:65:d0:
         d2:0c:84:3a:e7:12:f5:2b:6b:71:2f:df:9a:30:a8:0e:d7:a3:
         06:ea:a8:f4:07:43:57:c8:a0:4b:90:e0:c7:97:55:28:de:60:
         08:a5:92:34:4f:4a:9d:e6:58:bc:f2:31:82:8b:1c:94:8a:c0:
         07:ce:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:12 2026 by rpki-client