Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
File:                     ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json)
Hash identifier:          +9jIIrLtIkmVMmyyEy3mYgNdb7HH/OMADK3HWz1iBB8=
Subject key identifier:   82:A9:C6:C4:B9:D5:04:FA:68:CE:65:6E:78:AF:43:0B:27:B0:21:BB
Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00
Certificate issuer:       /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200
Certificate serial:       0ED8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
Manifest number:          2B85
Signing time:             Tue 24 Mar 2026 16:48:22 +0000
Manifest this update:     Tue 24 Mar 2026 16:48:21 +0000
Manifest next update:     Tue 31 Mar 2026 16:48:21 +0000
Files and hashes:         1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: IIjOlrJZTnddSt2QK58nDjFlHJ47VC70FVBfSgLPhNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl
                          rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3800 (0xed8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200
        Validity
            Not Before: Mar 24 16:48:21 2026 GMT
            Not After : Mar 31 16:48:21 2026 GMT
        Subject: CN=69c2c056-b850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:32:2c:9e:03:b8:ec:dd:8c:50:5a:15:8f:
                    38:ed:25:be:ed:5d:93:f1:f1:31:e8:8d:b3:dc:23:
                    23:a6:de:a9:4f:3a:8d:2d:2f:9d:53:dd:fb:7e:fb:
                    45:74:26:10:a0:99:ee:7b:28:6e:30:f3:ad:45:49:
                    fd:3e:b4:ee:16:35:ea:66:c6:2e:1e:3b:05:05:9a:
                    02:ca:49:00:f4:38:80:0e:e5:5f:ee:04:ec:0b:f2:
                    1a:55:2e:12:17:8c:09:74:0f:34:f8:e9:20:ba:a1:
                    35:50:a4:42:ab:1b:ee:31:2d:9b:47:a2:ca:89:35:
                    f8:80:4e:e6:ec:b4:bb:1d:20:79:b2:5d:42:32:59:
                    ef:8f:ad:44:2d:e5:22:f2:01:57:61:59:98:b5:39:
                    59:17:33:96:fe:b7:07:28:3b:c8:23:38:10:2e:7a:
                    67:35:41:4a:b3:1c:63:13:a0:e9:0d:f4:53:6f:19:
                    1e:47:ee:e9:0e:89:87:14:2a:f9:74:cd:57:d3:87:
                    e1:fc:4d:9a:c2:28:47:da:48:7b:e4:4e:3e:18:ef:
                    d4:ab:fc:c7:ce:87:0b:a3:f7:e2:1b:5b:a6:0a:27:
                    fc:c7:f0:a8:34:6e:cb:41:2c:d4:48:16:2d:79:b8:
                    a1:24:e0:15:2a:04:17:16:ad:c1:ac:51:56:cd:ed:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A9:C6:C4:B9:D5:04:FA:68:CE:65:6E:78:AF:43:0B:27:B0:21:BB
            X509v3 Authority Key Identifier:
                keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:85:d1:21:d1:ce:48:88:ec:28:c1:37:6b:9b:b0:cd:71:4d:
         45:4e:df:e0:71:1a:3e:0a:3d:ed:f2:37:00:ed:52:90:32:ea:
         7c:8b:8b:f3:ee:31:5e:b8:cb:5b:97:4d:9c:c0:87:b1:af:e7:
         52:17:4a:2e:4e:a8:c6:07:67:da:48:ca:1d:0b:51:b9:11:ff:
         be:9e:18:a1:14:17:1f:4a:06:5f:e4:9f:bf:bf:df:e9:5b:fb:
         0b:f8:69:2d:0f:a5:b6:a7:be:0c:61:c0:e3:68:6a:b1:91:de:
         ae:25:5a:ae:ae:30:e1:77:9b:4f:2c:71:05:ee:e8:0d:ba:14:
         4e:7a:d4:1c:56:12:ea:68:bc:02:e2:10:19:7f:e7:60:12:9f:
         76:0d:43:d6:0b:31:1b:4f:c4:b0:75:50:8a:e1:7b:72:b4:34:
         dd:d0:54:66:04:53:ce:c9:28:4f:a0:28:40:5e:ae:ac:34:14:
         db:b7:22:34:4a:60:5e:09:cc:2e:ef:9b:d9:eb:bf:fe:4a:8f:
         28:4b:2c:c8:66:43:6c:49:69:b1:5b:d1:4e:4b:be:be:a1:58:
         33:0b:ff:53:4e:88:05:2b:da:9a:2e:8b:84:f9:71:eb:0f:69:
         f7:87:08:b2:c6:20:da:46:f5:b8:d6:65:98:35:d8:06:40:9d:
         60:c4:65:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVFRDAxMTAvBgNVBAUTKDY0OTEyMEE3NzVFOUZFOURBRjQ4RTE3Qzk3NUMwMENF
MDVDNDYyMDAwHhcNMjYwMzI0MTY0ODIxWhcNMjYwMzMxMTY0ODIxWjAYMRYwFAYD
VQQDEw02OWMyYzA1Ni1iODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAviMyLJ4DuOzdjFBaFY847SW+7V2T8fEx6I2z3CMjpt6pTzqNLS+dU937fvtF
dCYQoJnueyhuMPOtRUn9PrTuFjXqZsYuHjsFBZoCykkA9DiADuVf7gTsC/IaVS4S
F4wJdA80+OkguqE1UKRCqxvuMS2bR6LKiTX4gE7m7LS7HSB5sl1CMlnvj61ELeUi
8gFXYVmYtTlZFzOW/rcHKDvIIzgQLnpnNUFKsxxjE6DpDfRTbxkeR+7pDomHFCr5
dM1X04fh/E2awihH2kh75E4+GO/Uq/zHzocLo/fiG1umCif8x/CoNG7LQSzUSBYt
ebihJOAVKgQXFq3BrFFWze1zYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIKpxsS5
1QT6aM5lbnivQwsnsCG7MB8GA1UdIwQYMBaAFGSRIKd16f6dr0jhfJdcAM4FxGIA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5
NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9wMnZTT0Y4bDF3QXpnWEVZ
Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pKRWdwM1hwX3AydlNPRjhsMXdBemdYRVlnQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9w
MnZTT0Y4bDF3QXpnWEVZZ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADYXRIdHOSIjsKME3a5uwzXFNRU7f4HEaPgo97fI3AO1SkDLqfIuL8+4xXrjL
W5dNnMCHsa/nUhdKLk6oxgdn2kjKHQtRuRH/vp4YoRQXH0oGX+Sfv7/f6Vv7C/hp
LQ+ltqe+DGHA42hqsZHeriVarq4w4XebTyxxBe7oDboUTnrUHFYS6mi8AuIQGX/n
YBKfdg1D1gsxG0/EsHVQiuF7crQ03dBUZgRTzskoT6AoQF6urDQU27ciNEpgXgnM
Lu+b2eu//kqPKEssyGZDbElpsVvRTku+vqFYMwv/U06IBSvami6LhPlx6w9p94cI
ssYg2kb1uNZlmDXYBkCdYMRlUg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:30 2026 by rpki-client