Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
File:                     4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json)
Hash identifier:          B02TLzTTXdljvsVAMPYY8ff96TGU9Czj32vtYul9Cn4=
Subject key identifier:   27:7E:93:C5:75:7B:1F:47:E0:C0:AF:BC:9B:82:CD:67:04:13:55:30
Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
Certificate issuer:       /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Certificate serial:       026C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
Manifest number:          0265
Signing time:             Wed 25 Mar 2026 01:33:22 +0000
Manifest this update:     Wed 25 Mar 2026 01:33:21 +0000
Manifest next update:     Wed 01 Apr 2026 01:33:21 +0000
Files and hashes:         1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: ubpN6S8Hn1hNDquHiWgbj+HZTbdtC+IRxkPgeQDUnuU=)
                          2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: mGLrUqchoRUjle/BuvUxiJtXqbGGvFSdYgwJHN85mfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
                          rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
        Validity
            Not Before: Mar 25 01:33:21 2026 GMT
            Not After : Apr  1 01:33:21 2026 GMT
        Subject: CN=69c33b62-ff74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:f3:bb:2f:3d:b4:5e:76:fb:0b:76:32:e8:
                    ad:43:e2:aa:af:67:76:e1:0d:a1:ec:37:10:96:8f:
                    ba:dd:69:a9:ff:8d:76:57:49:c8:5f:4b:9f:f1:47:
                    20:e7:b2:0c:70:07:e9:6f:e4:7e:d0:c7:54:77:ff:
                    98:9a:d6:6e:f5:42:46:a0:99:2b:00:ef:08:7a:b3:
                    77:6f:3d:21:91:93:e8:7d:44:97:8d:37:78:cf:10:
                    2a:ab:32:07:19:6f:01:e0:f2:cf:36:5e:b8:ca:ac:
                    bf:45:a9:de:27:62:1a:3c:10:5e:c9:ca:97:71:31:
                    bb:01:f1:5f:dd:bd:be:7b:db:81:e7:54:9e:09:60:
                    5c:f6:93:7d:81:44:fe:95:53:12:16:94:78:cf:8a:
                    76:a8:de:b1:22:82:dd:91:36:55:30:b0:bf:b6:46:
                    64:45:95:82:7b:00:b2:ed:d7:cc:f1:f7:be:58:af:
                    bf:7f:7c:4e:af:21:a0:77:78:44:60:71:87:be:69:
                    cb:da:41:29:a8:c3:dc:47:b1:31:82:2b:2f:56:23:
                    7b:8f:44:61:b8:ea:aa:a6:d4:7c:f2:e4:94:a7:f2:
                    96:27:65:b7:07:df:c5:b0:0c:4d:0f:07:68:02:65:
                    f1:1d:62:75:3c:bc:a5:a3:0c:a9:2f:7e:7f:82:8a:
                    59:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7E:93:C5:75:7B:1F:47:E0:C0:AF:BC:9B:82:CD:67:04:13:55:30
            X509v3 Authority Key Identifier:
                keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:89:ed:36:ca:c3:4c:90:7b:37:22:e9:b5:c4:13:e8:c4:cf:
         bc:02:1d:86:cc:d0:05:06:c2:17:aa:54:e1:82:9e:38:91:fb:
         ef:a1:4b:7e:14:52:ed:c7:94:a9:cd:54:dc:9d:d8:dc:be:6f:
         c7:44:c1:a3:28:98:f6:10:e0:ec:b2:87:60:d3:c6:fb:3a:17:
         04:6d:e0:df:9b:3f:30:db:29:57:5f:e1:14:59:46:e3:2a:b1:
         54:76:2a:75:56:20:a5:f0:b5:0f:17:c4:f9:b1:a3:7b:d4:df:
         26:08:02:70:bb:4e:8f:7f:50:dc:59:e1:e9:da:c8:0a:24:b3:
         f0:b7:7c:dc:1d:d0:bb:a2:8b:b6:53:61:90:d5:66:46:4e:a3:
         99:6b:27:5f:c2:3c:16:74:41:25:f8:07:15:b7:59:37:12:f5:
         77:32:e1:07:f0:4d:9c:10:fa:c0:c9:75:f0:09:2f:0d:73:ea:
         97:21:70:82:bc:d7:03:90:d9:10:ef:3b:12:f8:ac:cf:b5:76:
         1e:86:1a:b6:7b:63:23:77:b2:ae:3f:df:30:89:ea:a3:cf:fb:
         2a:02:35:0b:c4:e1:a5:44:14:42:e0:ef:ee:90:00:43:e9:e3:
         8f:b9:80:6c:97:f5:d2:e6:e1:76:a1:b6:89:b9:a7:6b:85:40:
         70:7e:a6:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdGNkExMTAvBgNVBAUTKEUzM0RCNzkzQkJFRkU0NkNCQ0Y3NURCMzRFNzA5NDI3
QTcyRUYwRjMwHhcNMjYwMzI1MDEzMzIxWhcNMjYwNDAxMDEzMzIxWjAYMRYwFAYD
VQQDEw02OWMzM2I2Mi1mZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApeTzuy89tF52+wt2MuitQ+Kqr2d24Q2h7DcQlo+63Wmp/412V0nIX0uf8Ucg
57IMcAfpb+R+0MdUd/+YmtZu9UJGoJkrAO8IerN3bz0hkZPofUSXjTd4zxAqqzIH
GW8B4PLPNl64yqy/RaneJ2IaPBBeycqXcTG7AfFf3b2+e9uB51SeCWBc9pN9gUT+
lVMSFpR4z4p2qN6xIoLdkTZVMLC/tkZkRZWCewCy7dfM8fe+WK+/f3xOryGgd3hE
YHGHvmnL2kEpqMPcR7ExgisvViN7j0RhuOqqptR88uSUp/KWJ2W3B9/FsAxNDwdo
AmXxHWJ1PLylowypL35/gopZAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCd+k8V1
ex9H4MCvvJuCzWcEE1UwMB8GA1UdIwQYMBaAFOM9t5O77+RsvPdds05wlCenLvDz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0Y2QS8wNjc5MjUwMDdG
NDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVHeTg5MTJ6VG5DVUo2Y3U4
UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzR6MjNrN3Z2NUd5ODkxMnpUbkNVSjZjdThQTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0Y2QS8wNjc5MjUwMDdGNDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVH
eTg5MTJ6VG5DVUo2Y3U4UE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsontNsrDTJB7NyLptcQT6MTPvAIdhszQBQbCF6pU4YKeOJH776FLfhRS7ceU
qc1U3J3Y3L5vx0TBoyiY9hDg7LKHYNPG+zoXBG3g35s/MNspV1/hFFlG4yqxVHYq
dVYgpfC1DxfE+bGje9TfJggCcLtOj39Q3Fnh6drICiSz8Ld83B3Qu6KLtlNhkNVm
Rk6jmWsnX8I8FnRBJfgHFbdZNxL1dzLhB/BNnBD6wMl18AkvDXPqlyFwgrzXA5DZ
EO87Evisz7V2HoYatntjI3eyrj/fMInqo8/7KgI1C8ThpUQUQuDv7pAAQ+njj7mA
bJf10ubhdqG2ibmna4VAcH6mBg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:35 2026 by rpki-client