Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
File:                     zIO7bQqhd53qFp7bpKQCKN4hvXs.mft (raw, json)
Hash identifier:          RWn0tDsm/IkYzvr6QrJv9ilyF33TBJHRtuZBFWYPDm8=
Subject key identifier:   8E:71:27:EF:4E:0B:1C:D2:F3:63:F1:E2:11:29:74:03:B5:5E:99:F0
Authority key identifier: CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B
Certificate issuer:       /CN=A91D493B/serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B
Certificate serial:       03C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
Manifest number:          03BD
Signing time:             Wed 25 Mar 2026 00:18:22 +0000
Manifest this update:     Wed 25 Mar 2026 00:18:21 +0000
Manifest next update:     Wed 01 Apr 2026 00:18:21 +0000
Files and hashes:         1: zIO7bQqhd53qFp7bpKQCKN4hvXs.crl (hash: 096lbTSiKRY8jhpYXwKOOUFpZGyO1bAaF8BkZBUtXMQ=)
                          2: 684DDD32CAB311ECBBCE9843C4F9AE02.roa (hash: CQAaHQlUoziy3+k69fgN/Wsw5rtFHgLNTPy96hrXthw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl
                          rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963 (0x3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D493B, serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B
        Validity
            Not Before: Mar 25 00:18:21 2026 GMT
            Not After : Apr  1 00:18:21 2026 GMT
        Subject: CN=69c329ce-a5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:78:56:5a:8f:35:3c:59:85:44:94:5d:2c:
                    99:23:ee:62:c0:ef:08:be:d1:49:df:27:4b:a4:39:
                    49:29:24:1d:42:14:06:82:07:07:62:3f:7d:fb:d9:
                    ed:f7:e9:d6:56:96:c3:ad:f4:19:d7:55:36:4c:cc:
                    fa:25:96:6c:b7:db:00:f0:d4:ec:23:c9:4b:7e:ee:
                    57:48:52:5d:8b:23:50:90:bb:29:b8:d8:9b:0c:07:
                    14:e8:b2:22:35:47:68:c6:7d:67:24:37:e3:8a:0c:
                    dc:2e:61:22:55:b1:97:24:82:e3:bb:bf:ba:95:72:
                    7a:05:02:0d:89:e2:e6:39:dc:74:37:a5:cc:60:47:
                    2c:90:d5:5f:92:35:b2:b2:ca:cd:b1:72:32:ab:b5:
                    8e:69:01:ec:b8:fa:00:a5:a7:71:53:8b:e5:95:f1:
                    fc:65:80:07:9c:5a:04:7a:42:19:0d:65:36:74:8b:
                    56:0d:53:ab:82:f7:1b:8a:ba:59:b7:05:c3:23:a1:
                    bb:06:89:33:ba:06:17:8a:84:b8:02:2a:14:8d:17:
                    0f:a2:75:a5:c7:bf:3f:3e:fa:fb:21:2c:3e:38:67:
                    14:44:50:80:ed:f3:6f:63:ae:ae:ae:70:df:5e:b3:
                    06:a0:71:84:1f:d5:fc:ac:d8:fb:b3:67:49:c9:77:
                    44:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:71:27:EF:4E:0B:1C:D2:F3:63:F1:E2:11:29:74:03:B5:5E:99:F0
            X509v3 Authority Key Identifier:
                keyid:CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:38:73:33:2e:cd:58:13:a7:60:d6:aa:62:e4:0a:e6:76:01:
         3a:3b:24:4f:e8:32:02:b0:e4:a7:35:01:1d:8c:73:4f:24:b1:
         b4:a8:5f:27:40:1b:16:ed:2f:12:8a:cb:18:ba:d9:46:40:d1:
         53:91:93:22:63:82:d8:29:2f:eb:f8:de:e9:8e:61:c5:d4:97:
         b8:b5:5f:95:ea:10:e5:da:35:bc:24:73:d4:53:ff:b5:54:9b:
         83:0c:cd:5a:87:cc:9a:ce:d7:18:7d:50:95:1d:21:e5:fe:f3:
         58:71:b8:54:1d:88:37:87:5c:ca:20:92:9a:38:d8:7d:40:40:
         f6:47:7e:9c:46:66:e2:4e:be:4a:16:bb:3c:e0:26:b8:90:6c:
         ab:b2:9c:60:53:95:13:b4:7d:62:aa:5a:75:7b:57:1c:8d:4d:
         88:e0:48:b8:6e:01:21:44:9c:2e:97:e6:bc:b7:d2:37:89:91:
         c5:66:d6:72:df:fb:0e:24:17:01:8a:1d:5f:19:74:8e:b1:48:
         cd:9c:9a:2b:f0:75:51:61:7a:7d:48:3c:b9:b0:ec:ad:79:b0:
         4a:da:64:2e:9b:c3:c6:9c:0c:4d:84:78:d7:a0:bd:e8:84:58:
         e0:6f:b2:52:61:f4:9c:74:c6:b8:5f:31:6b:c4:66:f2:6a:db:
         1e:a7:34:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:01 2026 by rpki-client