Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
File:                     ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft (raw, json)
Hash identifier:          2UnAbx9BJ8jYxp8mtuMHZe4KcX0Ys8nS8Zws/lBJICM=
Subject key identifier:   37:B9:19:F1:91:01:81:09:81:2D:1E:C2:E4:FC:40:2E:E4:4B:E0:2C
Authority key identifier: 65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86
Certificate issuer:       /CN=A91E13CF/serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
Manifest number:          68
Signing time:             Wed 25 Mar 2026 07:10:02 +0000
Manifest this update:     Wed 25 Mar 2026 07:10:02 +0000
Manifest next update:     Wed 01 Apr 2026 07:10:02 +0000
Files and hashes:         1: ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl (hash: uPEb40pRMPQR1rd7UqEmxG3UdHi4xhMJGmTxbmCduHQ=)
                          2: D88B7AD48E3511F0A7463923C4F9AE02.roa (hash: uODZblgFbKItTmQLR70yrBmfsX9HkwmHlSn392rNiq0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl
                          rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E13CF, serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
        Validity
            Not Before: Mar 25 07:10:02 2026 GMT
            Not After : Apr  1 07:10:02 2026 GMT
        Subject: CN=69c38a4a-dc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:2e:a5:a3:c7:1a:bc:1a:2a:f6:bc:82:b9:
                    29:0c:77:50:14:53:47:2d:e9:2f:89:4b:65:c0:86:
                    9b:2d:54:48:8b:a8:aa:3c:a4:e0:38:4b:93:e0:35:
                    87:4e:b9:13:fb:8b:e1:13:3c:fe:c5:a1:90:30:1c:
                    4a:02:5b:74:9f:13:b6:fe:76:3f:cf:4a:49:1a:bc:
                    8f:f6:49:64:b1:cf:6a:58:bc:94:8c:8e:2b:37:5c:
                    e0:f5:09:e4:cd:5b:d1:70:2e:60:b6:d8:4f:a8:d3:
                    c4:60:38:f4:88:53:85:a1:f4:8c:19:93:e9:51:07:
                    51:8e:05:fd:a9:eb:2d:16:3a:de:2c:d3:11:71:69:
                    bd:85:43:e7:88:63:2d:29:cc:2e:19:c5:b8:69:b2:
                    45:ef:fb:db:bf:50:e6:18:4a:e7:00:73:25:8b:52:
                    71:c7:d8:5d:ac:bb:d2:76:94:91:47:3a:d4:78:ac:
                    e9:2a:90:76:9d:59:d8:dc:01:06:df:51:b0:3e:df:
                    e2:9c:04:0d:b6:e9:62:a5:69:65:e4:c1:b2:f1:e2:
                    fb:0f:2b:61:b7:ab:c3:73:2d:57:f8:21:76:52:1b:
                    db:4c:c0:be:cf:04:b8:fe:5e:88:22:22:58:93:f4:
                    ba:75:91:8c:7f:41:82:6d:f5:dc:5c:f6:d9:e7:0a:
                    4f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B9:19:F1:91:01:81:09:81:2D:1E:C2:E4:FC:40:2E:E4:4B:E0:2C
            X509v3 Authority Key Identifier:
                keyid:65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:97:6f:2d:a1:33:ee:15:b5:40:73:88:9b:a6:27:d7:bd:a3:
         db:74:9c:48:a3:bb:38:8c:d2:34:7c:61:b1:bb:8a:2f:42:42:
         b7:4f:04:9b:5e:d5:f4:49:ad:86:11:05:5f:05:c5:45:45:e6:
         88:84:f6:7a:e2:c4:35:a0:22:70:15:e8:12:8d:89:a6:a4:16:
         6b:dd:f9:28:bd:1a:60:52:a7:3b:56:0b:5e:dd:e1:bb:a1:1c:
         3a:f1:d9:d4:18:d0:b8:92:bc:57:c6:18:fe:5f:0d:9d:21:6a:
         bc:1b:fe:15:bb:a4:bb:9b:49:2e:4d:bc:91:37:c5:2f:f7:93:
         fa:70:5d:2b:d9:73:0e:61:54:16:d8:12:67:f2:00:66:94:00:
         96:2d:98:fd:70:c8:0e:ac:78:3b:84:5d:9f:80:bf:93:95:29:
         41:0e:78:d9:c9:6e:9e:2b:2e:05:d8:b2:d7:fb:ad:96:6b:7e:
         66:16:e3:1b:2a:ac:3b:c3:f6:8d:60:f2:3e:91:fd:1b:f9:bd:
         9b:ad:a5:eb:4d:ae:88:3a:b0:19:9b:96:88:44:e0:3a:6c:3d:
         7e:fb:62:46:08:91:30:7b:d6:19:d3:c0:36:fb:e8:25:0f:22:
         76:0a:74:f3:a6:d0:cd:4c:d6:50:d8:81:27:f5:4d:b3:79:e8:
         e1:29:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:45 2026 by rpki-client