Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
File:                     ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json)
Hash identifier:          Y4Hb+yl0EUdyuFDGU1C8hEMPQFc9/VXxCa/QT3+Q09s=
Subject key identifier:   3D:EC:2E:8C:28:1E:9A:9A:A7:B2:04:68:CB:F7:F0:6F:C4:77:34:CB
Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0
Certificate issuer:       /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
Manifest number:          015B
Signing time:             Wed 25 Mar 2026 04:13:13 +0000
Manifest this update:     Wed 25 Mar 2026 04:13:13 +0000
Manifest next update:     Wed 01 Apr 2026 04:13:13 +0000
Files and hashes:         1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: fAij+xkMyV7tltKLISYodbk5z6XUDx/MqCr1udgAJBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl
                          rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0
        Validity
            Not Before: Mar 25 04:13:13 2026 GMT
            Not After : Apr  1 04:13:13 2026 GMT
        Subject: CN=69c360d9-447d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:43:6e:65:cb:4c:62:dc:28:2f:7b:c4:c1:
                    d1:af:99:c7:02:ce:5e:34:37:67:64:43:f5:59:f2:
                    7a:b9:20:68:23:24:1a:59:1e:b4:fd:5e:7a:de:bf:
                    07:09:bd:a4:a0:3a:1f:ef:5c:81:1d:c2:aa:a3:d2:
                    35:61:c2:de:31:0a:ec:24:27:cf:3b:2b:56:7c:2e:
                    33:87:28:8b:4b:37:1f:46:dd:9c:3c:2a:82:bf:ac:
                    af:a5:a1:99:77:95:aa:07:74:93:43:b0:05:e9:93:
                    66:37:cc:bb:13:d8:05:9c:a4:5b:a1:fe:59:82:9f:
                    fc:78:dc:a0:8b:25:b6:46:82:b1:aa:0c:1a:c1:f6:
                    2e:6e:42:3f:bf:30:df:59:8e:5a:4c:15:f4:99:69:
                    f0:2a:b5:1b:cf:72:de:fc:a8:1f:38:67:93:e8:61:
                    5c:c0:e4:68:e3:62:ea:80:0a:15:34:b6:89:5c:da:
                    c0:d5:a8:fd:c8:79:00:2c:a9:a6:d4:d6:b4:2e:c1:
                    af:45:fa:5c:57:83:31:89:eb:00:b9:4a:a1:db:e9:
                    7b:28:d4:63:3d:9e:95:e1:34:f8:09:5f:83:94:71:
                    88:de:3f:1c:b3:e5:97:cc:db:bf:2b:ec:12:ef:47:
                    76:f9:c2:ec:52:50:26:8d:4d:fa:1b:ed:2a:11:9b:
                    98:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EC:2E:8C:28:1E:9A:9A:A7:B2:04:68:CB:F7:F0:6F:C4:77:34:CB
            X509v3 Authority Key Identifier:
                keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:16:eb:a0:cc:9e:b8:8b:7c:49:42:89:44:2e:6d:fb:18:de:
         e5:00:a9:c7:d0:d2:db:0a:72:7a:bf:61:9a:7b:7b:f1:b4:d3:
         64:41:34:44:6b:1f:01:21:02:8a:98:59:e2:0b:17:3a:ee:6e:
         bc:81:40:36:86:bf:0e:5b:28:b0:04:7f:26:99:83:b3:2c:2e:
         79:8d:6d:47:7d:67:dc:62:3e:3a:3f:d7:57:aa:e7:9a:7b:e3:
         a3:59:d9:92:2b:19:22:b9:69:a9:51:6a:99:c4:9c:f9:ef:dc:
         6e:3b:e9:bd:f5:e0:bf:fe:8a:73:e1:b9:2b:a3:d8:f6:62:54:
         b7:97:cd:03:62:14:16:54:67:e2:2a:bb:4e:3f:9c:a2:e4:0f:
         ed:8d:6f:bd:94:00:e3:7d:4d:9f:8b:e0:95:c0:c5:eb:a3:48:
         a1:53:93:d9:99:6e:3a:37:fb:50:09:3e:ec:5f:4e:ab:6e:d8:
         8d:7b:ac:11:1a:c3:db:7e:ba:44:ab:de:a2:d6:c1:f3:5e:a0:
         e8:f2:97:25:74:c5:bc:93:22:06:34:76:f3:f5:63:e9:26:8c:
         7d:a1:45:61:d7:c9:8e:88:a2:f2:e2:8c:bc:f0:83:0d:c1:b9:
         47:0a:96:e0:b2:7e:e2:03:22:e7:53:6d:30:02:11:10:74:fa:
         61:e8:46:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:55 2026 by rpki-client