Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
File:                     zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json)
Hash identifier:          ACO2BeYPnrJRDzsi2aj9cQpu2u0EyJn/Av1qnxrYYxw=
Subject key identifier:   15:01:E2:4B:D8:A8:FC:66:75:6A:4F:2F:3B:9F:1C:DB:DB:48:E6:D7
Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49
Certificate issuer:       /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049
Certificate serial:       096A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
Manifest number:          0950
Signing time:             Tue 24 Mar 2026 19:55:41 +0000
Manifest this update:     Tue 24 Mar 2026 19:55:40 +0000
Manifest next update:     Tue 31 Mar 2026 19:55:40 +0000
Files and hashes:         1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: d4YUKU1OBzKxZX+5KxxFwOYehAKJwGBs6cLQL4PStbc=)
                          2: 2BEC62FA5DA011EF8E541175C4F9AE02.roa (hash: PDPdfJs3Sp/L4O6BvH4/f/PfyDghykuDm6tMTYKRkIk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl
                          rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2410 (0x96a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED8E0, serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049
        Validity
            Not Before: Mar 24 19:55:40 2026 GMT
            Not After : Mar 31 19:55:40 2026 GMT
        Subject: CN=69c2ec3c-72ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:3f:ad:24:36:53:5f:99:57:f9:71:cb:e9:
                    d1:9d:09:5b:27:ec:33:cf:93:69:f0:21:06:1c:e5:
                    c6:32:ec:c4:a7:44:b5:fe:3f:dd:5f:c8:de:2d:43:
                    89:80:9b:7a:ca:fb:9b:04:ad:d6:3d:26:22:ed:de:
                    2d:e0:38:2a:8f:e9:40:8b:9f:1b:54:88:91:6c:ee:
                    6a:b1:6c:3b:a7:b2:47:44:b0:a4:31:2e:7c:68:cd:
                    5f:48:d5:a7:73:09:c4:25:41:d3:90:65:f1:8c:ca:
                    7e:ae:6d:0d:32:98:b4:71:c1:bb:b6:e7:37:6f:95:
                    e8:f8:87:02:a0:dc:4d:a4:55:c0:0a:a5:7a:a7:36:
                    07:a4:ec:56:ed:3a:64:04:87:ca:61:b6:94:fa:43:
                    3d:54:44:66:9f:b1:1a:f6:fb:1f:e9:d7:b8:21:f9:
                    b2:c6:aa:bc:8c:82:a1:e4:09:00:c1:8a:bd:4b:12:
                    1f:78:50:f3:29:e0:2b:4c:93:5d:5e:90:e8:da:c6:
                    f8:d2:e8:d3:e0:17:8d:82:21:eb:1f:45:95:fd:d5:
                    64:5b:46:1d:9c:1d:a5:66:31:09:8e:51:52:7d:24:
                    4d:ec:5e:8a:8d:b7:f8:07:31:be:46:30:49:93:65:
                    f4:ce:27:6c:9a:2f:6a:63:f5:72:f8:ae:b5:66:d9:
                    5a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:01:E2:4B:D8:A8:FC:66:75:6A:4F:2F:3B:9F:1C:DB:DB:48:E6:D7
            X509v3 Authority Key Identifier:
                keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e1:2b:ac:d3:e0:1b:50:3b:04:5d:6c:9e:50:6c:b6:4d:89:
         ce:81:d9:3f:12:35:65:c8:2d:13:15:72:7e:c6:9d:ce:59:1f:
         0a:ab:3b:f7:32:b6:b6:2b:b4:4d:4a:54:ae:49:ec:2f:fa:06:
         62:76:02:65:9e:36:24:43:e5:f9:45:9f:0b:dc:ab:98:f0:66:
         c8:cc:1b:74:cb:2b:6c:93:cf:87:2c:1a:6c:80:f0:2e:e2:ff:
         46:b1:77:77:8d:85:25:52:68:bd:ec:04:a9:4b:be:f1:11:33:
         76:e0:10:af:00:d8:a3:9d:8c:f9:eb:a2:87:5b:b2:79:c9:9d:
         38:9f:a3:f8:c0:44:3f:33:5c:9c:67:a0:77:87:1d:c2:ea:a2:
         83:c3:42:a8:1b:2f:8e:19:27:55:42:3b:d8:47:96:ff:d7:65:
         4c:83:28:99:61:1c:0e:7a:21:d2:ee:42:e5:81:4b:3e:be:9d:
         53:23:26:5a:2f:f1:9e:29:c9:a7:01:d9:20:45:af:98:34:e2:
         62:45:cf:63:f6:b0:b3:e0:2d:82:81:94:4b:0c:dd:66:14:17:
         41:de:e4:22:18:b7:f9:ad:38:50:0c:c9:c4:ed:42:14:52:95:
         0f:76:df:61:d5:3e:35:34:ac:49:8c:e7:df:5a:29:68:4a:79:
         c5:45:95:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ4RTAxMTAvBgNVBAUTKENDNTQxOUM4QTc4QkNENTNBRDE3MUM1Qjc0QTQwNzFE
OTUzOTUwNDkwHhcNMjYwMzI0MTk1NTQwWhcNMjYwMzMxMTk1NTQwWjAYMRYwFAYD
VQQDEw02OWMyZWMzYy03MmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYs/rSQ2U1+ZV/lxy+nRnQlbJ+wzz5Np8CEGHOXGMuzEp0S1/j/dX8jeLUOJ
gJt6yvubBK3WPSYi7d4t4Dgqj+lAi58bVIiRbO5qsWw7p7JHRLCkMS58aM1fSNWn
cwnEJUHTkGXxjMp+rm0NMpi0ccG7tuc3b5Xo+IcCoNxNpFXACqV6pzYHpOxW7Tpk
BIfKYbaU+kM9VERmn7Ea9vsf6de4Ifmyxqq8jIKh5AkAwYq9SxIfeFDzKeArTJNd
XpDo2sb40ujT4BeNgiHrH0WV/dVkW0YdnB2lZjEJjlFSfSRN7F6Kjbf4BzG+RjBJ
k2X0zidsmi9qY/Vy+K61ZtlaGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUB4kvY
qPxmdWpPLzufHNvbSObXMB8GA1UdIwQYMBaAFMxUGcini81TrRccW3SkBx2VOVBJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDhFMC9FRTJENTMyNkI5
NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpWT3RGeHhiZEtRSEhaVTVV
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pGUVp5S2VMelZPdEZ4eGJkS1FISFpVNVVFay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDhFMC9FRTJENTMyNkI5NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpW
T3RGeHhiZEtRSEhaVTVVRWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT+ErrNPgG1A7BF1snlBstk2JzoHZPxI1ZcgtExVyfsadzlkfCqs79zK2tiu0
TUpUrknsL/oGYnYCZZ42JEPl+UWfC9yrmPBmyMwbdMsrbJPPhywabIDwLuL/RrF3
d42FJVJovewEqUu+8REzduAQrwDYo52M+euih1uyecmdOJ+j+MBEPzNcnGegd4cd
wuqig8NCqBsvjhknVUI72EeW/9dlTIMomWEcDnoh0u5C5YFLPr6dUyMmWi/xninJ
pwHZIEWvmDTiYkXPY/aws+AtgoGUSwzdZhQXQd7kIhi3+a04UAzJxO1CFFKVD3bf
YdU+NTSsSYzn31opaEp5xUWVmQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:25:14 2026 by rpki-client