Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
File:                     zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json)
Hash identifier:          oau3zZ0tHAr87lDaGVY5MUkFMJueoWKgk4SHIDxXuKQ=
Subject key identifier:   6A:28:08:E4:64:06:35:B1:F2:92:65:1D:23:2D:E6:6C:5B:0A:8F:54
Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34
Certificate issuer:       /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
Certificate serial:       2879
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
Manifest number:          2866
Signing time:             Sat 04 Apr 2026 15:33:19 +0000
Manifest this update:     Sat 04 Apr 2026 15:33:19 +0000
Manifest next update:     Sat 11 Apr 2026 15:33:19 +0000
Files and hashes:         1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: 65Y7GJmXzSD29GTm7rF9W9y74w7o2kvgub4I1TYPpIc=)
                          2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: VmiDWWZcXS/8NwiQU0Cj011GwuJY7i5hDmIVSX2ZEao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl
                          rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10361 (0x2879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
        Validity
            Not Before: Apr  4 15:33:19 2026 GMT
            Not After : Apr 11 15:33:19 2026 GMT
        Subject: CN=69d12f3f-d2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:96:04:c7:05:81:3e:73:cd:dd:e1:98:44:fd:
                    0a:a0:b9:2a:ac:98:5a:b9:fb:77:57:8e:b5:a0:4b:
                    2e:55:e5:60:5c:79:c2:fe:a7:e2:85:cd:36:cf:22:
                    9b:1c:09:3b:96:7b:ab:01:dc:29:77:82:9e:67:ef:
                    88:99:67:a6:a4:70:06:b9:6a:f6:bd:8b:6c:99:ea:
                    c7:23:33:e7:15:c7:88:98:88:1a:19:32:f3:61:a3:
                    92:06:d6:c6:7b:6d:70:03:3d:f3:f0:54:cc:96:2c:
                    7b:d3:d1:fd:8f:d4:05:79:25:3b:bb:86:e1:f5:bb:
                    15:81:a9:f3:02:71:4b:77:c9:62:0d:5c:52:48:7c:
                    52:af:ee:dd:42:f7:2b:8f:4d:16:28:cd:c9:47:b4:
                    7d:97:dc:ad:65:0c:cb:a0:b6:03:a2:5b:c8:33:8c:
                    a1:2d:bf:dd:cd:10:ce:cd:da:a7:ff:38:29:f2:33:
                    1b:ae:b3:f1:a7:54:ab:78:71:75:e9:64:da:3d:4e:
                    37:87:63:34:c6:21:34:44:ac:84:f6:39:0c:e5:df:
                    80:29:1e:d1:f6:33:cb:3d:6b:f3:5e:01:a1:64:72:
                    5f:c4:fd:65:39:a7:9f:70:fe:64:a4:a8:5a:79:d0:
                    bd:ea:fe:76:c3:96:f9:d3:bf:87:13:d7:74:a0:f9:
                    32:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:28:08:E4:64:06:35:B1:F2:92:65:1D:23:2D:E6:6C:5B:0A:8F:54
            X509v3 Authority Key Identifier:
                keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:61:43:85:94:e2:13:d4:77:3c:d8:ae:c9:39:4e:58:06:d5:
         8a:b7:a9:7c:42:cd:a3:d6:d5:37:7c:bd:9b:00:63:ca:2e:99:
         92:59:38:ec:ba:ca:ff:35:92:29:ad:a4:45:f7:56:bf:03:0e:
         24:2f:d8:c6:b1:3f:dd:3e:3c:e6:cd:3c:c8:fc:98:43:52:54:
         99:06:20:5b:67:33:44:fc:07:45:08:23:04:51:45:35:76:d2:
         b5:c1:2b:19:55:2f:61:59:6d:5f:62:b9:00:04:8f:52:20:15:
         87:a8:a5:29:d9:d5:81:7d:b1:05:81:5f:a0:dd:1e:82:73:20:
         5a:35:a8:d0:c5:d1:82:d0:05:a8:7a:6d:ee:8f:9c:68:5a:10:
         d9:ea:fa:ab:c5:8a:a5:3e:2b:5d:86:a6:d8:d5:40:0e:7d:6e:
         fa:dd:43:eb:21:06:18:23:f3:23:22:20:34:10:68:a8:4c:a6:
         41:40:e0:90:56:8b:5f:74:88:83:3d:1c:e7:cd:97:c6:9a:53:
         3f:3f:53:a6:87:24:56:76:0c:a0:20:31:4b:be:0e:36:c0:16:
         14:85:eb:f9:66:c4:11:74:03:a0:19:c4:86:60:4a:15:70:28:
         57:e2:0a:3c:04:21:13:41:10:60:f1:81:95:67:ab:e8:36:d7:
         31:2e:c3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:02 2026 by rpki-client