Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
File:                     ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft (raw, json)
Hash identifier:          vFh3jcXKoOmWwMXV0LBCO9MIPvyoNxbiHGdtBl1Q8xU=
Subject key identifier:   00:5A:44:D9:BF:5D:B7:DC:C9:7B:10:FA:1B:A8:B0:54:82:6B:AB:CF
Authority key identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13
Certificate issuer:       /CN=A911B5AC/serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
Manifest number:          42
Signing time:             Tue 03 Mar 2026 01:57:13 +0000
Manifest this update:     Tue 03 Mar 2026 01:57:13 +0000
Manifest next update:     Tue 10 Mar 2026 01:57:13 +0000
Files and hashes:         1: ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl (hash: taMZY/o5Aj4hR8yNGc5cijeGVPVep0rap8c7DNcgqjY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl
                          rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 01:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5AC, serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213
        Validity
            Not Before: Mar  3 01:57:13 2026 GMT
            Not After : Mar 10 01:57:13 2026 GMT
        Subject: CN=69a63ff9-f422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:9d:6a:7b:dc:97:52:74:5e:40:d7:88:2a:
                    e5:2c:5c:0d:99:6f:7f:3b:9b:8b:be:e0:11:0c:33:
                    bb:16:46:cf:5b:66:3d:63:6c:45:d4:83:74:34:a7:
                    76:21:a2:ae:a4:cb:87:cd:30:ad:07:df:71:fc:26:
                    e5:39:b3:44:86:8f:36:f8:3c:c1:cc:6a:1f:bd:6c:
                    75:6e:7b:2b:cf:d1:c4:d4:4f:5c:e5:bf:91:4e:4f:
                    ec:cc:b9:3e:62:de:74:9c:12:95:a1:29:4b:2d:f6:
                    5c:dc:3d:47:a3:33:79:5c:4d:d6:8b:5e:ef:f6:8f:
                    b9:55:ba:6b:79:cc:97:a8:0b:e3:64:0d:6b:dd:62:
                    65:94:54:87:1a:ed:f6:67:b0:55:b9:f8:bc:bd:7e:
                    d3:77:3e:ef:75:60:b1:72:26:17:e6:e4:23:ac:ae:
                    f5:ee:5e:44:88:89:73:99:fa:0e:eb:f0:bf:95:93:
                    0a:b6:d1:cc:a5:53:fa:e2:91:c6:0c:93:17:3d:86:
                    ed:23:03:d8:5b:0d:2e:18:e4:19:a6:09:69:8e:ff:
                    b3:22:04:e6:e5:72:02:a9:9d:26:98:90:64:da:b6:
                    40:c1:d7:b8:3f:42:fc:5d:8a:3a:99:db:3c:ce:d8:
                    9f:ff:c2:3a:53:0f:e4:a8:83:35:a0:50:0b:01:e8:
                    21:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5A:44:D9:BF:5D:B7:DC:C9:7B:10:FA:1B:A8:B0:54:82:6B:AB:CF
            X509v3 Authority Key Identifier:
                keyid:64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:91:21:f0:af:6e:be:b5:da:82:90:61:15:4a:47:d0:3d:e1:
         ec:05:64:55:c4:a2:3b:45:e4:99:ae:20:cc:8a:38:08:cc:42:
         79:94:16:9a:c0:74:5e:dd:83:c5:a2:c3:14:99:96:1f:18:ff:
         bc:b3:73:c8:52:71:4b:a5:fe:74:05:fd:1e:53:0a:74:3b:95:
         7b:94:f4:39:f4:f2:12:bc:7d:d1:e3:96:c2:5a:45:0e:db:ed:
         9d:3d:c3:f0:4a:b8:98:7f:fe:50:60:73:cf:d2:8a:1f:b5:10:
         6e:3b:62:cd:48:9f:d4:4d:cd:9c:87:b3:d4:bc:be:ef:c0:d2:
         99:0f:80:0e:51:04:66:3a:92:6b:78:3e:d1:28:c9:53:ba:a4:
         01:2b:89:5f:73:87:da:dc:ef:72:81:c4:32:a7:c3:fa:db:c1:
         eb:8b:2a:63:65:e6:75:09:ff:21:d7:af:52:c7:d5:78:3a:1b:
         de:ca:61:f3:9a:9e:05:72:ae:3f:52:65:d5:74:25:6f:03:b9:
         96:ca:a4:da:8a:51:c5:46:33:70:97:41:da:a1:b7:1f:21:e8:
         6f:0a:d6:a6:33:b6:35:2d:9e:50:c5:7c:f1:49:c6:3b:8e:7c:
         50:a3:e5:9b:aa:ef:86:e9:cf:9d:e9:94:34:26:46:9a:76:bd:
         53:5e:ff:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:03 2026 by rpki-client