Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
File:                     zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json)
Hash identifier:          A9k1GvYZCAo+XSPuN6S8wSLI9oPbxIaUWaKVyLSFrb0=
Subject key identifier:   14:30:BF:A6:2A:E9:3C:0A:E6:79:A7:BB:57:5B:75:E3:B2:93:E2:79
Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42
Certificate issuer:       /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
Manifest number:          64
Signing time:             Tue 03 Mar 2026 07:54:16 +0000
Manifest this update:     Tue 03 Mar 2026 07:54:15 +0000
Manifest next update:     Tue 10 Mar 2026 07:54:15 +0000
Files and hashes:         1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: KmYGcfHDWvPXLevYpQqpSQF26Sf2+XT2tyH053NGLOA=)
                          2: 6FBBA45AFD2711F0B1802E18426F56BC.roa (hash: InU5YhYgQdECTfOQlDj5F02bMyaCjuUJFEGGYk6O1Jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl
                          rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42
        Validity
            Not Before: Mar  3 07:54:15 2026 GMT
            Not After : Mar 10 07:54:15 2026 GMT
        Subject: CN=69a693a8-9b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5b:a6:7f:26:1d:37:95:d3:f1:91:5f:f3:73:
                    fd:6f:eb:aa:37:f0:4b:76:4c:e6:ff:3c:2c:a4:9e:
                    21:fe:30:1c:4e:db:ab:03:1a:fd:be:26:38:e5:a7:
                    ce:a7:0a:a1:e2:98:a4:b2:23:24:cf:bf:16:c5:67:
                    96:51:2b:96:26:49:c4:a0:52:7d:32:77:8a:b2:de:
                    dd:32:f8:c2:e3:38:e8:b2:af:12:d7:fa:36:10:29:
                    ea:ec:cb:48:69:20:dd:d9:48:bf:04:92:07:c2:34:
                    97:1a:ba:68:f1:af:4f:2c:fb:51:9b:05:ce:51:d0:
                    d0:68:60:d6:ea:00:aa:4e:58:e8:b3:e5:d9:96:ff:
                    c5:ba:4c:84:6b:73:d8:ca:b8:fc:99:f9:b1:2b:0f:
                    9f:87:a2:70:e4:a5:39:35:8d:51:e5:35:93:e7:35:
                    3b:bc:2c:72:b8:1a:f2:f1:d5:54:26:b6:bc:ba:f7:
                    f3:0d:2d:6d:9b:b0:c3:ea:0a:36:22:40:79:91:54:
                    5f:0d:2d:cc:e5:b8:83:70:59:c2:2f:bd:b9:55:1a:
                    4f:c5:06:78:e0:96:c7:36:26:8b:cc:6e:46:64:04:
                    61:40:57:96:07:fc:48:eb:fb:18:eb:dd:a9:b1:36:
                    b4:a2:ab:c8:a1:5b:c0:fe:41:a9:6f:53:8d:0b:09:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:30:BF:A6:2A:E9:3C:0A:E6:79:A7:BB:57:5B:75:E3:B2:93:E2:79
            X509v3 Authority Key Identifier:
                keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:75:bf:62:6f:fc:27:94:b0:54:f6:3b:4d:f0:a2:5a:02:ca:
         ec:b4:f0:1c:58:a1:a5:73:8d:cf:4d:e8:e7:08:ac:ac:6a:0e:
         ec:17:6b:cd:3b:4d:c6:92:28:3d:62:6b:e5:34:06:0a:ba:ba:
         b0:4b:49:43:e3:20:86:b7:95:b6:b9:fd:5e:23:51:27:43:65:
         94:f0:7d:7a:ef:94:df:06:b6:fd:27:1a:57:ba:4f:7e:9c:df:
         f4:e1:9a:43:b3:26:a9:bd:ee:1d:f7:e2:af:d0:5a:be:83:a4:
         63:92:56:e1:73:a8:7e:5b:4a:c2:5d:48:76:fc:aa:2c:7a:3d:
         17:61:38:3a:44:02:3d:df:3a:c8:d1:09:f5:40:83:2b:d6:63:
         20:8d:db:f1:be:77:17:0b:84:3f:54:18:3d:73:64:93:46:19:
         64:96:27:40:ea:2e:e1:46:63:1e:41:b2:36:89:96:11:3a:0d:
         a0:b1:5d:b2:b9:41:92:85:d8:2e:aa:69:b4:e0:8a:54:3e:45:
         1a:2d:ad:81:c6:44:e6:16:0a:19:dd:bf:7e:e8:d1:0f:08:18:
         05:ff:99:09:f4:d0:d6:55:2b:82:be:18:6b:c1:90:bc:73:c8:
         d2:38:13:9e:3e:0a:30:d3:86:c0:37:e5:73:3c:b4:7e:66:05:
         fc:0d:de:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:08 2026 by rpki-client