Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File:                     Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier:          5n20sXyDzOUgD2FVQoBd21F7Fxfo7GrHVoMFbrmxf4w=
Subject key identifier:   3B:0F:CA:04:1F:46:AC:72:44:2B:BE:9A:23:A4:A6:69:6E:74:6A:05
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1DA3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number:          3F77
Signing time:             Thu 12 Mar 2026 14:28:25 +0000
Manifest this update:     Thu 12 Mar 2026 14:28:24 +0000
Manifest next update:     Thu 19 Mar 2026 14:28:24 +0000
Files and hashes:         1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: cb22eM08HGVvFpi7OPL7YVI4ADAyiypCTx1WlTtXwxs=)
                          2: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: 6P+1AW6+9CaIAdPsa+shyJsM8Exj94kKsPKnss2Jr94=)
                          3: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: 6XI/IfvAsAWYLp6AJKm4dtAGOtIg8Onx4flKi94I10Y=)
                          4: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: SUdVIcZkUhygJe2xIbtJt7uwqKCG9Ii1WDhJ2Iav9eM=)
                          5: 727C68508AB411EA89D83541C4F9AE02.roa (hash: j1y9l++Cb4rS0kTDJ/au9IYHGMfWT1dKRtZ4fnBWD30=)
                          6: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: HgJ0n+v739OZ1tLGuS29SCSO5u9C8UIQn4oKvIqQoV8=)
                          7: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: w7c5NBEb8TY/ZmVexUmHMzZSB1L6WF2aygP/ojjQOss=)
                          8: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: iVpOoJBlOyG/3zE1oA25hpkQYIqJe26GyQVWdLF9Bv4=)
                          9: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: A41l4a5QeLuyAAjDqJtyo29qvmKv7EtwQyyVY7eLbxI=)
                          10: 66891B80943011EA8988B883C4F9AE02.roa (hash: BqNOTLVBBC+AVn5T33rtKNkNE5KVCZAI+BxeO2sKXyk=)
                          11: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: Q016Kd6E9/hY+r6FwdJ1SCSeGt/Pfio83Euj8bOzMRo=)
                          12: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: XXo8cy9oUnqDsEuTHCCDf3i4rQnpL2CkAP7dtIYhL4s=)
                          13: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: E0gVDm9kfoK0rIa6TEKpQcI3iviwBeS9QjJmURqDGcc=)
                          14: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: sLIpOudm+eiKR94GEfQZoeV78WGpsM7jzLSAv9i5/tM=)
                          15: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: lf1ISH9QTtgl8L9L0ANGqCGTHFwv9Hzc9bbQJTH1hEk=)
                          16: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: fGEvfx/uQTHZ/v0AMbNptNU7LfD/gnvxRSl+eXIuibU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 14:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7587 (0x1da3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Mar 12 14:28:24 2026 GMT
            Not After : Mar 19 14:28:24 2026 GMT
        Subject: CN=69b2cd88-61a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:26:65:f4:a3:d8:dc:8e:cf:f6:d5:ea:cc:
                    6c:92:04:21:b8:73:4e:d7:ee:de:1e:e2:6e:40:2a:
                    f3:82:73:63:76:5d:00:1f:64:b5:9c:b7:bf:8b:73:
                    82:73:e9:81:0b:bb:20:36:cd:36:c0:95:4d:b4:fd:
                    fd:07:a2:33:0b:56:3f:4a:a9:46:5d:08:0f:df:7e:
                    6f:e8:07:94:8d:06:67:74:9c:96:6e:e9:78:ca:69:
                    7a:11:9a:58:f4:f7:e2:e8:d0:44:b8:17:f1:43:39:
                    0e:b4:4a:1d:c7:2a:c0:0d:fa:4b:28:39:72:9d:4d:
                    95:be:8c:dd:d0:e0:2f:90:68:ec:41:49:5f:e9:a0:
                    80:da:3b:c0:4e:ec:c6:76:47:1b:bf:f0:ec:e2:3e:
                    03:46:6b:ff:f3:7e:27:c9:9e:d4:33:58:a9:cc:2d:
                    4e:4a:34:5b:11:43:e7:85:b0:ca:da:53:12:ee:3d:
                    bb:e5:1c:02:1a:d1:4c:c7:27:a8:49:eb:86:34:1e:
                    c3:84:da:46:3a:db:9f:33:f1:2e:8f:3e:7d:b7:d7:
                    12:d7:06:df:e9:8d:87:1f:e7:66:33:e6:2b:aa:51:
                    5d:a0:5f:ce:fd:a1:61:9b:d8:44:53:85:f1:0d:cd:
                    ec:5f:a4:1d:ea:49:33:34:b7:7a:63:db:6c:65:b6:
                    17:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0F:CA:04:1F:46:AC:72:44:2B:BE:9A:23:A4:A6:69:6E:74:6A:05
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:59:a4:6e:56:95:4c:b3:7a:8f:c0:23:2b:3c:be:cd:6b:76:
         24:18:53:1c:c9:54:b7:07:64:cb:e1:f3:85:f5:5b:22:57:e3:
         e4:32:68:0e:61:a0:ba:f1:97:11:8c:8c:95:e4:d3:ce:33:33:
         09:25:15:a7:eb:69:c7:29:57:ed:4f:43:d8:cd:72:ff:7a:81:
         34:3f:1d:ab:23:c7:3f:bf:cd:d9:00:b7:55:43:8c:02:dd:47:
         91:55:91:b4:38:bb:02:90:62:df:aa:00:b5:14:e5:ad:ce:ba:
         89:1e:07:93:f3:30:71:c0:1a:25:ed:0e:43:fd:33:c9:5d:ab:
         a0:79:40:64:d6:ff:b9:77:b1:d0:e9:4d:a1:fd:ad:2e:8f:af:
         46:ae:17:e3:74:f9:72:da:5f:db:74:c2:bd:e1:00:a4:9b:f0:
         3c:f6:0b:e5:2a:f6:1a:2d:1a:8b:0b:64:a7:b7:5f:6c:5a:9a:
         fe:62:e3:69:c9:17:3c:6d:fd:50:5c:7e:8e:ff:d6:a6:a7:a9:
         de:b5:08:15:d6:03:13:ae:1e:f7:b9:07:4b:87:e5:44:a4:2d:
         9d:25:fd:cf:94:63:99:f0:b6:30:fd:f9:5f:ff:b5:fe:ef:3e:
         1d:50:1c:33:4d:8d:8f:7a:82:57:bb:00:a3:f8:79:a4:ec:15:
         24:7c:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:16:28 2026 by rpki-client