Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
File:                     mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json)
Hash identifier:          oQrf1mOeKWhqMOF6PuHekDrN/rNOs//HwCcQkkSpaYk=
Subject key identifier:   7B:3C:5A:A4:D2:28:75:FC:B2:EF:40:92:E6:6A:CC:17:41:C7:B1:17
Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
Certificate issuer:       /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
Manifest number:          0172
Signing time:             Sun 29 Mar 2026 04:23:42 +0000
Manifest this update:     Sun 29 Mar 2026 04:23:42 +0000
Manifest next update:     Sun 05 Apr 2026 04:23:42 +0000
Files and hashes:         1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: 9URrfG26Kgw1fgTJECz/whWb0kuqc5I8kBo+tHUcyK8=)
                          2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: AJJ92VGVLucsvsIdaZU0nKfuQXZ8cJi9IfizP5I2ais=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
                          rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 04:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB055, serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
        Validity
            Not Before: Mar 29 04:23:42 2026 GMT
            Not After : Apr  5 04:23:42 2026 GMT
        Subject: CN=69c8a94e-c6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:d3:f0:2c:a0:cb:7f:2b:45:ab:4e:4b:ad:
                    cf:c3:c5:84:77:bf:32:84:63:d8:4e:f6:09:32:50:
                    8e:ba:93:12:ec:bb:3b:b4:81:b3:12:4c:1d:c5:e4:
                    e6:06:43:e2:12:4f:1d:be:76:24:4d:be:ea:ee:40:
                    88:32:6a:70:e2:ee:c5:a0:35:5c:10:49:e7:b1:2a:
                    99:f9:f6:2e:9f:c2:b9:3c:f3:76:a0:62:7a:c9:3c:
                    d5:c0:b7:47:72:f0:82:97:fd:51:35:8e:c2:4f:d5:
                    e1:a3:89:56:f2:b3:b1:ed:8e:88:a0:f8:26:f0:2d:
                    76:9d:cb:e0:43:59:af:1e:30:e9:86:7d:77:a0:7f:
                    b0:d5:0b:0a:21:40:9c:77:c8:c2:f2:f3:21:77:ed:
                    96:aa:04:85:86:34:b8:50:90:cc:f5:a4:10:4d:18:
                    e8:a1:ab:de:35:e9:57:9c:00:b2:64:1f:fb:d4:a1:
                    36:93:da:60:ec:56:e8:87:66:a8:85:47:b5:bd:fb:
                    96:ab:bb:9c:fc:7e:8f:f5:74:b0:d5:bf:b7:c7:b0:
                    aa:9b:2d:7a:b3:8e:62:fd:ee:93:e2:f3:45:36:3c:
                    54:58:15:f3:47:7c:2b:62:c6:38:07:c3:3e:05:b6:
                    d4:4d:40:d2:d6:cd:6c:5a:3e:fa:26:8d:fd:b5:8a:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3C:5A:A4:D2:28:75:FC:B2:EF:40:92:E6:6A:CC:17:41:C7:B1:17
            X509v3 Authority Key Identifier:
                keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1d:92:97:2f:bf:a6:7d:69:1b:9f:98:42:d3:6d:43:16:d1:
         0d:46:62:29:63:b7:13:3f:61:f4:09:9b:f1:10:61:59:f8:5c:
         f0:77:bc:ae:42:ba:0d:4f:8c:9a:e9:2a:e8:bc:d3:e9:00:7f:
         a2:9a:a6:d9:f0:ef:49:28:23:a6:c2:65:41:cd:83:87:2d:65:
         58:c1:d9:65:f4:fe:70:9a:72:18:27:0e:78:ff:3a:56:28:99:
         7d:37:8f:4d:86:f7:bc:ab:b0:0f:02:10:f8:29:36:24:44:9d:
         4a:1d:f1:b0:13:d6:94:66:d8:6c:ff:8a:ec:e9:2d:2b:d4:0f:
         78:94:87:d6:08:2a:8f:2b:10:b9:df:db:c5:62:6a:73:25:d4:
         3d:17:e6:39:98:d1:e1:6d:5e:da:d2:84:95:41:93:38:ec:0c:
         8d:4b:92:03:62:20:5a:96:60:a0:2c:46:59:3a:4a:25:0b:0e:
         b4:61:91:76:ab:de:ca:a6:ca:e9:3a:61:06:54:99:2b:f3:aa:
         0c:74:4b:2a:43:a1:70:f6:2c:c5:71:12:dc:53:aa:bb:58:45:
         14:9e:dc:74:6e:7f:4f:9d:62:3f:95:e1:35:9d:6b:be:9f:1f:
         a4:9f:28:a5:2a:a6:8b:fe:f6:04:46:cf:0c:1b:f8:7b:ce:a6:
         f7:1e:5e:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIwNTUxMTAvBgNVBAUTKDk5OUIyRjY1MzlDMjNFQUVCNDY5RTY3NTM5RkIyREM5
MzNEOTgwNDAwHhcNMjYwMzI5MDQyMzQyWhcNMjYwNDA1MDQyMzQyWjAYMRYwFAYD
VQQDEw02OWM4YTk0ZS1jNmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlAfT8Cygy38rRatOS63Pw8WEd78yhGPYTvYJMlCOupMS7Ls7tIGzEkwdxeTm
BkPiEk8dvnYkTb7q7kCIMmpw4u7FoDVcEEnnsSqZ+fYun8K5PPN2oGJ6yTzVwLdH
cvCCl/1RNY7CT9Xho4lW8rOx7Y6IoPgm8C12ncvgQ1mvHjDphn13oH+w1QsKIUCc
d8jC8vMhd+2WqgSFhjS4UJDM9aQQTRjooaveNelXnACyZB/71KE2k9pg7Fboh2ao
hUe1vfuWq7uc/H6P9XSw1b+3x7Cqmy16s45i/e6T4vNFNjxUWBXzR3wrYsY4B8M+
BbbUTUDS1s1sWj76Jo39tYqfsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHs8WqTS
KHX8su9AkuZqzBdBx7EXMB8GA1UdIwQYMBaAFJmbL2U5wj6utGnmdTn7Lckz2YBA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA1NS80QUJCQzAxQ0Y1
NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1BxNjBhZVoxT2ZzdHlUUFpn
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21ac3ZaVG5DUHE2MGFlWjFPZnN0eVRQWmdFQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjA1NS80QUJCQzAxQ0Y1NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1Bx
NjBhZVoxT2ZzdHlUUFpnRUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACR2Sly+/pn1pG5+YQtNtQxbRDUZiKWO3Ez9h9Amb8RBhWfhc8He8rkK6DU+M
mukq6LzT6QB/opqm2fDvSSgjpsJlQc2Dhy1lWMHZZfT+cJpyGCcOeP86ViiZfTeP
TYb3vKuwDwIQ+Ck2JESdSh3xsBPWlGbYbP+K7OktK9QPeJSH1ggqjysQud/bxWJq
cyXUPRfmOZjR4W1e2tKElUGTOOwMjUuSA2IgWpZgoCxGWTpKJQsOtGGRdqveyqbK
6TphBlSZK/OqDHRLKkOhcPYsxXES3FOqu1hFFJ7cdG5/T51iP5XhNZ1rvp8fpJ8o
pSqmi/72BEbPDBv4e86m9x5eDw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:23:36 2026 by rpki-client