Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
File:                     g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft (raw, json)
Hash identifier:          mCubO+1GP3bwYPapxkzdHMrWwHdt6U0KX7CjJVPudJs=
Subject key identifier:   D6:73:2A:4B:C3:3B:12:5D:C5:E4:E1:D4:95:E0:84:F1:D3:87:2A:12
Authority key identifier: 83:AF:B3:31:91:BE:13:9B:C4:41:D3:9D:BF:20:5D:42:B4:97:2D:40
Certificate issuer:       /CN=A91AC6B1/serialNumber=83AFB33191BE139BC441D39DBF205D42B4972D40
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g6-zMZG-E5vEQdOdvyBdQrSXLUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
Manifest number:          10
Signing time:             Sat 07 Mar 2026 08:19:37 +0000
Manifest this update:     Sat 07 Mar 2026 08:19:36 +0000
Manifest next update:     Sat 14 Mar 2026 08:19:36 +0000
Files and hashes:         1: g6-zMZG-E5vEQdOdvyBdQrSXLUA.crl (hash: qB0J9EJNCK8E0DBKn+ukMwyEQiAJxYRzZiLHGRMWH1o=)
                          2: 9292728E0E0611F1A3BA1443083D8C67.roa (hash: 7N3JvEFeMmGStZnau/w/mYkUGk3JI2SPm48oBXm5aTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.crl
                          rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g6-zMZG-E5vEQdOdvyBdQrSXLUA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC6B1, serialNumber=83AFB33191BE139BC441D39DBF205D42B4972D40
        Validity
            Not Before: Mar  7 08:19:36 2026 GMT
            Not After : Mar 14 08:19:36 2026 GMT
        Subject: CN=69abdf98-9559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:74:90:e8:2a:28:63:08:f4:1c:f1:e7:f0:
                    6a:6f:d6:bf:14:b3:7b:20:8e:33:f6:33:ab:24:81:
                    44:27:cd:2b:33:ec:72:62:79:65:4f:89:4b:19:f7:
                    2c:db:00:87:a9:17:69:11:7a:95:0e:48:1a:1c:71:
                    b2:38:17:df:54:e2:a2:88:66:d7:7b:a7:5b:1a:69:
                    27:27:2e:88:0f:b8:64:37:ba:80:fd:f0:cb:48:d5:
                    c5:dc:80:43:7e:0c:0e:aa:a0:4e:9c:11:bf:13:dc:
                    d7:d6:02:56:35:36:42:c2:52:65:18:59:e7:54:58:
                    39:f5:e0:66:da:d1:7f:55:65:d4:01:9e:0b:9d:2d:
                    50:6a:58:ba:96:68:6f:c1:bb:16:01:93:d1:5c:53:
                    37:5c:ec:ba:89:d5:90:a3:8b:ab:e3:c5:bc:2b:0b:
                    84:69:bf:df:a6:6a:81:5a:7e:e7:b3:06:26:e9:a0:
                    f9:7a:a8:43:0d:31:54:da:06:59:cf:c7:f8:4b:a0:
                    82:8a:b9:5c:b2:40:6f:5e:fc:2c:0b:0c:d0:e0:44:
                    36:a5:ae:3b:5a:c1:27:56:8a:88:ea:12:6f:f2:c9:
                    04:0c:55:7e:a7:23:03:3e:a1:a4:07:29:2c:21:f4:
                    ea:bc:5a:a3:ce:f0:8f:4f:b0:c3:f7:8a:47:84:f5:
                    69:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:73:2A:4B:C3:3B:12:5D:C5:E4:E1:D4:95:E0:84:F1:D3:87:2A:12
            X509v3 Authority Key Identifier:
                keyid:83:AF:B3:31:91:BE:13:9B:C4:41:D3:9D:BF:20:5D:42:B4:97:2D:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g6-zMZG-E5vEQdOdvyBdQrSXLUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/10C0F700088C11F1BCB153E70F3D8C67/g6-zMZG-E5vEQdOdvyBdQrSXLUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:70:46:8f:9d:dc:0c:74:27:4a:4a:f2:44:91:33:a4:ce:94:
         37:67:5f:22:aa:31:fb:73:1d:e3:2d:00:37:4b:10:a6:84:fd:
         e7:e5:3a:ef:9d:26:75:5c:c9:f9:d4:61:26:7b:cf:80:86:b3:
         4e:ea:ec:70:94:f1:8e:2d:d3:3f:2d:d1:ab:09:86:43:b1:da:
         50:ee:09:ab:b4:51:f3:b6:ba:01:8c:bc:f2:05:91:b0:92:0b:
         0c:bf:83:5a:d4:5b:7c:72:ed:ea:6e:31:a6:51:6d:42:e1:7c:
         24:44:5d:51:84:16:4e:53:8c:9b:b3:02:2f:1c:d2:c9:2d:25:
         c0:12:98:2e:b4:1a:17:8a:72:6f:b9:87:85:61:1f:5a:66:b2:
         3f:0c:ec:b0:01:ea:a7:93:89:8e:aa:f8:bc:65:1e:c2:d2:15:
         ef:8c:a0:e4:b6:8c:0d:20:de:19:6d:59:f2:73:99:c9:91:96:
         2e:72:7d:e1:44:17:fb:81:d3:08:f2:6b:7e:cd:b6:2c:17:2f:
         71:54:75:18:30:5c:c4:04:9e:60:60:14:d9:22:7c:9f:67:6b:
         9e:ae:f9:3d:2f:ac:7c:b5:13:b9:45:f8:38:f9:f1:63:55:ee:
         07:94:07:0d:66:77:bf:a1:b7:84:4f:f7:c0:eb:39:ba:8a:a0:
         16:34:97:74
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzZCMTExMC8GA1UEBRMoODNBRkIzMzE5MUJFMTM5QkM0NDFEMzlEQkYyMDVENDJC
NDk3MkQ0MDAeFw0yNjAzMDcwODE5MzZaFw0yNjAzMTQwODE5MzZaMBgxFjAUBgNV
BAMTDTY5YWJkZjk4LTk1NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCuv3SQ6CooYwj0HPHn8Gpv1r8Us3sgjjP2M6skgUQnzSsz7HJieWVPiUsZ9yzb
AIepF2kRepUOSBoccbI4F99U4qKIZtd7p1saaScnLogPuGQ3uoD98MtI1cXcgEN+
DA6qoE6cEb8T3NfWAlY1NkLCUmUYWedUWDn14Gba0X9VZdQBngudLVBqWLqWaG/B
uxYBk9FcUzdc7LqJ1ZCji6vjxbwrC4Rpv9+maoFafuezBibpoPl6qEMNMVTaBlnP
x/hLoIKKuVyyQG9e/CwLDNDgRDalrjtawSdWiojqEm/yyQQMVX6nIwM+oaQHKSwh
9Oq8WqPO8I9PsMP3ikeE9WmnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1nMqS8M7
El3F5OHUleCE8dOHKhIwHwYDVR0jBBgwFoAUg6+zMZG+E5vEQdOdvyBdQrSXLUAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNkIxLzEwQzBGNzAwMDg4
QzExRjFCQ0IxNTNFNzBGM0Q4QzY3L2c2LXpNWkctRTV2RVFkT2R2eUJkUXJTWExV
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvZzYtek1aRy1FNXZFUWRPZHZ5QmRRclNYTFVBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD
NkIxLzEwQzBGNzAwMDg4QzExRjFCQ0IxNTNFNzBGM0Q4QzY3L2c2LXpNWkctRTV2
RVFkT2R2eUJkUXJTWExVQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCucEaPndwMdCdKSvJEkTOkzpQ3Z18iqjH7cx3jLQA3SxCmhP3n5TrvnSZ1XMn5
1GEme8+AhrNO6uxwlPGOLdM/LdGrCYZDsdpQ7gmrtFHztroBjLzyBZGwkgsMv4Na
1Ft8cu3qbjGmUW1C4XwkRF1RhBZOU4ybswIvHNLJLSXAEpgutBoXinJvuYeFYR9a
ZrI/DOywAeqnk4mOqvi8ZR7C0hXvjKDktowNIN4ZbVnyc5nJkZYucn3hRBf7gdMI
8mt+zbYsFy9xVHUYMFzEBJ5gYBTZInyfZ2uervk9L6x8tRO5Rfg4+fFjVe4HlAcN
Zne/obeET/fA6zm6iqAWNJd0
-----END CERTIFICATE-----
Generated at Sat Mar 7 14:31:40 2026 by rpki-client