Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
File:                     Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json)
Hash identifier:          AbLa4q+5d/6p3o7LQSXtvBVM5Zz3KuGNFjkIz+s0Zes=
Subject key identifier:   8B:39:71:71:4D:E5:7D:49:4A:7E:90:F6:DC:CD:06:03:D3:A8:83:CB
Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0
Certificate issuer:       /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0
Certificate serial:       083F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
Manifest number:          0834
Signing time:             Mon 02 Mar 2026 20:45:06 +0000
Manifest this update:     Mon 02 Mar 2026 20:45:06 +0000
Manifest next update:     Mon 09 Mar 2026 20:45:06 +0000
Files and hashes:         1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: HLXOW0X2mXN8h9TNTMakndOiqh/QLq0wy0t7eHvaoFE=)
                          2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: UDmShs5ErpF7g+pJqqDV/YHq/rjSCvUODX6lHEx/JXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl
                          rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 20:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2111 (0x83f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0
        Validity
            Not Before: Mar  2 20:45:06 2026 GMT
            Not After : Mar  9 20:45:06 2026 GMT
        Subject: CN=69a5f6d2-66fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:e6:76:35:93:5f:21:e9:7b:4e:9a:20:cf:
                    1e:b3:3d:51:16:81:b2:9a:98:4c:58:62:ed:eb:0f:
                    e3:d4:de:c8:da:44:92:2a:12:9c:23:82:30:48:9e:
                    d4:e8:e6:73:9c:6a:45:d4:eb:94:b0:a2:5b:97:0c:
                    51:c1:3c:17:75:cf:1b:e4:98:ea:c8:70:1a:93:01:
                    67:fb:84:61:97:ec:45:8f:f8:f8:68:18:ec:f2:b4:
                    4e:8b:7d:fa:bd:83:b1:0c:8c:f6:22:0a:c7:9a:5e:
                    55:dc:ab:4a:6b:ce:54:67:2e:cc:52:8c:0c:f3:0d:
                    6d:f5:86:07:fe:db:46:ff:6a:b9:58:2e:8e:9f:00:
                    f8:74:92:13:38:1a:4e:39:e6:7b:f1:f3:ac:ab:31:
                    d7:86:b8:7e:56:51:e5:61:5a:b9:a2:f7:86:7b:b6:
                    a3:8d:2e:ac:cd:d4:07:cb:1e:63:4d:e6:e6:a9:53:
                    5f:3f:4c:d7:66:d9:f7:76:5f:99:ef:70:ab:15:e0:
                    2a:99:e0:da:ae:ef:69:56:f6:82:33:8e:c8:a6:d9:
                    c2:88:b4:4d:d3:14:ac:42:a9:ca:86:71:81:19:e1:
                    7e:b1:a6:75:48:31:7c:34:bb:d5:19:19:02:95:b2:
                    89:33:00:04:71:4e:49:ee:22:b7:40:ad:eb:83:c3:
                    be:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:39:71:71:4D:E5:7D:49:4A:7E:90:F6:DC:CD:06:03:D3:A8:83:CB
            X509v3 Authority Key Identifier:
                keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:6e:88:07:c9:0f:27:5d:66:37:dd:61:88:a4:3e:d1:b0:3a:
         a0:ec:75:ec:7d:7f:c8:67:57:17:25:be:b1:bc:c4:e2:ea:fe:
         18:59:cb:f2:45:0d:27:00:9d:3c:0a:f2:82:8c:15:48:3a:1c:
         6a:1e:6e:16:87:ac:0f:a0:13:68:76:9d:f3:91:f1:b4:d7:20:
         b3:3e:28:55:5b:db:05:46:cb:c2:ac:eb:9c:e9:7c:08:c4:73:
         1f:7f:80:61:7c:ab:0e:d7:ce:75:3f:56:11:6e:70:df:47:af:
         d0:8e:c3:9b:52:cc:bd:e3:7f:00:58:19:d7:24:9d:17:25:25:
         61:fd:21:37:4a:a2:27:47:b1:52:00:fb:c5:ff:23:7c:d3:13:
         13:b7:2a:7c:50:20:69:0a:9c:54:d9:85:ab:8d:bb:98:38:6a:
         45:df:b0:44:66:49:0a:2a:fe:ae:be:09:7e:11:d7:37:68:50:
         80:54:0b:c2:40:8d:c8:7c:42:10:6f:c4:4a:b8:90:03:a0:e2:
         2b:87:05:1a:bd:d3:ba:ec:15:9d:34:98:c3:b6:25:3d:40:07:
         5e:a3:39:2e:67:f9:b7:cd:55:fa:77:d3:71:8a:cf:11:fc:88:
         44:79:25:40:77:12:80:40:72:d1:2a:82:0c:99:a8:ef:58:46:
         aa:13:38:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REExM0UxMTAvBgNVBAUTKDY3RjNCOUZBQUExMEQyMENCMDE3RjA3RkNDOUExNTRE
ODhCNjYzQTAwHhcNMjYwMzAyMjA0NTA2WhcNMjYwMzA5MjA0NTA2WjAYMRYwFAYD
VQQDEw02OWE1ZjZkMi02NmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArPnmdjWTXyHpe06aIM8esz1RFoGymphMWGLt6w/j1N7I2kSSKhKcI4IwSJ7U
6OZznGpF1OuUsKJblwxRwTwXdc8b5JjqyHAakwFn+4Rhl+xFj/j4aBjs8rROi336
vYOxDIz2IgrHml5V3KtKa85UZy7MUowM8w1t9YYH/ttG/2q5WC6OnwD4dJITOBpO
OeZ78fOsqzHXhrh+VlHlYVq5oveGe7ajjS6szdQHyx5jTebmqVNfP0zXZtn3dl+Z
73CrFeAqmeDaru9pVvaCM47IptnCiLRN0xSsQqnKhnGBGeF+saZ1SDF8NLvVGRkC
lbKJMwAEcU5J7iK3QK3rg8O+NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIs5cXFN
5X1JSn6Q9tzNBgPTqIPLMB8GA1UdIwQYMBaAFGfzufqqENIMsBfwf8yaFU2ItmOg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS80RTg1MzFDQTA2
QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBneXdGX0JfekpvVlRZaTJZ
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1pfTzUtcW9RMGd5d0ZfQl96Sm9WVFlpMlk2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTEzRS80RTg1MzFDQTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi9aX081LXFvUTBn
eXdGX0JfekpvVlRZaTJZNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKG6IB8kPJ11mN91hiKQ+0bA6oOx17H1/yGdXFyW+sbzE4ur+GFnL8kUNJwCd
PArygowVSDocah5uFoesD6ATaHad85HxtNcgsz4oVVvbBUbLwqzrnOl8CMRzH3+A
YXyrDtfOdT9WEW5w30ev0I7Dm1LMveN/AFgZ1ySdFyUlYf0hN0qiJ0exUgD7xf8j
fNMTE7cqfFAgaQqcVNmFq427mDhqRd+wRGZJCir+rr4JfhHXN2hQgFQLwkCNyHxC
EG/ESriQA6DiK4cFGr3TuuwVnTSYw7YlPUAHXqM5Lmf5t81V+nfTcYrPEfyIRHkl
QHcSgEBy0SqCDJmo71hGqhM4aA==
-----END CERTIFICATE-----
Generated at Wed Mar 4 16:37:25 2026 by rpki-client