Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
File:                     rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft (raw, json)
Hash identifier:          44Fri4Y3NVkFHmPFN2EzAuM8/MC0bi9fMllItg7m8fU=
Subject key identifier:   E2:72:A0:AE:9F:D2:30:6D:BD:5E:06:7B:78:21:6C:22:08:96:FD:B7
Authority key identifier: AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4
Certificate issuer:       /CN=A9167427/serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
Manifest number:          0247
Signing time:             Sun 05 Apr 2026 02:00:51 +0000
Manifest this update:     Sun 05 Apr 2026 02:00:51 +0000
Manifest next update:     Sun 12 Apr 2026 02:00:51 +0000
Files and hashes:         1: rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl (hash: SgI+Qk8hHt22OKRTOTPCrFA0q0DUR5h7KixJPL7ZPfk=)
                          2: 3FEB4A2EBD8C11EDA150C338C4F9AE02.roa (hash: kOU4ZfenYTi6avUVZzRef8vWcpX0uLOlwyAQ4TBNpt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl
                          rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167427, serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4
        Validity
            Not Before: Apr  5 02:00:51 2026 GMT
            Not After : Apr 12 02:00:51 2026 GMT
        Subject: CN=69d1c253-5de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ff:36:f8:79:2e:f0:b1:d0:84:cd:67:77:03:
                    70:fc:09:e9:48:89:2f:eb:3a:30:54:72:a7:e9:e3:
                    aa:25:6c:bb:e0:5a:cc:a9:58:14:c6:c9:ec:7e:9b:
                    13:e0:39:fb:75:e6:76:47:37:ed:7f:51:f3:0a:e2:
                    8f:6c:bb:96:c2:59:56:af:19:39:88:3e:73:b0:72:
                    24:a9:d0:7e:b1:56:57:81:2f:8d:ec:a5:79:7f:00:
                    1c:2f:0d:1a:3b:94:60:24:a9:6e:eb:f2:2b:75:fa:
                    14:2a:50:6c:a6:6d:b9:e5:3a:55:f4:95:9b:2f:d2:
                    d7:e0:de:3c:0d:b2:4b:30:39:d5:15:62:30:54:72:
                    e7:f2:1c:2c:90:74:2d:16:69:c9:df:6a:99:6b:34:
                    23:29:31:31:44:08:eb:b3:ad:6e:4d:c8:23:07:01:
                    88:c5:f4:92:ed:73:3d:5c:3c:7c:62:ce:d6:9f:2b:
                    c7:6c:40:8e:3c:1d:49:a8:2f:9c:3c:55:93:54:89:
                    48:c1:30:8d:69:94:8c:81:87:01:6f:3a:9c:6a:ef:
                    5c:b2:8c:43:4d:19:5e:89:f3:fb:9d:3b:85:36:14:
                    fa:7b:b3:99:70:06:57:83:44:48:f3:19:63:db:07:
                    f1:b0:12:a6:81:cd:39:c9:44:51:15:f4:1c:54:e9:
                    f2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:72:A0:AE:9F:D2:30:6D:BD:5E:06:7B:78:21:6C:22:08:96:FD:B7
            X509v3 Authority Key Identifier:
                keyid:AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:4d:b3:f4:2c:df:ac:66:28:cd:4a:bb:91:2b:b5:d7:2a:
         7e:c5:59:55:12:0a:9a:78:25:30:f6:4a:2c:11:18:a4:9f:d6:
         1c:51:2d:dc:58:eb:7f:89:19:fd:a0:85:79:81:6c:09:ee:f7:
         85:18:f1:0c:0f:ec:d2:24:e1:00:76:b0:9a:04:77:dc:88:61:
         d1:f0:68:fa:a7:d6:5c:bd:13:1e:23:11:81:e1:36:57:48:02:
         6c:07:e4:94:ab:f4:8f:92:c1:bf:87:ed:50:70:3c:d2:f4:4c:
         d3:80:45:a2:2c:ee:b8:2c:dd:af:9a:96:6f:a8:2f:e1:3f:a3:
         c6:72:40:7b:e0:77:b7:05:f7:c4:e1:aa:d3:2a:89:b5:f2:39:
         dd:a5:62:86:e2:c1:a5:57:d3:1c:b1:c2:40:ca:18:7e:ba:73:
         9a:27:45:9b:35:74:9f:0e:fc:97:e2:62:dd:b9:3e:b9:f0:b7:
         1d:06:7e:fd:78:bc:fe:f1:a0:b0:f3:8e:a8:08:25:dd:55:dd:
         d6:f9:38:09:9d:24:20:ef:20:65:f8:b8:c5:47:95:8f:e2:e6:
         91:05:da:28:66:6d:e4:b3:94:7a:5a:3c:8e:7c:2b:5e:aa:c1:
         0e:fb:69:d8:df:46:74:ad:c1:28:5c:7f:30:16:d6:51:fe:ff:
         e5:e8:d1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:17 2026 by rpki-client