Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
File:                     p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft (raw, json)
Hash identifier:          uAf30D97S1HK9pwqJvnP7EqHCJw9IjxRxBPlWIJbQcw=
Subject key identifier:   81:55:FC:39:F8:AF:7D:18:B1:6A:30:3D:48:96:6F:1A:13:FC:F6:1D
Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65
Certificate issuer:       /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
Certificate serial:       02D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
Manifest number:          02BC
Signing time:             Sun 05 Apr 2026 01:12:44 +0000
Manifest this update:     Sun 05 Apr 2026 01:12:44 +0000
Manifest next update:     Sun 12 Apr 2026 01:12:44 +0000
Files and hashes:         1: p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl (hash: zD1MAZf5tqyp0r445nQcRD8Tw1mtTKXhJGwYn/EtFeU=)
                          2: C11EB2BACB5911F0BEAC2433C4F9AE02.roa (hash: AyFWVAjP0bY1LUKkTu0jDgulxPnrUezSws8ZVyn0wzU=)
                          3: 2F902D58953E11EFA996495BC4F9AE02.roa (hash: 2Jv9MG7xi06P5kcDDPgdjuTC+iMwAJuA2IsIX/ADqHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl
                          rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
        Validity
            Not Before: Apr  5 01:12:44 2026 GMT
            Not After : Apr 12 01:12:44 2026 GMT
        Subject: CN=69d1b70c-36d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:4b:33:19:48:a0:01:27:66:e0:80:af:39:
                    77:96:f0:ff:5f:19:df:d4:2f:33:aa:a6:f6:61:14:
                    f7:c2:66:a7:72:c0:c6:7a:d3:5c:7c:2d:6b:25:9f:
                    19:a9:a0:f3:df:3a:ab:d3:0f:01:51:14:8d:64:39:
                    00:43:bb:48:51:54:78:ba:26:a5:e1:63:d5:ac:6f:
                    66:c0:2b:70:4d:04:a4:ae:90:b1:b1:17:24:c0:9a:
                    f6:f5:0b:de:96:74:2a:8b:e6:5e:f0:7f:10:0d:3e:
                    de:ad:c7:e0:9c:7b:cb:f2:c5:22:3e:94:a8:08:99:
                    ec:c0:f6:21:63:f5:c0:42:a6:d8:b1:68:79:0b:4f:
                    58:01:df:2c:62:07:79:47:70:0b:71:c0:c5:1c:f0:
                    4c:d2:50:dc:59:f6:fc:0a:14:a4:75:45:2c:9a:36:
                    b4:b3:7c:9b:ff:d1:69:06:7d:a6:15:0f:59:66:ef:
                    e2:45:69:c4:10:23:a9:b8:62:0c:9b:cb:1c:0f:e8:
                    46:63:bd:50:7e:5e:61:b2:76:4b:ef:50:e4:d1:0d:
                    bb:5e:27:35:4c:ef:34:dc:cf:c9:ba:bc:ed:d4:48:
                    9f:bf:0f:a0:00:e8:c6:7b:f4:df:65:11:a8:b5:8e:
                    f6:a8:f9:ff:02:63:35:3c:15:c4:f2:c1:61:33:41:
                    41:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:55:FC:39:F8:AF:7D:18:B1:6A:30:3D:48:96:6F:1A:13:FC:F6:1D
            X509v3 Authority Key Identifier:
                keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9f:b6:a0:19:e8:76:99:50:7b:62:97:63:17:60:95:b4:70:
         c6:35:5d:36:01:d3:4c:2e:27:3f:91:44:69:0e:ed:36:a7:d9:
         c1:9f:36:c5:97:dd:b4:62:44:ec:f2:58:8c:54:76:84:37:7f:
         22:b4:99:b1:28:58:3f:5a:f0:5d:1a:33:bb:e8:96:34:e5:38:
         68:0f:c5:60:43:ed:b3:2a:3a:e7:7c:1b:65:be:b4:26:17:5b:
         59:55:32:50:0e:ef:bb:f1:e9:72:fa:f2:d6:a7:73:db:01:ed:
         dc:b3:71:8f:0b:2a:72:31:2e:96:a1:e7:b0:2a:63:8d:1d:00:
         09:ee:c5:c3:69:80:06:2b:27:da:4d:9d:da:8d:fc:76:0c:f3:
         32:f6:2a:82:81:bf:84:67:6e:a4:03:cf:96:b5:54:16:98:7b:
         95:d6:8f:c3:82:3b:ea:c2:ce:0b:aa:0b:27:a4:4b:ce:f5:dc:
         80:73:a2:91:85:47:70:a1:5d:1b:3c:fc:df:fd:9b:47:bd:c1:
         de:6f:18:51:06:de:2f:c8:5b:00:0a:37:21:38:7c:53:03:8e:
         de:95:2b:7f:eb:79:51:dd:6f:ec:5b:98:6d:7f:70:ed:4b:d4:
         88:37:0f:61:6a:08:f2:b7:66:6d:e5:c3:ee:cf:5e:7a:ce:f5:
         5c:74:b6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:04 2026 by rpki-client