Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
File:                     Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json)
Hash identifier:          0aP28BGMcH2bzMcC11IsCmIpXW4UP7PuNiF9UKujSUM=
Subject key identifier:   51:55:37:0A:B8:1A:AB:2E:7D:4B:44:22:8E:09:9D:0A:F3:87:1B:8A
Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA
Certificate issuer:       /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
Manifest number:          EF
Signing time:             Sun 05 Apr 2026 05:43:46 +0000
Manifest this update:     Sun 05 Apr 2026 05:43:46 +0000
Manifest next update:     Sun 12 Apr 2026 05:43:46 +0000
Files and hashes:         1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: Q8ASGYKG+8crdpGtFAB56DnnaZzlrDDz8G4nHujr0b0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl
                          rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA
        Validity
            Not Before: Apr  5 05:43:46 2026 GMT
            Not After : Apr 12 05:43:46 2026 GMT
        Subject: CN=69d1f692-26d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c6:23:03:94:7e:d5:24:c9:0a:65:7f:41:8a:
                    b0:60:9f:93:45:64:f7:b6:55:cb:5d:fb:61:6b:b4:
                    cd:51:d7:3d:d7:29:d4:31:21:0a:30:32:9d:6d:2f:
                    15:4c:16:b8:eb:cf:6a:91:e5:5e:ef:d2:2b:8f:49:
                    1d:9d:9a:84:19:c4:1d:67:de:95:66:e5:82:3d:db:
                    73:c0:2c:a9:dc:32:2b:2c:28:15:d8:ae:5a:db:1a:
                    46:03:a9:1b:cc:06:09:d3:20:e5:79:92:75:69:11:
                    07:6f:c4:3e:5d:f6:fd:63:7b:6e:da:5f:64:89:e2:
                    8a:77:51:72:b7:5d:2e:1d:13:fa:25:fb:7c:96:54:
                    8d:30:70:06:d4:fb:f0:3a:ca:36:c5:3d:5f:60:5b:
                    8c:4a:50:37:4d:b1:e7:24:d5:0b:ae:47:90:c6:07:
                    9c:8f:a3:c7:bd:b9:d0:73:cb:1f:be:a0:2f:e1:90:
                    3e:c1:3e:22:e4:26:48:2b:4d:42:ca:98:49:8e:dd:
                    12:e8:f3:96:ef:d8:3a:b8:37:58:7c:6a:85:3c:a3:
                    4c:f6:6c:48:d3:67:22:ad:72:a6:49:14:60:1a:53:
                    d7:c9:38:1b:ce:c3:ef:13:c7:6b:16:c7:a7:3e:d2:
                    9a:9d:39:68:1a:3c:0c:89:5a:7f:5a:62:2a:27:5a:
                    03:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:55:37:0A:B8:1A:AB:2E:7D:4B:44:22:8E:09:9D:0A:F3:87:1B:8A
            X509v3 Authority Key Identifier:
                keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d0:44:c2:60:df:23:8b:77:0e:52:18:a2:48:1b:36:3d:1c:
         bb:12:2e:8c:82:d5:e0:19:dc:f7:12:b0:8e:fd:50:ee:8f:45:
         a5:29:5d:2b:57:f6:55:61:47:de:4a:c8:54:f2:b4:0e:62:f1:
         04:1f:e8:03:9c:35:85:50:42:65:d0:36:0b:d6:55:82:da:18:
         c2:39:b8:d9:c7:ba:98:1a:b7:a5:55:ea:3e:eb:e7:3f:04:ad:
         e2:e7:81:ca:70:0b:08:66:a0:47:a3:85:63:ba:d2:6c:66:57:
         87:0b:5e:be:ae:27:3c:34:f5:75:02:0b:cd:ee:ab:71:e6:7c:
         2e:2e:19:06:ad:b9:34:cf:50:0f:d3:75:74:5e:39:d0:b4:8a:
         46:a1:0a:a9:90:f2:aa:43:21:75:eb:30:b2:a0:83:e5:70:6f:
         77:59:8e:7e:06:80:34:dd:50:3b:01:45:ef:be:02:6a:de:29:
         e1:03:b7:bd:4e:a5:e9:05:d6:ac:4a:c2:06:e9:0a:26:06:b2:
         f1:92:b2:9a:74:70:9e:31:c0:86:e3:15:aa:f7:7e:3f:55:a9:
         75:da:4e:42:ea:8a:c2:63:4a:7e:0e:fa:67:09:e3:43:35:f9:
         ee:15:29:13:3d:9a:6d:35:4a:66:c9:59:5a:56:d5:fb:e1:4c:
         77:28:82:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVGMDcxMTAvBgNVBAUTKDM3MzhGRjNDNUJBRjE5MTE4MkVCQTE0Qjc4Qzg0OEE1
QUVGQTRDQUEwHhcNMjYwNDA1MDU0MzQ2WhcNMjYwNDEyMDU0MzQ2WjAYMRYwFAYD
VQQDEw02OWQxZjY5Mi0yNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0sYjA5R+1STJCmV/QYqwYJ+TRWT3tlXLXftha7TNUdc91ynUMSEKMDKdbS8V
TBa4689qkeVe79Irj0kdnZqEGcQdZ96VZuWCPdtzwCyp3DIrLCgV2K5a2xpGA6kb
zAYJ0yDleZJ1aREHb8Q+Xfb9Y3tu2l9kieKKd1Fyt10uHRP6Jft8llSNMHAG1Pvw
Oso2xT1fYFuMSlA3TbHnJNULrkeQxgecj6PHvbnQc8sfvqAv4ZA+wT4i5CZIK01C
yphJjt0S6POW79g6uDdYfGqFPKNM9mxI02cirXKmSRRgGlPXyTgbzsPvE8drFsen
PtKanTloGjwMiVp/WmIqJ1oDXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFFVNwq4
GqsufUtEIo4JnQrzhxuKMB8GA1UdIwQYMBaAFDc4/zxbrxkRguuhS3jISKWu+kyq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYwNy8zNzM3QTJCQ0Mz
NUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdSR0M2NkZMZU1oSXBhNzZU
S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRLby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUYwNy8zNzM3QTJCQ0MzNUExMUVGODMxNEM0M0ZDNEY5QUUwMi9OempfUEZ1dkdS
R0M2NkZMZU1oSXBhNzZUS28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOdBEwmDfI4t3DlIYokgbNj0cuxIujILV4Bnc9xKwjv1Q7o9FpSldK1f2VWFH
3krIVPK0DmLxBB/oA5w1hVBCZdA2C9ZVgtoYwjm42ce6mBq3pVXqPuvnPwSt4ueB
ynALCGagR6OFY7rSbGZXhwtevq4nPDT1dQILze6rceZ8Li4ZBq25NM9QD9N1dF45
0LSKRqEKqZDyqkMhdeswsqCD5XBvd1mOfgaANN1QOwFF774Cat4p4QO3vU6l6QXW
rErCBukKJgay8ZKymnRwnjHAhuMVqvd+P1WpddpOQuqKwmNKfg76ZwnjQzX57hUp
Ez2abTVKZslZWlbV++FMdyiCaQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:05 2026 by rpki-client