Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
File:                     CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json)
Hash identifier:          L9lh6t7CBfGisy0E3HCeYLdSL5JBGF/P+Z0DMv/+qRc=
Subject key identifier:   17:F9:43:27:33:0E:2A:81:C6:AC:74:5C:CE:A1:B5:BF:BE:0A:88:A5
Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
Certificate issuer:       /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
Manifest number:          0158
Signing time:             Sun 05 Jul 2026 05:55:09 +0000
Manifest this update:     Sun 05 Jul 2026 05:55:08 +0000
Manifest next update:     Sun 12 Jul 2026 05:55:08 +0000
Files and hashes:         1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: cVq2wx+Dv3RzPsfT+It+Ld6QKbp4aCgpIa+Hyjzw/+U=)
                          2: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: PKsDzQz8Iz9pp87aDZQ9VcpxtBwvynLDnu1x8wN8n3E=)
                          3: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: hlTOhKlRcRDqDLJx9A76x4qFo+ibdhrZ7489cVCKdJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
                          rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 05:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
        Validity
            Not Before: Jul  5 05:55:08 2026 GMT
            Not After : Jul 12 05:55:08 2026 GMT
        Subject: CN=6a49f1bd-a052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:95:5e:14:e3:18:32:2c:e9:eb:ed:c9:af:8d:
                    62:86:f5:cc:18:f4:92:a5:d6:09:d9:a3:28:a9:55:
                    83:5f:b8:64:3e:1d:09:86:76:d4:27:ff:cf:72:52:
                    fe:d1:c7:fd:73:1f:31:66:21:e6:c8:91:e2:bd:a6:
                    a0:56:86:78:df:b4:39:82:81:e2:c8:38:8e:55:b9:
                    e6:de:9b:96:d9:5b:b0:7a:80:85:4b:fa:4d:8a:d8:
                    b9:dc:f0:72:84:43:ec:09:67:76:27:61:dc:39:0c:
                    d6:94:63:fd:44:88:94:33:32:f1:d2:51:6a:2b:f2:
                    a0:0f:42:0d:22:af:6a:dd:20:56:8d:4e:24:ed:52:
                    b4:82:22:6f:3b:56:bf:2d:3e:b4:65:f6:a1:31:6a:
                    66:a4:d4:a8:8b:f0:f6:b2:a4:66:21:3a:af:4b:a3:
                    5d:78:74:1f:eb:b5:10:2b:a8:2b:0d:7d:d4:93:ad:
                    12:1f:9c:0e:5e:34:06:a8:90:b8:0c:1b:af:de:3b:
                    f1:91:da:31:21:e3:e6:0b:1f:d9:fd:a4:d7:e2:04:
                    7b:62:bf:f4:8e:f8:ea:14:ad:a9:bf:60:24:74:9a:
                    be:8b:06:ad:f2:a7:9c:b6:84:f2:65:17:ba:5e:8f:
                    d8:3c:bd:89:a4:d9:f4:71:dc:35:63:64:8e:6b:05:
                    d4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F9:43:27:33:0E:2A:81:C6:AC:74:5C:CE:A1:B5:BF:BE:0A:88:A5
            X509v3 Authority Key Identifier:
                keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:74:e4:ac:1c:78:95:bc:4b:48:76:54:74:c7:3b:2c:fa:ce:
         94:ec:fa:17:73:7e:a3:f0:85:67:60:f1:8c:1f:1a:09:b1:bf:
         10:76:91:0a:88:64:1c:59:94:00:f7:70:8b:b3:00:94:fe:e5:
         99:4e:61:16:de:f9:2d:44:fb:4f:6c:94:93:60:46:cf:18:4d:
         fa:62:a2:df:14:1e:21:32:14:b6:e9:14:99:ad:ef:89:c6:a0:
         e8:17:8c:5a:4b:95:49:8f:fe:31:b9:96:3e:ac:19:25:42:a7:
         60:c3:7e:04:b4:3f:8b:f1:2f:2f:f5:d5:30:80:c9:bb:0d:23:
         58:58:d6:5e:c0:95:94:0b:08:6e:42:54:8d:50:26:96:b6:1b:
         66:51:3f:e7:ae:19:fc:73:7d:68:ba:e4:6f:3a:fd:f7:c7:a7:
         01:61:57:e9:a4:20:72:49:34:34:1a:dd:01:1a:f6:67:a7:ad:
         33:48:d8:42:21:fc:c7:9c:28:e3:f0:a0:42:b1:fc:a8:dc:68:
         cd:a7:10:fa:c8:f0:76:48:fb:9e:58:b4:17:ad:27:49:0c:6b:
         95:36:7f:84:83:53:14:39:2a:a2:00:56:a5:ea:c2:c5:d3:8b:
         be:c9:36:74:89:fb:3b:af:bc:03:3c:d0:67:e3:60:2c:fa:ae:
         0f:7a:e2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:13:52 2026 by rpki-client