Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
File:                     CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json)
Hash identifier:          gGm56seup2hJrTxd+g9X+7coFlZ2+F62lmAWwblvhC8=
Subject key identifier:   17:CE:41:A0:86:69:4A:BE:45:56:86:2C:65:CC:57:A3:A8:CE:DA:1E
Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
Certificate issuer:       /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
Manifest number:          0129
Signing time:             Sun 05 Apr 2026 05:13:34 +0000
Manifest this update:     Sun 05 Apr 2026 05:13:34 +0000
Manifest next update:     Sun 12 Apr 2026 05:13:34 +0000
Files and hashes:         1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: ndlk4z+NF6U9TEYiAq7/k9odvImh83F5tToKqqqyzRw=)
                          2: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: yRKa0de5+xQBRye8B1ut3RljdvtzhwWjWUt+b8C1TkI=)
                          3: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: 22jIW/Ccl08J4PaXTvjG86262j5seRrjTm5Q9000LDk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
                          rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
        Validity
            Not Before: Apr  5 05:13:34 2026 GMT
            Not After : Apr 12 05:13:34 2026 GMT
        Subject: CN=69d1ef7e-54d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:e8:e2:78:df:4a:6e:c3:d3:13:32:c9:6d:
                    28:3a:22:b1:dc:e3:66:08:f9:07:32:9d:d2:46:c4:
                    d5:ea:84:a0:a1:d8:7a:3b:c4:d4:27:c2:7a:13:a8:
                    c4:ad:8d:cf:eb:c2:4e:68:37:58:b7:73:91:1a:c5:
                    41:0c:42:3d:52:6d:19:e8:6f:64:56:c1:41:15:9d:
                    10:32:01:3d:a5:f3:d2:92:7f:6d:81:44:3a:26:8c:
                    7f:fc:f7:fe:e5:f9:01:58:67:2b:9b:3a:05:56:e2:
                    56:fa:c2:47:f4:bf:d7:39:71:84:af:02:e1:9a:a7:
                    c7:ab:4c:11:76:61:48:6c:3e:cf:c6:ef:37:fd:33:
                    5a:b8:2d:2e:20:3e:79:e1:31:65:f1:04:b2:24:67:
                    74:0f:41:14:ce:14:56:42:95:14:e1:12:40:b1:60:
                    02:13:be:b7:12:ee:72:13:6a:10:70:d8:1f:cf:30:
                    81:0c:b9:a2:db:64:b7:66:0f:3d:38:d3:42:cd:0a:
                    f5:bd:04:7a:68:22:c5:af:20:e1:4e:a7:e9:fb:c1:
                    18:98:28:ee:bf:6d:c6:24:24:78:97:51:70:89:b5:
                    53:b3:cf:a4:7d:8f:b7:73:1d:5a:71:65:1d:44:bb:
                    df:c9:73:e4:9f:31:1a:8e:62:c3:97:d2:5b:ae:18:
                    9f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:CE:41:A0:86:69:4A:BE:45:56:86:2C:65:CC:57:A3:A8:CE:DA:1E
            X509v3 Authority Key Identifier:
                keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:79:ba:aa:be:1b:d8:1a:b1:ca:b8:de:96:99:27:8b:cd:56:
         a0:ed:ba:65:67:16:a6:72:c7:49:4e:b5:17:db:88:b1:5c:d9:
         a2:36:67:14:14:38:23:60:d7:72:32:cd:5e:7f:1d:72:ec:74:
         63:4c:39:de:b3:26:cb:47:bd:cd:e1:8e:d0:48:5e:6f:f2:73:
         68:df:46:49:1f:8b:07:ce:c9:cb:50:18:9b:3e:85:c5:86:54:
         ba:f4:b3:a3:1c:4d:0a:e9:10:c9:54:f9:a2:53:fb:bb:62:bf:
         a3:6f:a4:57:a3:c2:6f:dc:8e:44:5e:97:08:ba:53:60:44:ec:
         2c:b1:3e:7b:36:37:2f:3d:5e:6a:e4:6c:f5:6a:e4:84:ba:22:
         d5:d0:9b:a0:4d:35:5f:e3:df:eb:5a:08:d6:a6:d3:45:51:39:
         8f:53:f2:14:d6:0b:15:13:51:6d:03:51:52:7b:52:73:d3:da:
         ce:4c:d6:b7:c8:c9:f1:2e:fd:5e:cb:dd:16:75:3b:c0:c4:1d:
         d6:39:46:03:36:0a:ad:2c:ff:8b:70:90:98:14:d8:08:3b:33:
         df:76:56:3e:b7:2d:7b:81:11:46:f9:20:6e:ba:e1:2b:de:72:
         7a:cf:44:ef:7d:29:37:58:bd:12:20:23:ac:b1:52:07:61:e6:
         11:ad:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:04 2026 by rpki-client