Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
File:                     CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json)
Hash identifier:          PSLgZHOw0ZIT0UYRJyw4vJmN/cX1oWHsY1Rm0/iXh3w=
Subject key identifier:   5E:DF:72:DF:70:26:55:89:DC:80:58:BB:13:3A:99:19:F5:70:13:80
Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
Certificate issuer:       /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
Manifest number:          016F
Signing time:             Wed 19 Aug 2026 05:38:50 +0000
Manifest this update:     Wed 19 Aug 2026 05:38:49 +0000
Manifest next update:     Wed 26 Aug 2026 05:38:49 +0000
Files and hashes:         1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: /HKowB/wR8ksU5P3d3WW03dmH0cr8IGMQKSYBcXb7iU=)
                          2: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: PKsDzQz8Iz9pp87aDZQ9VcpxtBwvynLDnu1x8wN8n3E=)
                          3: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: hlTOhKlRcRDqDLJx9A76x4qFo+ibdhrZ7489cVCKdJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
                          rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
        Validity
            Not Before: Aug 19 05:38:49 2026 GMT
            Not After : Aug 26 05:38:49 2026 GMT
        Subject: CN=6a854169-a023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:d6:91:18:04:9c:6d:0a:49:ad:38:5b:7d:
                    21:2a:ed:88:35:d9:0c:70:50:a2:20:74:a3:d2:0c:
                    93:01:4a:14:f3:b1:e9:77:3b:c1:09:ea:85:52:62:
                    99:ea:8f:00:78:c8:fe:55:53:cf:bf:76:40:d9:d4:
                    07:1c:6b:8c:c5:71:b7:7b:10:f5:e2:32:87:ef:4f:
                    a7:6b:9e:71:39:75:11:24:d5:71:29:73:b0:b2:f3:
                    0f:c7:cc:c1:08:31:92:2a:ef:21:4c:91:6e:01:cb:
                    c0:ad:9e:ac:87:6d:8f:c1:4a:94:d5:24:cb:23:f1:
                    e4:f5:2d:fa:9c:8d:79:1a:d6:88:9b:e9:be:06:cb:
                    dc:0a:e9:2d:83:6b:9f:d5:c7:23:94:3a:a8:ec:29:
                    f7:5b:f8:d4:05:21:1e:f4:df:ad:cb:c7:2f:24:16:
                    83:1e:e4:d1:e6:19:60:00:ee:b4:cc:56:51:d9:4e:
                    5a:30:a4:63:9a:9b:ce:2a:be:bb:ea:ed:f4:62:e9:
                    2b:8f:1a:f1:49:38:09:6b:ca:75:ba:f1:c8:33:06:
                    a1:bc:c4:67:20:17:f4:28:fd:cc:95:b8:f4:dd:f9:
                    71:f2:3f:62:3a:8c:9c:73:a8:59:44:37:c0:b2:5e:
                    db:f3:29:7b:2c:45:86:d4:fa:93:63:70:7c:05:a5:
                    f5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DF:72:DF:70:26:55:89:DC:80:58:BB:13:3A:99:19:F5:70:13:80
            X509v3 Authority Key Identifier:
                keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cc:15:39:1d:a6:b9:a8:5a:1e:3c:d5:e0:41:60:97:6b:61:
         77:de:d6:87:2b:cf:a6:d5:ae:b9:dd:cd:43:18:e0:06:fe:68:
         4c:51:c4:da:dc:23:b4:9c:39:34:50:d1:f3:31:ff:96:2c:74:
         66:48:91:07:f2:f3:2b:e2:df:21:ff:32:cc:db:9b:53:01:16:
         10:a5:07:05:e6:6a:89:56:a7:af:36:c8:4e:40:9e:cb:0d:0f:
         2f:8d:d8:84:62:21:b8:16:08:91:8e:f4:9f:71:fa:05:b9:a0:
         aa:c2:d1:ae:8c:2d:f9:ca:06:5f:b5:6f:36:6a:a0:8e:53:1f:
         36:bf:8a:f1:7e:2f:8b:50:1d:41:bf:ef:68:5d:12:bd:56:74:
         e1:5d:2d:03:05:0f:cb:fa:a8:f3:99:d6:f5:00:5e:f4:a8:52:
         49:6f:f3:c0:12:4c:32:e5:b5:d7:7d:27:e1:d2:03:19:29:45:
         f8:07:cd:60:c4:1d:8a:47:4c:ee:a2:e1:84:b2:73:2c:10:c1:
         bc:55:25:ce:a8:c0:74:f0:7c:2a:24:30:a0:19:fc:20:64:ad:
         e0:ca:4a:05:ac:82:41:7d:c5:c8:3b:bf:38:8f:de:56:c7:3e:
         1b:c4:d8:c0:32:d0:4c:a3:7a:7f:c3:be:55:54:47:09:7e:85:
         8f:08:bd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:49:12 2026 by rpki-client