Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
File:                     z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft (raw, json)
Hash identifier:          9a3+TB3LYxss8eLeT/MNkYh6ir87LI/LkhztNZhYro8=
Subject key identifier:   06:C5:7C:73:27:C2:CB:F1:DE:75:B6:64:CD:E7:A4:B4:04:B2:E7:8B
Authority key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97
Certificate issuer:       /CN=A913CE18/serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
Manifest number:          36
Signing time:             Tue 03 Mar 2026 08:12:14 +0000
Manifest this update:     Tue 03 Mar 2026 08:12:13 +0000
Manifest next update:     Tue 10 Mar 2026 08:12:13 +0000
Files and hashes:         1: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl (hash: y4q+gCp1CVqctZETTtYTSCgpRVJTxKOvhWhVYtvWECg=)
                          2: 66FA3E10C68311F0A13F9748C4F9AE02.roa (hash: qhmDYrXSka0BnnAzbzb+vh6r8WiWcCMdpJjXHDEOqUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl
                          rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997
        Validity
            Not Before: Mar  3 08:12:13 2026 GMT
            Not After : Mar 10 08:12:13 2026 GMT
        Subject: CN=69a697de-4495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:62:36:54:f9:67:24:08:53:e7:4f:ae:6b:75:
                    59:85:50:00:87:a6:5a:b5:2c:d3:ef:27:e0:ac:d5:
                    4f:65:94:d4:30:2b:3a:c4:41:34:6c:d5:ca:2c:fd:
                    40:af:ae:ff:e4:5c:a5:e5:7f:4b:74:2b:f4:97:8f:
                    5a:0c:34:d5:46:e0:8d:20:5d:26:a3:61:bc:c6:3a:
                    7d:cc:10:8c:06:d9:21:09:30:63:7a:50:fb:23:a0:
                    f1:09:13:63:28:42:ae:0e:b7:37:7b:55:97:8f:56:
                    99:a8:69:ed:01:c8:4e:6b:82:e4:ae:2b:83:9d:a6:
                    e0:99:2e:b9:02:b4:fe:28:9f:80:f3:f1:1a:e0:fd:
                    71:91:83:60:d7:8c:08:5f:c2:b4:98:81:7e:37:f7:
                    0e:f7:08:17:2c:2c:49:f2:f4:a7:42:20:b2:30:a6:
                    5a:60:4a:b4:22:6b:ee:e3:4d:00:6f:6a:e1:63:8a:
                    36:11:95:ea:88:fb:a7:0b:d4:28:01:06:24:3f:91:
                    d9:0c:d4:71:81:65:99:33:5a:f0:a4:0a:1e:d6:98:
                    35:6f:8b:1a:5c:2e:be:5a:a0:4e:34:da:6c:bd:c8:
                    94:22:e3:e8:9a:ec:58:ea:22:a2:5c:92:b3:48:cf:
                    e0:2e:fe:34:27:64:b0:34:43:2a:21:4a:49:e5:0b:
                    41:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C5:7C:73:27:C2:CB:F1:DE:75:B6:64:CD:E7:A4:B4:04:B2:E7:8B
            X509v3 Authority Key Identifier:
                keyid:CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f9:6d:cc:83:89:22:65:a0:58:cb:a5:31:df:e0:71:1d:91:
         7e:59:cf:84:7b:ce:c6:7b:e2:b7:08:43:c8:8a:fd:6f:34:e5:
         f9:41:14:b5:b8:45:7c:c7:53:1d:dd:b3:78:c1:4f:85:88:58:
         43:f1:ab:c4:45:8e:56:cc:64:4b:33:44:5b:bb:16:58:29:09:
         db:4c:b5:1b:0c:b3:60:ea:ba:40:21:31:87:52:5f:f6:2e:38:
         bd:24:42:b7:6b:94:83:52:ac:dd:69:9a:a6:9c:52:03:23:65:
         43:00:90:1f:25:47:6d:26:c2:28:9f:bb:29:be:ba:0f:31:6e:
         2b:c6:5e:75:d2:78:80:02:bc:d9:51:bb:96:6f:7f:29:fb:29:
         07:f9:dc:5d:89:26:3d:0a:90:58:46:4b:ab:ad:5a:30:2c:af:
         a9:7e:b3:8b:46:51:9d:15:d9:ce:03:82:a8:db:48:cf:5f:5a:
         30:33:2a:0e:bd:f0:f7:04:42:bb:e6:97:3f:28:bd:d3:66:37:
         15:34:a4:51:ef:ef:66:37:e1:7a:ad:00:a9:e8:80:ff:50:e1:
         40:3c:3d:3b:fd:b6:fb:fc:ac:ed:7b:4f:7e:f7:d7:f3:1a:32:
         6c:6b:b5:5a:e7:d7:71:23:29:4e:39:ca:7d:67:70:bd:4b:62:
         4c:d3:86:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:55 2026 by rpki-client