Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
File:                     5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json)
Hash identifier:          zaNwtVzzhMelMnvTKdWWnt4Ncz0NOS8Tse4RH97gNdg=
Subject key identifier:   70:FD:9B:41:E1:C2:9B:12:92:48:96:AD:BC:2C:37:C0:6E:68:B4:C7
Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
Certificate issuer:       /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Certificate serial:       0938
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
Manifest number:          090D
Signing time:             Tue 10 Mar 2026 19:57:24 +0000
Manifest this update:     Tue 10 Mar 2026 19:57:23 +0000
Manifest next update:     Tue 17 Mar 2026 19:57:23 +0000
Files and hashes:         1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: lkCU038cz0aeYS8sGQcMIEj8aDOC/6iSvyhj/gxOYUQ=)
                          2: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: UE8SAxckfyeRkUiosJW8F4rRi0Cjj19RMe2v1jw5K4s=)
                          3: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: xrP+j01URqzb818JxrzZQg9E+zkHFQ6z2nDfJjk/xvY=)
                          4: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: 4CYZfi3J5mrMgJw71DrWmWBko5u4w80OqCluI06fPlI=)
                          5: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: vh+mgfVuse3OG+5JOUAqNPfjrPXWt/l1W1BYVqMifYc=)
                          6: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: 5lrGY5B8z3gxKejTsTAvtgEu2yogYsNGkQLwshDVoN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
                          rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 19:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2360 (0x938)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
        Validity
            Not Before: Mar 10 19:57:23 2026 GMT
            Not After : Mar 17 19:57:23 2026 GMT
        Subject: CN=69b077a4-25f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:39:b5:da:15:54:f2:dc:2d:ee:f7:8f:5d:
                    4d:39:29:7b:dc:25:7d:c8:ee:d3:0e:89:32:ce:9e:
                    40:da:91:65:c8:06:f2:9d:95:44:c1:05:09:42:e9:
                    4e:04:05:dd:1f:1d:da:d9:fd:43:41:c9:7d:ef:7d:
                    8e:fc:73:3f:30:a9:86:b3:f4:53:3e:94:95:81:e7:
                    94:df:e9:7c:23:b7:a8:50:f7:6a:49:bd:6a:ab:b6:
                    97:3b:46:1a:d0:5b:92:f8:43:0e:01:eb:c7:a1:e1:
                    0d:9f:75:08:b9:b0:6c:e3:98:0c:ae:1a:12:78:d5:
                    c7:9d:c9:b9:d2:49:b9:21:ea:b1:fa:30:0e:05:79:
                    72:e0:e2:0c:93:38:69:1f:6d:94:e0:d3:5e:a6:38:
                    0c:8f:ee:e7:8c:9f:a8:ac:c7:92:6d:60:82:e6:5f:
                    fb:8d:dc:1f:38:69:8c:1a:8b:ee:f6:ca:eb:f2:c5:
                    a5:37:fe:33:15:2b:ae:1b:e1:e1:50:d3:a6:8a:4e:
                    af:9f:60:16:7f:af:34:a7:9f:7f:2b:04:29:f3:12:
                    3a:48:d3:b9:38:d1:b0:a6:70:cb:89:5d:6f:72:13:
                    6b:6c:29:81:e0:b8:2c:3c:7b:10:3f:07:d1:be:7a:
                    dc:9d:76:ad:54:84:b2:48:3e:2f:a7:87:37:76:63:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FD:9B:41:E1:C2:9B:12:92:48:96:AD:BC:2C:37:C0:6E:68:B4:C7
            X509v3 Authority Key Identifier:
                keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:46:c5:59:23:f8:05:4f:6d:83:9b:06:a2:39:4f:b0:46:
         14:ee:f9:5b:c6:0d:b4:e0:a2:5e:b0:9c:c7:ac:98:ee:e0:2c:
         89:77:12:b2:ed:86:a4:be:4f:3e:05:fa:e9:08:72:af:de:4b:
         3a:75:ab:d1:23:0d:47:84:82:e6:e2:78:d9:8f:0c:a1:fc:0c:
         d7:86:ab:72:34:0a:1b:4b:1d:ce:1c:b0:84:b1:3a:a0:80:fb:
         6c:93:06:5c:6d:dc:1d:a9:05:d0:eb:12:4d:39:97:21:7c:6d:
         e2:c2:17:f2:08:f2:8c:dd:b1:b5:2a:59:e6:e3:61:15:dc:94:
         89:98:44:93:4a:ff:8e:80:af:7e:61:6d:d3:49:a8:c5:0b:48:
         98:f6:35:5d:3b:14:13:74:2d:25:8d:e5:b7:e8:06:6f:ed:13:
         34:86:e8:99:5a:9a:d9:34:82:1e:21:ff:51:d9:f5:76:54:75:
         7c:25:ac:71:2a:b7:af:73:32:84:63:a5:c6:ef:9b:2b:fa:f5:
         92:f4:46:b5:cc:85:29:54:42:3c:49:df:92:01:ae:0f:f1:b7:
         3e:34:97:57:d3:69:f8:37:d9:bb:2d:c6:4d:ad:4c:b5:c5:ea:
         e3:96:d6:61:66:c1:b9:84:a7:53:a9:b8:7b:2b:19:0b:75:46:
         be:69:be:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:29:15 2026 by rpki-client