Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
File:                     RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json)
Hash identifier:          2l1fN4xITMEWQvr2lfWxTNlcn0Ye+bVFBa52YR3qtTs=
Subject key identifier:   8B:A9:E0:7F:03:22:6A:67:D8:D6:9D:75:DA:BD:55:DD:54:B9:B7:47
Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F
Certificate issuer:       /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
Certificate serial:       051B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
Manifest number:          0510
Signing time:             Sat 04 Apr 2026 23:25:00 +0000
Manifest this update:     Sat 04 Apr 2026 23:24:59 +0000
Manifest next update:     Sat 11 Apr 2026 23:24:59 +0000
Files and hashes:         1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: 5ji9H6byS10IH1jFwHhJqvhs3JEPG1BOOELK1mYHBb4=)
                          2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: k7pNWs8rxOIJwQwNSf++pyf5UhHis3rC6IchuHrW/pQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl
                          rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307 (0x51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F
        Validity
            Not Before: Apr  4 23:24:59 2026 GMT
            Not After : Apr 11 23:24:59 2026 GMT
        Subject: CN=69d19dcc-8fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:77:54:09:60:ed:e9:e1:72:a9:21:5a:1c:1c:
                    13:b7:bc:f8:9a:09:30:fa:62:0a:ee:4e:bd:3e:10:
                    40:ac:a0:20:d8:a4:b7:e2:5b:7c:65:3d:a3:91:68:
                    dc:9a:a6:37:59:cc:5e:c5:1b:07:07:42:ce:82:35:
                    e0:30:00:70:13:41:ef:17:d2:06:21:b4:70:01:b0:
                    42:0d:18:2e:53:f2:94:a3:12:d4:57:fb:28:a0:12:
                    ee:59:e9:ad:3e:fd:85:82:02:98:a5:7d:90:c6:8e:
                    bb:77:8f:54:8f:6b:8c:c2:e1:6e:13:f6:eb:4a:ff:
                    74:46:c2:d2:b0:4a:48:33:6b:78:e0:de:c4:e2:eb:
                    b4:19:9c:ab:f5:48:df:2b:81:ac:b3:cc:42:7a:5f:
                    75:8b:ff:bd:9e:c4:0b:7b:4d:8b:a0:cd:21:1e:b6:
                    a2:7f:87:b8:b7:74:ca:97:f7:14:6d:d6:e7:2c:05:
                    14:a8:5f:22:22:15:e8:a1:ef:d5:8a:9f:9f:91:62:
                    87:d1:45:a8:a8:45:35:4c:f9:7c:80:8b:5a:0d:1b:
                    38:ad:d9:df:51:69:b8:57:8a:e8:cd:9d:16:44:91:
                    8d:6b:8f:78:7b:e7:28:00:eb:76:57:69:33:9c:f3:
                    de:fc:4a:f6:18:8d:9c:96:dd:c1:1f:4f:3e:40:49:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A9:E0:7F:03:22:6A:67:D8:D6:9D:75:DA:BD:55:DD:54:B9:B7:47
            X509v3 Authority Key Identifier:
                keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2b:ae:73:6a:c1:19:38:21:3b:1a:5f:7f:39:95:18:de:62:
         01:ff:c9:6f:a1:00:50:7d:66:1b:8c:f0:24:80:f0:db:a6:68:
         4d:bf:1e:59:80:01:8b:c2:44:89:cf:22:33:f6:1f:67:07:9f:
         d4:43:d6:72:b5:d9:ab:23:9d:08:e3:5f:d6:ce:7e:c6:4b:9a:
         6c:3c:fe:6b:13:5f:99:3d:7f:0d:f2:f9:07:62:60:29:79:51:
         66:ff:00:b2:51:42:4c:db:7a:1c:72:76:39:e9:64:6b:cb:03:
         16:b8:d2:9d:a7:6a:59:a8:fb:97:41:0a:bf:09:58:36:f1:ef:
         36:dd:c7:5e:4b:ee:8e:52:73:7e:0e:70:95:18:2a:67:c7:c1:
         af:cc:b3:8b:13:db:3c:ed:85:26:61:f2:bf:87:2e:24:6a:af:
         d6:ae:24:3d:31:cd:17:b3:52:34:74:b0:2d:08:71:40:85:08:
         39:e9:18:cd:1a:bb:7b:af:a8:eb:2f:20:f4:39:c5:68:dd:cf:
         6b:5b:24:31:21:6e:95:d2:2b:45:93:39:ea:38:0b:3b:5b:1f:
         a7:2a:e6:93:15:c9:13:76:8b:b0:d2:56:45:ca:8c:59:63:09:
         ca:3f:38:99:7f:e2:b8:d2:0b:09:b1:94:28:6f:8b:5e:03:f3:
         7e:4e:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:17 2026 by rpki-client