Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
File:                     rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json)
Hash identifier:          p8qczUOLj/0Chnl3C343c3mPW+5ofb0L7TgWApUbleY=
Subject key identifier:   B2:A5:CF:C2:9C:81:7E:AD:82:67:36:BC:AE:E6:61:D8:FE:E0:19:51
Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
Certificate issuer:       /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
Manifest number:          5A
Signing time:             Wed 11 Mar 2026 06:56:41 +0000
Manifest this update:     Wed 11 Mar 2026 06:56:40 +0000
Manifest next update:     Wed 18 Mar 2026 06:56:40 +0000
Files and hashes:         1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: pjKCtH61PyJ/CHuSSxto7gm++dduUmWf5ERVT/pbFK0=)
                          2: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: L2xc97rBOEo7wGTXyTU4krqEAbLPgvd1QpBdIvhLYmA=)
                          3: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: /dWw78lmDvPsrlgqtDvPWypN8cQFZwkLxuNHhkdxFFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
                          rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 06:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
        Validity
            Not Before: Mar 11 06:56:40 2026 GMT
            Not After : Mar 18 06:56:40 2026 GMT
        Subject: CN=69b11229-bd53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:d3:4a:85:21:c9:dd:39:d3:9c:ca:d1:ea:
                    d9:5c:cb:98:28:1c:87:ef:d8:0b:c1:d8:bb:f5:2c:
                    5a:a2:62:62:9b:a9:51:49:8c:bf:6e:1c:8d:ca:79:
                    b3:ff:e4:79:76:d9:66:30:a7:1c:cf:25:2b:63:11:
                    37:22:66:b0:19:09:9c:2e:07:a0:26:02:1e:eb:c8:
                    d3:65:a7:fa:4f:3f:d3:54:70:16:96:16:41:cf:92:
                    2a:e4:0a:4d:71:ea:4a:57:e6:c3:0a:db:21:e5:65:
                    66:03:83:c4:52:ce:b7:e9:46:13:98:bc:10:a6:e5:
                    a9:36:e0:b4:68:82:df:ee:58:3f:83:18:4f:4d:72:
                    55:6a:b0:ff:fe:0f:58:7b:c8:a6:1e:fd:13:01:23:
                    56:10:e8:64:c3:68:07:31:67:5b:71:33:34:8e:94:
                    c4:a5:07:4c:76:88:34:e3:39:35:3d:d6:c4:5f:87:
                    28:d9:1b:f1:60:e8:b2:6b:35:3e:ed:4d:16:01:e6:
                    ad:7e:ae:98:cb:d0:a8:a3:7e:e4:92:98:de:a6:d8:
                    d8:73:e1:b9:96:4a:f4:32:84:6c:dd:da:55:ea:c1:
                    ec:5f:30:5f:79:e7:5c:61:7f:7c:d6:08:f5:6c:14:
                    3c:a3:bd:dc:77:3d:e7:f1:72:5f:90:8b:ec:41:31:
                    a8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A5:CF:C2:9C:81:7E:AD:82:67:36:BC:AE:E6:61:D8:FE:E0:19:51
            X509v3 Authority Key Identifier:
                keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:09:57:b5:59:cd:88:ec:64:2d:e2:6e:03:cb:ae:77:39:d2:
         6b:06:6c:fc:bf:fc:ad:11:d4:85:15:9a:fe:3c:a8:e6:33:0d:
         7b:94:21:1f:23:5d:bf:61:c7:4e:3e:f8:1b:6e:b1:e8:f8:76:
         38:46:5f:69:29:90:4c:d5:0c:5b:d3:3b:13:f6:a0:3c:e8:66:
         87:71:7d:fa:fa:6f:69:2c:16:5b:ed:c4:cf:65:7d:43:c2:b7:
         fe:51:02:a1:64:bf:31:4f:96:0a:65:ec:4a:0f:44:d2:87:d6:
         c7:6f:14:ef:51:07:03:7e:9f:9a:46:fa:61:8c:37:42:e4:20:
         71:fa:12:14:b4:d3:87:28:bd:a9:8d:ef:5b:1d:7d:ca:37:a0:
         30:b6:c1:d4:31:c3:f9:9f:cd:23:21:8b:e8:7b:c6:a1:79:24:
         b5:fc:84:80:d3:65:c6:d5:bf:48:c2:9d:89:fa:2a:a6:01:0b:
         ea:ef:2b:e1:92:e4:b6:db:e2:a1:84:1d:77:fd:dd:6d:6d:67:
         a3:01:59:8f:d1:58:f0:12:26:3e:af:c1:ba:f5:59:bd:41:5b:
         d7:c2:e4:ba:a5:80:ce:fa:a5:88:ca:6c:12:83:10:96:b7:a6:
         9d:57:6c:e5:b4:9c:cd:cc:e0:77:6a:c7:fc:5e:c6:83:29:56:
         22:03:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:06:54 2026 by rpki-client