Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
File:                     CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json)
Hash identifier:          xAX2qSXFVZtFoXJio2IMejAz82R+bvT1DPI1kSpv80k=
Subject key identifier:   B9:ED:54:A1:A3:8F:B8:A8:A3:BC:B9:71:9B:0E:08:E6:59:89:C0:88
Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
Certificate issuer:       /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
Manifest number:          0161
Signing time:             Thu 23 Jul 2026 06:45:26 +0000
Manifest this update:     Thu 23 Jul 2026 06:45:26 +0000
Manifest next update:     Thu 30 Jul 2026 06:45:26 +0000
Files and hashes:         1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: Q2T8rK0SC2Bu4ydHwS+NzrcCfBIv1BwSuHCE0RlsE+U=)
                          2: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: hlTOhKlRcRDqDLJx9A76x4qFo+ibdhrZ7489cVCKdJ8=)
                          3: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: PKsDzQz8Iz9pp87aDZQ9VcpxtBwvynLDnu1x8wN8n3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
                          rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
        Validity
            Not Before: Jul 23 06:45:26 2026 GMT
            Not After : Jul 30 06:45:26 2026 GMT
        Subject: CN=6a61b886-0ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:24:d0:3b:16:2e:76:f1:b2:7c:4c:57:fb:59:
                    ce:f3:81:51:5c:b6:c0:8e:bf:1d:94:b4:51:94:1f:
                    b7:62:dc:86:65:aa:71:22:9e:3b:4a:c8:d5:7b:e6:
                    9d:4d:d8:e0:d3:f9:2c:f5:92:0a:38:fd:6b:8d:e0:
                    db:5b:b7:84:bf:44:60:11:df:02:47:0f:52:8a:ea:
                    9d:5b:c1:d1:d4:13:66:78:03:25:1c:ea:2b:c6:4b:
                    45:1a:b7:17:46:6d:4f:ce:85:90:89:70:e7:89:ac:
                    2b:0b:6b:f1:88:53:ed:15:e5:49:06:43:f7:32:2d:
                    b6:60:f1:42:ea:8d:42:14:3e:b5:2c:0a:2d:49:4c:
                    05:d0:41:79:ee:fa:98:69:1c:08:52:79:c5:66:0c:
                    01:1f:c3:28:0a:45:76:a7:79:ad:3d:8f:88:af:f2:
                    08:87:7b:b0:e0:57:97:6a:fa:e5:21:a8:95:c0:e4:
                    96:43:6a:51:77:49:cb:e5:22:a8:01:9c:f0:36:c3:
                    fe:8d:8c:bc:6d:ae:b0:0e:55:8c:00:36:8b:97:77:
                    b4:f5:92:b7:21:ee:5d:b3:ed:4d:63:2a:cb:c7:b6:
                    2f:77:f5:53:69:92:78:43:51:58:58:91:c5:2c:cc:
                    03:0b:eb:99:ea:13:15:02:27:2e:03:d8:6e:86:3f:
                    94:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:ED:54:A1:A3:8F:B8:A8:A3:BC:B9:71:9B:0E:08:E6:59:89:C0:88
            X509v3 Authority Key Identifier:
                keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a9:ef:d9:bf:41:95:af:e6:5e:a3:b1:15:f8:3c:fc:2a:76:
         a0:e1:47:fa:1a:2c:87:c4:a9:98:ef:16:14:f6:f7:05:bd:84:
         6b:22:5c:ed:fd:49:c0:63:4b:55:38:f0:dd:a0:00:82:b3:ad:
         e0:0d:97:51:dc:08:3d:b1:35:bc:4f:5b:38:65:7c:1c:df:b3:
         7a:64:6a:ea:5d:a0:d1:27:56:7f:00:16:b6:a8:e7:73:b4:a1:
         54:dc:37:3c:3a:ba:4b:94:53:a1:17:16:a3:fb:e2:dd:c3:4d:
         5a:9c:27:c5:0e:51:ef:61:4d:e4:52:55:97:c7:3b:db:82:e7:
         c2:45:c9:3b:1a:aa:d6:fb:cc:01:1e:7f:1e:a4:ad:ec:ed:dc:
         6e:74:9b:e1:48:db:9c:55:ad:40:ca:bd:49:ba:2e:b1:5f:1a:
         c2:f2:d7:52:12:d3:70:f4:4f:65:b2:8c:f6:10:84:9b:36:49:
         4a:30:6b:03:5f:49:e1:c0:ed:00:21:ac:03:ef:83:d8:9f:8f:
         f0:66:48:f7:8c:fd:70:56:a2:f5:d5:20:11:91:7a:d8:bc:38:
         d6:9e:38:c7:a0:31:59:f6:49:fb:3f:1d:a2:ca:85:dd:f0:db:
         47:7f:ac:be:0f:8b:75:16:45:4c:7e:52:a6:d6:89:75:d4:0a:
         1a:f4:e9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:48 2026 by rpki-client