Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
File:                     bZZ_vdG4dHSCRqy41KqQuotWG0o.mft (raw, json)
Hash identifier:          GT7w+LFPcQepUnJXIUWRU7/+vC1r+1M5vHtL5ozaUQM=
Subject key identifier:   31:EC:28:04:7D:DD:EE:40:88:8E:D8:5C:F5:03:6D:F2:8A:9B:12:CB
Authority key identifier: 6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A
Certificate issuer:       /CN=A915365A/serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
Manifest number:          C6
Signing time:             Wed 25 Mar 2026 06:04:33 +0000
Manifest this update:     Wed 25 Mar 2026 06:04:33 +0000
Manifest next update:     Wed 01 Apr 2026 06:04:33 +0000
Files and hashes:         1: bZZ_vdG4dHSCRqy41KqQuotWG0o.crl (hash: m4MhRhonzzy92wtwVJR8Hvy/C3FKUfdHCZe+5HAl0+w=)
                          2: 186817D6FAAA11EFA67E0D81C4F9AE02.roa (hash: lXKWJQOwyxGTmH5e2c2WMLUe+vdg/9olT6POnZjXxgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl
                          rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915365A, serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A
        Validity
            Not Before: Mar 25 06:04:33 2026 GMT
            Not After : Apr  1 06:04:33 2026 GMT
        Subject: CN=69c37af1-0d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9b:4e:41:9a:7f:bb:12:3f:39:ca:6c:0c:4a:
                    02:c1:67:03:9d:0f:29:6b:bb:38:2f:06:e4:d1:cf:
                    a3:64:62:2d:54:45:a3:e1:f3:33:ca:ea:db:45:1f:
                    11:d4:3d:5d:ea:37:22:cc:1f:b6:d1:17:84:75:16:
                    3e:c9:c1:10:b5:d3:e1:46:f2:cc:21:64:7c:9e:d8:
                    f9:4e:fa:66:71:01:7b:98:6c:50:00:6f:b8:2c:64:
                    57:2f:a7:0e:e5:9e:01:6c:f7:32:47:ec:c9:b9:3a:
                    03:d5:c5:54:59:a1:5b:35:4c:2b:55:1c:3a:c0:1f:
                    f0:1c:b2:04:12:4b:69:a9:73:17:8c:51:fa:3c:77:
                    80:44:7e:ac:74:07:80:01:31:90:a4:33:b1:a6:56:
                    f5:41:6b:d5:0b:34:1a:a6:79:35:ca:55:dd:3d:d5:
                    5d:06:3b:c6:41:fa:62:bc:b5:e1:c0:14:0c:ca:89:
                    8a:c5:59:3d:c3:4a:18:53:be:78:8d:85:e5:74:09:
                    ae:0f:bd:ff:c4:a4:d9:84:55:f5:7c:42:65:0d:a0:
                    2b:1f:3b:c1:b7:bf:a7:74:f8:60:70:fb:4e:07:1c:
                    9a:8c:5f:43:27:3c:b1:08:0b:a0:dc:5b:22:d8:64:
                    be:67:97:68:32:d4:11:6d:47:71:62:ef:ce:1a:ec:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EC:28:04:7D:DD:EE:40:88:8E:D8:5C:F5:03:6D:F2:8A:9B:12:CB
            X509v3 Authority Key Identifier:
                keyid:6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0d:4b:b9:6d:e7:66:24:4c:72:28:56:29:ca:52:ec:32:dc:
         f4:be:71:20:95:cf:3d:6f:7c:83:eb:ea:98:81:b6:bb:f8:53:
         e5:09:a6:3e:e8:de:89:e5:99:a7:85:61:6c:b6:63:be:31:8a:
         c4:d6:17:ca:e8:43:8d:89:f9:02:43:f1:85:d3:db:e8:71:ef:
         43:77:34:6f:06:7d:41:a7:f4:95:d3:98:5a:95:6a:72:b8:ed:
         8e:9b:20:df:77:5d:02:50:b3:79:35:da:4d:67:f3:4f:4a:aa:
         87:87:ec:81:21:39:e8:30:32:f4:f9:2e:bd:39:5a:e4:f0:df:
         c2:c5:e0:dd:a9:c6:e6:c2:e5:83:0d:7b:14:dc:a8:22:86:76:
         e3:a6:da:17:a3:88:75:51:a1:12:c4:f6:c1:3a:53:20:37:90:
         25:11:12:e6:43:6f:f3:02:b5:84:e4:d7:dd:d5:01:71:79:79:
         8d:c0:ab:22:62:a4:47:90:d7:64:c1:05:4c:1d:40:4b:e7:77:
         2a:c7:f2:d9:56:8d:69:e5:d8:87:c0:7f:4b:15:85:ad:b9:cf:
         a7:65:fc:fa:ce:f7:71:a8:b8:a7:bc:00:01:cd:e3:27:0f:ee:
         49:55:e2:01:4f:3f:1f:8b:4b:c5:93:6d:d8:f7:ff:b5:f1:53:
         36:5d:da:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:22 2026 by rpki-client