Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
File:                     CzDLxzPdxGhrNFVM7pbifWHsnC8.mft (raw, json)
Hash identifier:          Y5DjdW2W6gORmuLqwg6BwwzEx/w+xdEiKvtKv7xO2IM=
Subject key identifier:   C9:AC:E3:77:B7:59:1B:DD:EE:70:F5:B6:95:54:CC:BF:DB:2C:4C:38
Authority key identifier: 0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F
Certificate issuer:       /CN=A9158019/serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
Manifest number:          66
Signing time:             Fri 25 Sep 2026 08:09:15 +0000
Manifest this update:     Fri 25 Sep 2026 08:09:14 +0000
Manifest next update:     Fri 02 Oct 2026 08:09:14 +0000
Files and hashes:         1: CzDLxzPdxGhrNFVM7pbifWHsnC8.crl (hash: uFTL/YSlaLG5iEIq0OkIO/8IXSfqejInMBKJRG/bEwk=)
                          2: B7547D60211611F1BB46DDA8253D8C67.roa (hash: 4BrnHPdYyx2nAq2NGD+uA7GhClifWXkJBKq44iaOpAc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl
                          rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158019, serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F
        Validity
            Not Before: Sep 25 08:09:14 2026 GMT
            Not After : Oct  2 08:09:14 2026 GMT
        Subject: CN=6ab62c2b-e3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c9:24:ea:4a:4c:90:f2:c7:3e:10:cf:27:24:
                    c5:7e:58:4e:4a:9e:9a:5e:cb:b0:32:3d:a6:1d:80:
                    96:02:a3:4c:85:45:b5:c3:d5:ba:54:97:e4:f9:19:
                    b4:f4:53:af:47:15:be:f2:c9:fe:04:8b:85:14:19:
                    ac:db:ee:26:55:56:63:99:9a:91:3d:c6:e3:fa:bc:
                    a1:eb:6a:b8:db:32:5a:21:91:bd:77:15:37:51:18:
                    05:0d:19:da:55:8e:ef:b4:1b:00:31:ee:cb:41:54:
                    15:2c:9c:e5:c2:20:9c:e5:7f:c4:94:22:2c:30:26:
                    be:9f:45:44:f1:94:4d:6f:0a:10:d7:d0:79:c9:80:
                    38:ae:76:93:eb:38:83:47:26:24:03:57:be:2e:98:
                    c9:18:11:5d:a2:5b:21:33:07:9e:a9:1f:b6:13:14:
                    dd:c5:31:fc:61:e6:50:08:f1:d5:0f:ec:38:d7:44:
                    f6:8a:f8:ad:bd:ad:0d:87:16:76:1d:eb:ee:3d:4c:
                    34:49:4e:0b:d3:45:58:69:a9:98:b0:b1:fc:1a:ae:
                    f0:d6:c6:76:e9:de:67:1f:be:c6:ea:7d:f1:0c:19:
                    a6:05:51:71:bd:94:b9:b7:10:a4:0e:f2:c5:df:92:
                    fe:ab:5a:c7:20:a3:2f:02:43:12:d3:24:96:55:4c:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AC:E3:77:B7:59:1B:DD:EE:70:F5:B6:95:54:CC:BF:DB:2C:4C:38
            X509v3 Authority Key Identifier:
                keyid:0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:95:4b:28:b2:28:b7:c6:3f:00:0d:88:a1:11:d1:9d:49:10:
         c4:ab:65:84:08:9c:2d:74:c3:d0:99:79:98:07:7b:5b:b3:21:
         23:fd:9b:7f:f6:bf:27:58:a9:81:ca:ad:58:08:aa:90:5c:6c:
         51:b0:a7:5b:68:28:0c:66:a0:5d:90:65:2c:fc:c6:b5:1c:97:
         ae:b1:e0:02:ca:49:c2:da:89:43:2a:c8:0a:eb:dd:e9:bb:60:
         3a:cf:2e:72:09:75:ab:cf:6b:f3:e2:79:18:43:33:9b:36:8f:
         00:f8:e0:02:3f:96:94:a0:a9:dc:26:06:9b:73:1f:91:fa:a3:
         c1:37:3b:c3:12:ab:86:34:ea:a7:5d:e1:cd:24:d4:9a:97:81:
         b9:5a:33:9c:2e:8d:aa:01:c3:c3:b3:11:b2:b3:41:c6:53:6d:
         b4:62:b6:95:21:31:6d:3c:fb:ad:b7:a4:ff:38:b6:cb:0b:a6:
         f5:b2:6a:6b:65:65:09:49:00:91:57:39:a9:70:b0:35:fd:f7:
         ae:98:2d:77:e0:2e:90:13:20:36:7f:09:6c:de:34:b4:c2:c2:
         6e:b5:2d:62:a3:38:eb:d9:76:9a:9d:57:da:74:83:72:d4:87:
         d3:f3:f4:c4:54:de:18:79:63:e2:cb:bf:b9:63:ea:4b:47:79:
         be:7f:c2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:27:00 2026 by rpki-client