Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
File:                     zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft (raw, json)
Hash identifier:          hFs8FneqfqukwOEtKzuEXsD2Z7huzRyN2yyvTBm4Zzs=
Subject key identifier:   65:D8:FE:70:83:BE:4A:E2:5F:FC:B8:EE:4D:B7:CC:93:8D:FA:D7:3A
Authority key identifier: CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7
Certificate issuer:       /CN=A916D4BE/serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7
Certificate serial:       04D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
Manifest number:          04C7
Signing time:             Thu 26 Mar 2026 23:43:05 +0000
Manifest this update:     Thu 26 Mar 2026 23:43:04 +0000
Manifest next update:     Thu 02 Apr 2026 23:43:04 +0000
Files and hashes:         1: zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl (hash: W44DO1InrwnigNS+c/2C8F79cjkQIwShg3OMgqaOa5I=)
                          2: 3A6B56D0E03411EF9FB2E824C4F9AE02.roa (hash: v0/CEXlWXi0crMBA1tUEdN8IIRUJpRoMJCs1U/BmKCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl
                          rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1241 (0x4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D4BE, serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7
        Validity
            Not Before: Mar 26 23:43:04 2026 GMT
            Not After : Apr  2 23:43:04 2026 GMT
        Subject: CN=69c5c489-5a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:12:91:5f:2e:bf:a5:58:eb:06:ce:05:8c:
                    80:bf:87:47:a1:64:f2:93:1a:e0:3a:12:08:75:b5:
                    c8:33:c1:30:16:42:5d:b6:23:d4:94:0e:14:a8:81:
                    ce:ec:fc:75:e1:22:e1:57:c0:7e:86:72:ad:50:8e:
                    07:b2:74:8a:2b:cb:42:f3:f1:36:58:c4:84:a8:54:
                    20:ab:6b:fe:e7:f5:65:8c:1c:9e:fc:6f:16:74:c0:
                    3d:98:59:e3:54:c8:04:18:d6:2f:01:67:b1:e0:a7:
                    68:78:c8:c8:23:44:c4:bf:f7:4e:15:32:84:10:19:
                    ed:ca:0c:e9:3c:d7:4f:b3:6f:f9:17:ea:c4:3c:c0:
                    38:b5:48:05:37:a8:29:14:d7:3e:8f:89:8c:ca:f8:
                    86:f6:9b:0d:e7:ef:b4:3f:5a:0e:47:35:51:cc:f5:
                    66:33:d8:7d:fc:8d:06:84:1f:bc:d8:27:d0:bd:65:
                    7b:92:05:96:a5:a3:09:78:8b:5e:fb:1a:23:10:5a:
                    36:9d:82:d7:63:e7:fe:1d:5a:f9:44:ee:ed:b9:cf:
                    d2:26:4b:48:ba:78:44:01:70:50:60:fd:83:65:8e:
                    c1:bf:8a:df:fc:b4:06:d6:e3:c1:50:7f:57:ee:d2:
                    ad:7f:8b:af:39:da:6c:70:1a:42:3c:9d:86:65:64:
                    b7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D8:FE:70:83:BE:4A:E2:5F:FC:B8:EE:4D:B7:CC:93:8D:FA:D7:3A
            X509v3 Authority Key Identifier:
                keyid:CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:97:06:77:a5:86:8f:a8:f4:d5:c8:59:9a:09:68:0f:a2:a8:
         a9:15:45:f8:de:c9:b3:01:a9:c9:65:b2:84:e2:4e:d0:68:ed:
         07:92:18:85:de:e1:de:93:e5:96:c9:11:e7:be:16:59:d0:a4:
         7a:46:55:d3:fc:f9:ed:b1:79:9f:54:fb:2a:77:5d:a4:e1:b4:
         00:f0:f9:27:7b:9b:b8:97:7a:91:67:59:4b:56:e0:64:2b:6d:
         0d:8b:94:f3:a4:f2:c5:d9:0f:f2:75:5d:72:a9:4e:28:36:51:
         80:9c:84:20:75:ae:da:0b:86:c4:0d:c2:f2:44:9f:c7:a3:13:
         9b:a5:78:5f:82:07:42:ee:d3:9f:2c:9b:19:f6:b9:52:85:b5:
         38:4e:91:66:11:cf:39:fc:54:51:76:15:da:94:7c:60:cd:f0:
         68:d6:09:51:aa:a4:d5:06:2f:fa:06:b3:ab:42:67:ee:ea:63:
         11:4c:c8:f6:57:4f:32:91:67:9f:22:c5:31:fc:d2:14:7c:cd:
         a6:4e:c6:f3:2f:e4:ff:0f:57:13:e4:44:98:bc:66:a0:e7:b4:
         66:ed:d9:78:47:29:c2:b1:0a:5f:3e:39:ac:31:e8:c8:1f:c9:
         1a:47:6e:74:21:82:2f:58:ea:a3:5b:35:1f:0c:c1:9e:5f:23:
         c9:6a:6e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:15:21 2026 by rpki-client