Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
File:                     ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json)
Hash identifier:          h3mB5LHFil6o4CQC66drKJA5QbZ3pKcCaShA/S5rEyI=
Subject key identifier:   FA:5E:2E:73:28:CC:17:DB:F9:73:CD:FD:89:49:71:A9:65:4C:9B:D7
Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
Certificate issuer:       /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Certificate serial:       2395
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
Manifest number:          2385
Signing time:             Tue 24 Mar 2026 15:45:42 +0000
Manifest this update:     Tue 24 Mar 2026 15:45:41 +0000
Manifest next update:     Tue 31 Mar 2026 15:45:41 +0000
Files and hashes:         1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: Nf8sK0w+9lf/jCuRKcUCwMh73JMNQFZdEVNAeIbse2A=)
                          2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: jZXI3ipxYqcT93E6OoTntF08+ARhGbsAg+OWr8b/Iio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
                          rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9109 (0x2395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
        Validity
            Not Before: Mar 24 15:45:41 2026 GMT
            Not After : Mar 31 15:45:41 2026 GMT
        Subject: CN=69c2b1a6-6f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:bf:48:ea:18:bb:38:69:8b:20:64:f6:2e:
                    bb:14:17:ce:c2:51:59:0a:99:2f:7c:45:5d:74:99:
                    86:18:2a:66:b8:c9:d0:81:3f:24:57:6b:9a:1d:75:
                    12:df:aa:b9:8a:b3:b7:27:c4:8c:d8:bf:35:a5:5c:
                    27:cf:d3:6f:d6:e0:b3:cb:d0:19:1e:a7:7f:2f:b2:
                    2f:55:39:c9:49:ad:64:8a:d5:f9:2f:2b:36:a0:78:
                    6e:c2:57:fc:fc:79:46:18:ce:a5:6b:fe:b6:6f:cc:
                    6c:86:7d:f2:4c:21:15:01:88:b7:b8:68:45:10:d2:
                    d1:0f:ca:81:d6:72:c1:2e:84:ad:3f:bf:6f:64:0c:
                    77:3f:f2:1d:61:1c:39:ac:cc:5a:90:53:d5:1a:be:
                    4d:38:1f:f0:7d:2a:45:2c:dc:7c:d7:12:dc:de:d4:
                    db:84:8e:94:ed:9c:49:66:d2:6b:91:b5:ae:0a:25:
                    7b:32:09:bd:f7:39:69:ca:28:0e:8e:2c:62:32:ef:
                    6d:aa:e7:e6:15:33:c7:3c:89:51:ec:dd:bd:e2:12:
                    e9:b5:7e:a3:1a:bf:94:bf:0a:cf:f2:bf:39:fd:f4:
                    e2:29:99:53:f4:86:ab:e2:ea:36:71:88:c2:56:3a:
                    1e:c6:e5:11:58:b9:fa:ac:9c:7c:e7:18:b0:ca:db:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5E:2E:73:28:CC:17:DB:F9:73:CD:FD:89:49:71:A9:65:4C:9B:D7
            X509v3 Authority Key Identifier:
                keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:16:88:03:aa:e4:5f:d2:b3:c4:05:51:77:cc:79:01:f6:8d:
         8b:b0:1d:e1:a6:cc:93:eb:d3:c0:6f:a5:2e:05:f6:dc:aa:0a:
         aa:aa:9e:a2:f5:c4:b7:3b:24:a0:de:66:51:1a:6b:b7:18:bc:
         7d:65:95:6b:25:d2:80:cc:7f:04:50:fd:d8:44:8c:0b:3c:b6:
         b2:a3:04:ce:d5:cf:4e:45:af:88:83:59:ec:79:5c:b4:cb:f0:
         8c:24:15:06:14:76:3f:c3:a7:85:dc:12:6d:39:2b:ca:f3:82:
         05:22:db:38:26:fb:0e:8b:43:00:f5:62:af:9a:f8:09:49:79:
         79:39:d6:e7:d1:70:0f:76:b3:3e:c4:33:7c:a2:5d:e7:c6:37:
         12:a9:97:df:b6:23:a8:48:c2:a7:02:77:9c:72:4b:5d:e2:05:
         1e:58:33:4b:94:dc:6e:b2:d5:cf:cc:9a:91:ee:6c:d3:83:66:
         61:24:f1:f0:76:ac:d2:28:35:c5:9c:d8:cb:2c:29:bf:f6:14:
         a5:1a:4a:85:d0:bb:64:3b:95:f5:b6:dd:93:e1:89:70:85:13:
         92:d7:d1:f3:55:91:5b:73:63:cd:ec:36:14:62:bc:ae:5c:91:
         b3:9f:6f:44:08:31:c6:24:c0:17:cb:a6:ad:c1:cb:fd:d1:41:
         ab:db:32:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:34 2026 by rpki-client