Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
File:                     ZuoPg73TYyv_GUALOhum_t_8VYc.mft (raw, json)
Hash identifier:          vDV3DR/gJI6PxcaFtyt28I7cWKYRGS1blYLo/lGdj1w=
Subject key identifier:   E4:C6:34:AE:18:37:A9:6D:17:AF:D1:AF:9F:83:48:34:1D:23:A1:CC
Authority key identifier: 66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87
Certificate issuer:       /CN=A917CB63/serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587
Certificate serial:       353C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
Manifest number:          352F
Signing time:             Thu 26 Mar 2026 15:14:21 +0000
Manifest this update:     Thu 26 Mar 2026 15:14:20 +0000
Manifest next update:     Thu 02 Apr 2026 15:14:20 +0000
Files and hashes:         1: ZuoPg73TYyv_GUALOhum_t_8VYc.crl (hash: jNvJlDaKdn6U6sk0BnnteNiqUk2yVHZ6U/kw118Imhk=)
                          2: 1190361AAF1B11E7B89F3883C4F9AE02.roa (hash: zl0jrIeJxII+atMy5dCdCnVAXxI5uX70xqsr3BS1v78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl
                          rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 15:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628 (0x353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CB63, serialNumber=66EA0F83BDD3632BFF19400B3A1BA6FEDFFC5587
        Validity
            Not Before: Mar 26 15:14:20 2026 GMT
            Not After : Apr  2 15:14:20 2026 GMT
        Subject: CN=69c54d4d-826d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:2f:f3:d8:f6:5a:eb:89:cd:36:92:6c:f3:
                    2b:c6:42:8f:35:db:de:5f:85:47:8d:3a:aa:41:27:
                    04:9e:54:f1:74:5e:ae:30:c0:23:25:cd:94:b6:34:
                    90:f9:12:3d:7c:e6:dc:bf:f1:4c:85:90:82:60:f9:
                    ad:7b:8b:9b:06:60:e0:b3:13:15:e4:0b:e7:2a:2a:
                    b7:33:73:64:1a:f1:08:eb:61:0f:a3:e9:ee:fa:ea:
                    a3:b1:bf:fa:9e:bb:6e:4d:2a:b3:25:82:41:ef:75:
                    2e:be:6e:79:c9:7f:6c:e7:dc:2c:a5:f3:5e:1b:6a:
                    cb:cd:2e:74:22:4b:b4:d9:f5:ef:11:fe:26:52:b5:
                    a8:a8:52:63:76:7c:63:ca:8a:44:79:e1:70:36:26:
                    0e:30:9b:d8:74:b0:0b:c5:2b:f1:c0:eb:13:1e:1e:
                    1a:ed:96:26:c7:26:84:2e:db:c5:9f:d1:93:c7:13:
                    bf:4d:3e:69:65:e0:c7:eb:7e:d1:19:7b:2e:b8:78:
                    4c:c1:19:42:77:28:58:05:8f:49:30:99:56:41:8b:
                    31:b9:42:cf:ca:fc:5a:90:87:47:7f:a8:de:23:6e:
                    0e:da:aa:d1:36:2f:39:54:91:de:00:b3:9a:59:f1:
                    1b:6d:21:b3:e3:03:14:9a:df:2e:43:fd:17:6f:04:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C6:34:AE:18:37:A9:6D:17:AF:D1:AF:9F:83:48:34:1D:23:A1:CC
            X509v3 Authority Key Identifier:
                keyid:66:EA:0F:83:BD:D3:63:2B:FF:19:40:0B:3A:1B:A6:FE:DF:FC:55:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZuoPg73TYyv_GUALOhum_t_8VYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CB63/E1B054FC1DA711E2B688EBA108B02CD2/ZuoPg73TYyv_GUALOhum_t_8VYc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:81:f8:15:fc:aa:af:34:e6:a2:a4:2a:f1:62:3c:99:10:4b:
         13:02:54:cb:8e:03:3c:66:1d:be:62:42:6b:e6:09:4a:a3:6b:
         4f:55:a6:67:09:a6:ba:a0:95:37:b7:21:2a:67:39:85:e3:f6:
         60:ff:0f:53:8a:63:ef:c1:86:9e:1e:cf:69:73:b9:59:16:49:
         47:0a:09:f2:00:55:2c:94:0e:8c:5d:78:df:1b:6f:ee:c4:a0:
         b3:31:54:51:58:d5:c4:85:0a:e7:fc:13:31:a9:df:e9:45:17:
         26:83:2d:95:3f:96:fc:72:fa:e1:b0:78:05:71:f6:08:59:20:
         24:3e:2c:81:ba:70:ab:51:a6:15:35:b4:43:49:34:08:9d:8d:
         83:81:e4:33:c2:52:40:ef:da:40:04:34:f2:d3:5d:56:23:a1:
         e1:e7:48:cb:8e:0a:cd:bb:5f:09:80:eb:ea:c4:f1:10:f5:d9:
         8e:26:c7:da:e4:3b:bb:f8:3a:5b:0d:08:b0:a7:f9:4f:e2:e7:
         fd:9b:d6:d6:db:e0:39:e7:3c:f8:f0:d1:50:70:84:b0:71:a3:
         38:45:8e:ab:3d:c8:4a:e3:07:61:f4:ca:cc:20:ef:c2:d3:5c:
         3a:4c:c7:e7:fb:d6:2c:82:24:7c:c2:7d:00:c0:21:97:64:8a:
         c1:d1:43:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:13 2026 by rpki-client