Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
File:                     CZLDze-CUAZzzNehdgX9M9hk_wE.mft (raw, json)
Hash identifier:          pYJzmDGz98ZIw6g18ZKSiEIlqFPLNumYzDusznkUNq4=
Subject key identifier:   B0:33:DA:58:3E:1B:0F:3A:F6:F8:A0:B9:FC:CB:41:25:62:E7:AC:1C
Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01
Certificate issuer:       /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
Certificate serial:       0868
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
Manifest number:          159C
Signing time:             Fri 12 Jun 2026 17:59:21 +0000
Manifest this update:     Fri 12 Jun 2026 17:59:20 +0000
Manifest next update:     Fri 19 Jun 2026 17:59:20 +0000
Files and hashes:         1: CZLDze-CUAZzzNehdgX9M9hk_wE.crl (hash: yMGoj8783idYwCkvL06NELy+EvxNIdfMOGG6HdpY4jg=)
                          2: AB3040224C0211EF84B00D1EC4F9AE02.roa (hash: HxB0HCgQPbOlmo96fIp6uk7AphF4jHP5wZ0nGph8yhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl
                          rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2152 (0x868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112804, serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
        Validity
            Not Before: Jun 12 17:59:20 2026 GMT
            Not After : Jun 19 17:59:20 2026 GMT
        Subject: CN=6a2c48f9-4df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:17:7a:54:2e:3a:17:ce:11:5e:22:35:0c:
                    e7:85:0f:c6:be:90:59:d8:a1:7b:62:ae:18:44:c1:
                    be:77:8f:da:f0:8c:c3:c4:4c:ee:9d:8c:e4:29:01:
                    5a:48:e5:22:8e:04:57:80:f9:43:a2:18:96:51:6d:
                    d9:32:0a:7e:17:7d:21:80:05:96:99:83:cf:f6:49:
                    b3:cb:ed:fa:c5:45:99:a4:8d:e4:32:5f:6e:7e:5d:
                    a2:b1:49:02:eb:60:69:5f:07:f9:3a:28:90:da:06:
                    53:ee:08:a5:9d:dd:e9:a8:3b:87:90:9e:6c:58:be:
                    f7:64:68:83:43:54:94:80:77:7c:57:55:71:96:d8:
                    f1:43:af:5c:dd:69:34:93:93:18:d5:d8:81:12:cb:
                    7f:5f:58:73:f9:7f:4a:ac:ae:c7:4c:01:a9:81:a2:
                    f2:2d:f9:e2:d8:a6:8a:4d:0b:72:51:8d:47:79:12:
                    d7:74:ab:4c:b8:28:b9:68:1a:0e:77:2f:be:79:93:
                    31:13:26:60:ab:12:0f:10:42:56:1c:3d:26:56:2f:
                    85:c3:9d:09:4b:ee:49:23:0c:06:95:94:0e:2b:a5:
                    8b:4d:86:07:99:5a:b0:6b:86:6d:5c:c9:b9:11:53:
                    09:93:b4:64:c3:8d:c2:6e:e3:82:e8:ec:3b:6b:d3:
                    90:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:33:DA:58:3E:1B:0F:3A:F6:F8:A0:B9:FC:CB:41:25:62:E7:AC:1C
            X509v3 Authority Key Identifier:
                keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:31:63:09:47:27:d7:e7:27:65:34:b5:ea:24:9e:7c:10:d8:
         b6:26:93:7d:d1:4f:b5:1f:0c:08:64:42:61:b9:4a:18:d3:f4:
         12:bf:17:50:00:32:ce:e4:b8:fc:22:3f:51:64:cb:09:fc:cf:
         1e:3f:97:b7:98:e7:ac:fb:0c:45:44:e8:2e:a0:3e:a7:86:3b:
         0e:50:89:1c:a9:49:c8:a1:29:7b:63:e5:6f:62:b9:a5:f0:6f:
         a4:e7:55:04:f7:00:07:c1:0e:8e:af:55:b0:14:9d:d2:2f:9d:
         3b:35:a6:d3:d9:de:54:ce:6c:85:a9:e9:af:62:a8:25:ea:d1:
         3a:d9:8b:7b:e7:67:91:ac:45:bf:3b:71:ef:cc:6e:60:74:a2:
         6f:8f:4c:47:75:3e:2d:00:6b:f8:22:e6:b9:0c:e4:e9:8f:0f:
         ad:3c:47:ac:99:09:c6:c5:d5:59:e2:8b:b8:88:ac:f4:92:1e:
         9b:f1:fe:43:44:71:d2:14:1f:e0:a8:ae:cc:b3:a9:40:b1:0a:
         6c:65:e9:ad:9a:aa:8f:b0:89:35:db:ee:e2:66:12:38:d9:e6:
         76:66:45:d8:6b:35:c4:78:44:64:4b:6a:85:36:d9:29:3a:a5:
         0c:d7:1a:e5:fd:66:aa:3e:b6:8f:de:05:25:e7:4a:48:11:e1:
         49:9e:ac:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:32 2026 by rpki-client