Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
File:                     Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json)
Hash identifier:          PDp+SB9g5g/4Thu27y5J41S1NL+a4wO/1yXFz6LEl6U=
Subject key identifier:   A4:16:D5:63:1F:05:97:15:84:1D:90:EE:12:EA:35:0B:80:34:72:8F
Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E
Certificate issuer:       /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E
Certificate serial:       24D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
Manifest number:          24B5
Signing time:             Sun 01 Mar 2026 22:36:35 +0000
Manifest this update:     Sun 01 Mar 2026 22:36:35 +0000
Manifest next update:     Sun 08 Mar 2026 22:36:35 +0000
Files and hashes:         1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: tbmOZP1MtvoDM/582Yqdlg8fUwzfOTcpyyKugm3IMYM=)
                          2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: U8OxEGjdn2Oyo4nAXHMe2uZlkKT+HU2vh2Rj/xEEZGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl
                          rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9431 (0x24d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E
        Validity
            Not Before: Mar  1 22:36:35 2026 GMT
            Not After : Mar  8 22:36:35 2026 GMT
        Subject: CN=69a4bf73-d0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:85:1c:bf:a9:e8:93:b9:d2:fe:69:99:11:
                    cd:a1:07:27:d5:bd:2a:2d:6d:da:9b:f8:74:ae:1e:
                    42:b1:56:64:0c:bc:97:d8:97:e0:a0:50:df:6a:54:
                    f0:b1:de:60:5c:46:bb:99:06:75:5b:51:5c:58:e7:
                    8f:86:3f:96:2e:1a:ee:6d:a9:48:67:1b:9c:5b:d4:
                    72:37:eb:45:ca:f0:59:d1:8b:da:9c:74:24:68:9a:
                    e7:c3:eb:96:34:39:8a:62:0e:ba:09:3f:a8:a2:03:
                    ab:97:e5:d1:d6:54:61:a8:52:13:1c:5b:3e:8c:77:
                    51:a2:33:c2:32:b7:eb:b4:5f:2f:22:b7:cd:c4:09:
                    e6:7b:d7:f0:ef:d8:42:c9:8b:88:4d:26:0d:0c:eb:
                    f6:9c:b3:27:17:03:4e:62:0e:aa:ea:54:9a:bd:6b:
                    4f:f3:24:30:fa:c0:3c:fd:c6:ee:d1:bb:21:3f:01:
                    75:88:c9:ca:b3:40:95:a9:73:06:ab:82:d1:76:d1:
                    49:d5:a1:6f:12:07:86:a1:d4:53:a4:fc:f1:85:8f:
                    67:77:e4:e5:62:6b:18:e1:ba:e9:7f:00:de:f1:de:
                    09:ce:70:58:1b:cc:47:61:4b:9a:89:5d:4a:a0:69:
                    1a:5d:6a:24:86:e2:bd:bf:d5:d3:35:f0:0c:f8:46:
                    62:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:16:D5:63:1F:05:97:15:84:1D:90:EE:12:EA:35:0B:80:34:72:8F
            X509v3 Authority Key Identifier:
                keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:29:cd:8c:4f:5e:3a:0e:b6:1f:b3:95:6c:ca:3a:c7:00:09:
         ec:2b:07:0a:98:7d:12:2c:b1:9c:ff:75:0b:89:22:a0:30:df:
         5c:65:1a:ec:68:b4:dc:0c:bf:89:24:b5:ae:00:60:26:67:9e:
         13:a6:9a:e6:73:69:30:63:19:e0:0c:bb:c1:a9:1a:2f:ee:6e:
         05:d8:5c:8c:51:f7:f6:59:27:e1:5f:a9:7a:91:1a:4c:30:a8:
         fa:a7:52:03:a9:87:e0:d0:ea:98:28:c5:78:60:67:5f:2e:46:
         ca:0c:7b:81:7b:39:2f:ec:52:98:10:9b:c5:8a:90:1b:6e:23:
         dd:16:4a:19:37:00:25:df:ba:75:99:b6:7c:f7:e4:77:5c:44:
         e7:2c:43:45:4a:74:e1:21:7d:8f:8c:cf:39:df:70:34:d9:50:
         25:e4:66:d2:85:1b:6b:f6:34:08:6f:98:a3:88:45:b4:99:8a:
         e7:00:71:57:d2:00:64:cf:ac:6c:c1:b0:61:37:80:81:80:31:
         c4:49:58:17:1f:4d:63:95:9a:ff:df:85:48:10:40:b0:28:3c:
         ba:0c:07:6f:a3:a5:f7:b3:97:ab:fe:a3:6c:4c:33:d8:5b:2a:
         63:34:76:8b:ea:6c:e2:10:6b:10:35:e4:ea:a7:09:da:b8:9c:
         07:d4:d6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:07 2026 by rpki-client