Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
File:                     RzKsKGdyTfzuirIikX9q8r0Ojz8.mft (raw, json)
Hash identifier:          vJNt3o29o0OBq/bznP70LFte5sZ3Ir6jVvcSYQj8Cpg=
Subject key identifier:   9D:73:12:27:E0:0A:86:23:EA:FE:03:6B:43:B5:6E:93:02:72:B3:D5
Authority key identifier: 47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
Certificate issuer:       /CN=A9130915/serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
Manifest number:          53
Signing time:             Sun 01 Mar 2026 09:36:08 +0000
Manifest this update:     Sun 01 Mar 2026 09:36:08 +0000
Manifest next update:     Sun 08 Mar 2026 09:36:08 +0000
Files and hashes:         1: RzKsKGdyTfzuirIikX9q8r0Ojz8.crl (hash: PUsilV2zknqYEWZaS2UAPMGlcatj+PUQRJ4Hl7thfCE=)
                          2: 80981C2A985211F0B8F76E80C4F9AE02.roa (hash: KZeGyK+XEJU2VjuaLIn3E2fbp7OCAvLZENE4Plyufvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl
                          rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130915, serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
        Validity
            Not Before: Mar  1 09:36:08 2026 GMT
            Not After : Mar  8 09:36:08 2026 GMT
        Subject: CN=69a40888-dddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:8c:bd:b2:30:e7:4b:b1:5e:cb:55:d0:65:
                    0a:8a:aa:28:ca:a1:75:5b:2d:a4:95:f8:c6:b8:a6:
                    7d:7f:07:56:2b:8a:bc:85:97:6c:ce:17:11:ec:02:
                    ae:b6:69:bd:14:44:53:3a:f8:65:00:9a:ca:39:f1:
                    96:9b:18:bb:d1:b0:89:c7:7d:e8:2f:17:3f:fb:70:
                    c1:30:e6:2a:3f:e3:5d:9c:66:90:2e:24:40:f7:e1:
                    aa:38:de:17:b1:37:a0:9b:c4:ce:62:aa:da:60:1f:
                    2c:1d:7b:0a:6b:d8:1e:5a:d2:30:27:40:d4:a2:31:
                    29:19:ee:39:f3:f5:8e:3b:25:b1:4d:ed:19:4d:ce:
                    ce:d7:9e:79:5c:78:df:00:81:cb:43:c3:73:89:86:
                    6e:38:96:00:d8:cf:17:6f:4e:fc:13:ff:14:83:8e:
                    13:57:02:41:cd:18:1e:d5:19:e2:f8:05:bb:af:b6:
                    df:f1:81:01:46:43:19:c3:8f:77:65:6e:7e:ce:b5:
                    f8:b1:43:7d:51:19:cf:b3:e6:3d:2a:46:28:d3:db:
                    b6:95:fd:46:f4:5e:41:ab:59:a4:4e:06:2d:34:15:
                    45:dd:2c:7d:e0:2d:7f:04:8d:90:1d:1f:9b:d2:5f:
                    27:43:28:d5:3d:9d:51:67:23:3f:c6:52:3e:b4:74:
                    69:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:73:12:27:E0:0A:86:23:EA:FE:03:6B:43:B5:6E:93:02:72:B3:D5
            X509v3 Authority Key Identifier:
                keyid:47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:69:68:26:8e:1b:92:ad:eb:84:7e:58:d5:19:fe:d8:d6:db:
         15:52:05:31:3c:56:ff:96:37:67:d4:ff:a0:6c:83:7b:e1:93:
         ec:a6:7d:66:d8:25:2a:60:ec:dd:36:89:2b:86:bd:41:80:60:
         dd:92:2d:98:fb:48:b7:29:88:ac:13:9c:fc:10:80:11:20:49:
         a0:b9:97:53:af:9d:27:7b:45:8b:f9:3c:eb:a1:e6:3f:6b:db:
         78:22:b4:37:1d:49:f6:64:75:0e:0e:48:56:eb:f8:a3:cd:2a:
         3a:06:0f:79:cc:29:16:30:a9:d0:ad:de:97:6c:6a:5c:eb:cd:
         98:d4:97:b8:f5:8d:18:23:42:93:0a:d7:c4:b8:8c:b1:7d:e8:
         8d:38:b6:c7:a8:ab:4f:78:cb:46:df:0c:4d:a9:93:c7:ae:e3:
         28:93:e6:1f:39:71:e8:f1:4c:e7:c6:6a:31:8c:11:3a:f9:d3:
         6a:c6:c1:7e:37:78:c5:6c:37:20:08:3c:a7:65:7a:69:fc:d9:
         be:d0:58:2a:0c:82:9d:9a:50:48:fa:2f:ce:37:12:b3:91:aa:
         c1:c5:31:1a:d5:9d:e7:c8:05:3b:82:1d:6f:c8:49:15:1e:5d:
         4b:6f:aa:60:ce:bf:79:9c:87:cb:58:86:d1:2a:89:f7:50:dc:
         cd:36:10:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:49 2026 by rpki-client