Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
File:                     ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft (raw, json)
Hash identifier:          QGXtZ9mV04OBLB13RDL02he3e0UeapIe94MvA0y0K6I=
Subject key identifier:   85:9E:80:01:FB:61:BB:CC:B9:F6:94:12:42:82:D4:77:2A:B7:89:51
Authority key identifier: 65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E
Certificate issuer:       /CN=A9133065/serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
Manifest number:          74
Signing time:             Mon 02 Mar 2026 01:00:42 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:39 +0000
Manifest next update:     Mon 09 Mar 2026 01:00:39 +0000
Files and hashes:         1: ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl (hash: GCaIuXz4Dx9JclKkfqRgw5feoziiHarMZEaf9eW/OJI=)
                          2: CB09977AFB0D11F08355CD12746F56BC.roa (hash: Y6DTASD2URCdLE3oTBxAyH1XxTWqmt689U3qro6bvnY=)
                          3: BA3B98B2FB0D11F098EF6A0C746F56BC.roa (hash: sp3MAA+6GdhSt6kFlIphgRJHq15Fvj4xCYLoWlCB5KA=)
                          4: 9D2C024A96AC11F0AFADA123C4F9AE02.roa (hash: Va/KecTHSqGqStSgmBLK50Bj4LC+kYguO3MOtGhkk90=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl
                          rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133065, serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
        Validity
            Not Before: Mar  2 01:00:39 2026 GMT
            Not After : Mar  9 01:00:39 2026 GMT
        Subject: CN=69a4e139-ae02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:ec:b2:45:2b:3e:91:8f:3b:8f:eb:d6:86:
                    7e:f4:5d:d4:87:af:ca:7c:88:52:f7:22:14:15:36:
                    2d:20:7a:a2:49:49:af:ef:a4:a0:93:47:53:fa:35:
                    1b:a5:87:aa:10:59:d5:e7:1c:7c:6c:29:93:4c:68:
                    b4:2f:63:be:3b:22:72:1a:b1:39:59:d4:39:64:85:
                    7f:04:eb:18:40:1a:0d:3a:85:ff:59:09:df:9b:51:
                    e0:50:fa:d3:27:d9:fd:bf:d1:1f:7c:97:ae:c7:ba:
                    7e:6d:96:0d:a9:62:2c:e0:4e:1f:ce:a7:e1:d1:79:
                    8c:f5:a8:cd:05:a3:7f:ee:51:21:be:55:b8:10:db:
                    09:a6:81:2e:25:36:17:9e:99:63:8a:e6:20:45:68:
                    32:3e:f5:41:d9:dd:02:8c:e3:41:f9:56:03:2e:a3:
                    f1:b3:31:be:29:dd:09:79:c1:e4:3b:35:1a:89:c4:
                    3b:d1:ba:04:e9:a5:9b:52:e1:ae:c6:10:e8:ef:53:
                    97:75:1e:7b:89:fb:42:eb:65:15:84:ca:2c:50:74:
                    b3:16:91:27:61:c5:da:fe:23:c8:f3:6b:cb:c0:8b:
                    2c:73:4c:ec:14:ba:e3:ed:ff:20:5d:cb:24:4d:df:
                    11:f8:26:22:80:11:b8:93:c3:86:7a:fa:60:07:ad:
                    ce:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9E:80:01:FB:61:BB:CC:B9:F6:94:12:42:82:D4:77:2A:B7:89:51
            X509v3 Authority Key Identifier:
                keyid:65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:7f:ca:93:a8:70:0f:e5:ad:f6:2b:bd:6f:a6:fc:1f:4f:35:
         43:bb:66:b3:91:e7:18:d2:a5:62:37:ae:04:cf:18:c1:ce:42:
         ee:02:89:c6:ae:21:b5:ec:55:69:af:70:de:f5:48:95:13:02:
         48:ea:fb:f2:3e:a4:54:23:0a:06:67:8d:fa:b6:30:d0:f4:4d:
         9e:92:57:f4:5e:6b:c7:45:af:53:99:4a:c4:0f:63:73:e7:41:
         c7:eb:29:83:3d:5e:ca:24:35:b4:8c:74:02:43:39:2b:fa:51:
         64:7f:14:30:3a:ec:5c:cc:6c:e5:2b:41:a1:83:0a:4b:8b:ca:
         01:12:e8:b5:bf:06:c8:23:22:dc:73:6a:be:6e:ca:d4:09:17:
         ef:c6:c5:ab:cf:be:3f:f2:3d:2d:4f:de:e5:11:48:13:ee:7d:
         83:ea:b3:d5:5c:a0:d3:36:f0:ef:a9:bb:f9:bf:31:c6:52:71:
         ce:d3:0d:6e:1d:85:43:e1:51:5d:5a:97:da:e8:3a:21:65:82:
         3d:87:62:98:e5:35:b7:52:c0:3d:0b:7d:d6:be:69:aa:09:15:
         b3:78:44:cc:89:3c:50:81:cc:4a:bb:18:c2:58:71:c7:96:1f:
         c9:51:9d:6f:99:2b:f2:b1:e6:f3:a5:ea:5e:8d:50:3a:d0:7b:
         2b:0a:06:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:12:39 2026 by rpki-client