Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
File:                     CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json)
Hash identifier:          2CxLTkmOo4s3j7ae7+oBaxcKnWAsGPfQEE4glOKiKt0=
Subject key identifier:   A9:EF:74:DC:C1:3C:1D:CC:C7:2D:55:D7:3D:43:91:DE:50:07:6C:DF
Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
Certificate issuer:       /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Certificate serial:       0165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
Manifest number:          014D
Signing time:             Sat 13 Jun 2026 05:23:28 +0000
Manifest this update:     Sat 13 Jun 2026 05:23:27 +0000
Manifest next update:     Sat 20 Jun 2026 05:23:27 +0000
Files and hashes:         1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: PX7b/0qvVRI3JCfJyaFAhOuHWGUAfEbfiYmA421UgmQ=)
                          2: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: hlTOhKlRcRDqDLJx9A76x4qFo+ibdhrZ7489cVCKdJ8=)
                          3: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: PKsDzQz8Iz9pp87aDZQ9VcpxtBwvynLDnu1x8wN8n3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
                          rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
        Validity
            Not Before: Jun 13 05:23:27 2026 GMT
            Not After : Jun 20 05:23:27 2026 GMT
        Subject: CN=6a2ce94f-a0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:49:9d:ff:c9:c7:73:60:91:5d:ec:68:ef:
                    17:f4:54:62:57:b2:63:96:11:38:b4:de:c1:18:fa:
                    e4:6b:03:66:19:62:05:6c:35:79:73:d1:55:cc:9d:
                    a6:c0:a4:1a:5f:9b:3b:5b:3c:68:50:e3:61:c9:92:
                    a5:9c:5a:be:22:aa:ec:e1:f6:9f:b1:eb:9d:41:ef:
                    ca:62:f9:da:75:e7:20:8b:3f:cb:ab:5a:50:bf:01:
                    64:cb:d4:38:a7:e0:29:65:f0:f7:79:74:76:7f:2e:
                    fb:a3:02:be:b7:49:6d:8a:14:2c:89:9c:76:61:5e:
                    b6:0e:b9:06:00:a0:6b:33:11:9f:ec:51:49:a0:f2:
                    ac:4a:21:47:73:72:7d:47:4a:33:d2:67:9e:47:a3:
                    33:7e:a2:77:f2:c3:a9:08:41:7b:ba:90:40:30:bc:
                    5c:99:d6:e3:50:27:55:1a:e4:52:9e:dc:77:e9:4a:
                    8d:d3:44:3d:9d:9d:2c:e8:0f:b5:00:1d:39:99:db:
                    18:1d:84:81:cb:b5:2e:30:e2:f5:c0:c4:b2:1c:c2:
                    5c:9f:1b:fb:ec:de:9f:83:7b:44:ac:ff:5f:39:eb:
                    c4:88:10:5f:a2:a1:92:45:9a:5f:ab:0c:2f:81:ae:
                    8e:0d:13:db:74:23:e1:72:e9:5b:dc:a7:19:46:a9:
                    d7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EF:74:DC:C1:3C:1D:CC:C7:2D:55:D7:3D:43:91:DE:50:07:6C:DF
            X509v3 Authority Key Identifier:
                keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:46:d2:d5:84:17:dc:eb:64:c1:61:0f:8e:f3:d2:d7:9b:29:
         6b:cd:a1:78:51:32:c7:f8:81:72:91:da:a6:1f:22:37:cc:a1:
         0e:8e:16:cc:3f:18:fd:6d:b5:d2:c7:67:82:50:86:50:56:85:
         4c:f6:5a:79:fb:b1:3f:ff:ea:df:3f:22:8d:ea:98:7e:9b:6e:
         3b:51:95:e0:6e:ad:52:83:0a:a3:92:da:53:7d:ee:24:cb:1f:
         b0:62:33:4d:aa:e6:91:ed:b3:3b:ca:ae:77:0e:25:52:fa:57:
         f3:23:34:4d:9c:58:9d:53:21:a6:7e:f4:4d:02:4a:74:d4:f2:
         75:89:c0:18:ce:98:44:1e:63:87:f0:58:5a:81:7e:a0:33:41:
         60:1f:cb:1d:f5:ca:d2:10:ef:1c:09:95:ee:2b:e6:1c:40:6b:
         1b:69:2b:28:47:26:45:56:e0:df:ea:65:01:1c:7d:1a:86:a2:
         6d:15:14:d3:da:8c:b3:ac:45:04:4a:d6:86:80:75:be:ec:20:
         7a:d6:c1:8a:21:bd:68:5d:8d:27:35:c7:17:c4:65:42:cc:02:
         6b:2f:16:d4:1f:96:37:02:13:fc:c5:26:ac:31:76:7f:f3:e5:
         fb:e5:b8:05:62:55:bb:84:f2:d5:03:42:bc:ff:0b:f0:f8:e2:
         0f:70:53:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgxOUExMTAvBgNVBAUTKDBCMzY2RTA3MENGRTcwMEU0NzdFRTQ3NEQ2Qzk1NDlE
RDNCMzhCRjIwHhcNMjYwNjEzMDUyMzI3WhcNMjYwNjIwMDUyMzI3WjAYMRYwFAYD
VQQDEw02YTJjZTk0Zi1hMGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp15Jnf/Jx3NgkV3saO8X9FRiV7JjlhE4tN7BGPrkawNmGWIFbDV5c9FVzJ2m
wKQaX5s7WzxoUONhyZKlnFq+Iqrs4fafseudQe/KYvnadecgiz/Lq1pQvwFky9Q4
p+ApZfD3eXR2fy77owK+t0ltihQsiZx2YV62DrkGAKBrMxGf7FFJoPKsSiFHc3J9
R0oz0meeR6MzfqJ38sOpCEF7upBAMLxcmdbjUCdVGuRSntx36UqN00Q9nZ0s6A+1
AB05mdsYHYSBy7UuMOL1wMSyHMJcnxv77N6fg3tErP9fOevEiBBfoqGSRZpfqwwv
ga6ODRPbdCPhculb3KcZRqnXoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnvdNzB
PB3Mxy1V1z1Dkd5QB2zfMB8GA1UdIwQYMBaAFAs2bgcM/nAOR37kdNbJVJ3Ts4vy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE5QS81Rjg5RjQzMDg2
QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNBNUhmdVIwMXNsVW5kT3pp
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N6WnVCd3otY0E1SGZ1UjAxc2xVbmRPemlfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODE5QS81Rjg5RjQzMDg2QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNB
NUhmdVIwMXNsVW5kT3ppX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdkbS1YQX3OtkwWEPjvPS15spa82heFEyx/iBcpHaph8iN8yhDo4WzD8Y/W21
0sdnglCGUFaFTPZaefuxP//q3z8ijeqYfptuO1GV4G6tUoMKo5LaU33uJMsfsGIz
Tarmke2zO8qudw4lUvpX8yM0TZxYnVMhpn70TQJKdNTydYnAGM6YRB5jh/BYWoF+
oDNBYB/LHfXK0hDvHAmV7ivmHEBrG2krKEcmRVbg3+plARx9GoaibRUU09qMs6xF
BErWhoB1vuwgetbBiiG9aF2NJzXHF8RlQswCay8W1B+WNwIT/MUmrDF2f/Pl++W4
BWJVu4Ty1QNCvP8L8PjiD3BTxw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:59:50 2026 by rpki-client