Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
File:                     ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft (raw, json)
Hash identifier:          1zGEDQPWhTvdkwMkJQgheld9zbu7wbUy+mCtwr6ky40=
Subject key identifier:   DB:28:F7:87:CC:EE:CE:D1:3A:32:72:61:4C:69:71:47:10:DF:1C:E5
Authority key identifier: CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF
Certificate issuer:       /CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF
Certificate serial:       0B98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
Manifest number:          0B8D
Signing time:             Mon 02 Mar 2026 01:00:09 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:07 +0000
Manifest next update:     Mon 09 Mar 2026 01:00:07 +0000
Files and hashes:         1: ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl (hash: IlRRsiWGc4QbfkzaeUhWWJBLl7CkEv7d6eJ8WFUNdRQ=)
                          2: 4E6B4E24458E11EA84E01A0FC4F9AE02.roa (hash: /2dz4PjA3+fudT7lQIBIdu9/aDa/a/TeRxW2OSUWKSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl
                          rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2968 (0xb98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189132, serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF
        Validity
            Not Before: Mar  2 01:00:07 2026 GMT
            Not After : Mar  9 01:00:07 2026 GMT
        Subject: CN=69a4e119-7870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:44:61:0a:25:14:2a:0d:88:a9:fc:77:e8:f6:
                    80:69:21:ba:94:19:ca:83:f6:dd:4c:20:54:fe:19:
                    2c:37:be:0f:b5:c3:e1:a2:7b:8e:02:b9:58:ba:32:
                    88:31:ee:4d:25:23:48:97:e9:33:d4:30:51:37:83:
                    24:0b:6a:79:30:d2:f9:eb:8c:cc:a8:ca:b5:b6:59:
                    70:36:26:85:86:47:42:69:3a:8f:f5:f5:86:b7:e7:
                    b9:63:49:42:a6:98:3f:39:1f:ee:90:4e:f1:ef:3f:
                    9a:cf:2e:ec:aa:13:3d:71:5b:13:3d:06:23:96:72:
                    ca:54:4e:72:07:de:a7:df:f7:e5:95:2a:a7:95:bd:
                    85:80:f9:3b:fa:95:bb:9a:ec:b2:5a:e9:c7:bc:ca:
                    62:23:d8:48:63:05:1c:03:5f:b6:7b:65:d2:ef:7c:
                    5a:eb:5d:e0:98:0e:63:69:aa:50:ad:aa:83:f5:c2:
                    dc:de:1a:6b:25:88:16:1c:01:c5:a0:39:9c:77:c7:
                    ab:c9:40:9a:6a:72:12:d4:dc:19:a7:01:16:f2:8c:
                    b7:aa:df:ed:1a:f8:6e:50:9b:cd:f6:00:d0:e4:81:
                    a1:55:12:a8:de:b2:79:dc:e2:eb:00:01:d4:11:18:
                    1c:b5:9b:65:32:5a:9b:06:dd:b3:72:6a:df:b5:b1:
                    1d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:28:F7:87:CC:EE:CE:D1:3A:32:72:61:4C:69:71:47:10:DF:1C:E5
            X509v3 Authority Key Identifier:
                keyid:CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:70:97:32:12:bf:ca:d8:cd:d3:8a:8d:c3:7d:9e:51:d8:
         1c:5f:af:12:39:df:f4:c5:15:b1:75:66:8d:84:94:28:1b:82:
         76:3f:f7:45:63:fd:53:bb:bd:f2:92:7e:c1:d5:7d:00:15:21:
         37:75:20:91:27:3b:64:9a:b1:76:10:cb:fa:73:c6:97:ba:4b:
         2e:9a:da:9e:04:aa:ae:9e:60:05:10:19:94:e3:28:d6:b5:c8:
         4a:22:60:96:c2:c2:59:68:a3:c0:e6:e9:93:ae:18:1a:cd:d6:
         b6:14:ed:a6:4a:9f:44:e3:c6:12:46:89:90:e2:68:f5:fa:c5:
         c4:34:af:e1:75:74:0a:e4:ea:af:a1:23:6f:f6:be:b1:57:0d:
         e0:ff:da:8b:ff:6b:fe:b5:da:ca:66:98:4c:0a:98:72:d7:40:
         3a:e7:dc:14:d6:c5:35:4b:31:ae:ae:b6:f1:50:66:ae:c8:0c:
         32:dc:9b:62:d4:8e:8b:2f:89:c7:27:34:b1:43:08:da:a7:94:
         b0:88:b8:a2:1c:fb:21:10:cd:7b:b3:67:9b:96:bc:55:4f:7b:
         87:a2:87:86:9d:c5:2e:9e:23:10:24:4c:c1:e3:fe:ad:48:2a:
         14:2a:76:0d:b5:51:51:d0:49:c9:eb:43:7f:26:13:7e:c9:c4:
         f1:19:11:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:47 2026 by rpki-client