Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
File:                     RZTy7BffVsPQZUDzZtKvEYsxfx4.mft (raw, json)
Hash identifier:          AI9ne0zSs086qIPPtYGfORkgfzmyIwloAHvOvOO2ylw=
Subject key identifier:   31:ED:C1:17:70:F9:F8:84:D4:DB:55:0C:3E:3A:E2:07:F3:E1:4A:41
Authority key identifier: 45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E
Certificate issuer:       /CN=A91CE978/serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
Certificate serial:       0197
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
Manifest number:          0193
Signing time:             Mon 02 Mar 2026 00:13:52 +0000
Manifest this update:     Mon 02 Mar 2026 00:13:50 +0000
Manifest next update:     Mon 09 Mar 2026 00:13:50 +0000
Files and hashes:         1: RZTy7BffVsPQZUDzZtKvEYsxfx4.crl (hash: EIL8A+gMGNci0QpZoNk0LhIU4m+BfBl6oTwKPyS72ok=)
                          2: 30EAE110B9AD11EE83063243C4F9AE02.roa (hash: kFv7yndhwJadcacui8r5QOrU0uIwRhKTiJr7YW1IOaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE978, serialNumber=4594F2EC17DF56C3D06540F366D2AF118B317F1E
        Validity
            Not Before: Mar  2 00:13:50 2026 GMT
            Not After : Mar  9 00:13:50 2026 GMT
        Subject: CN=69a4d640-a614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5e:ce:44:b0:01:be:77:bf:9f:d2:74:a2:93:
                    42:05:8b:2d:19:cd:36:14:44:d3:7a:b7:98:4e:13:
                    18:4f:12:36:2b:ab:5e:b0:c1:65:6f:62:64:d0:21:
                    47:55:a1:68:8e:d0:98:b1:f7:a2:ce:c9:05:05:ac:
                    c7:04:0b:93:57:08:fe:8d:e8:96:01:7c:82:99:13:
                    67:c7:33:e5:6f:2b:c1:5e:82:f9:55:3d:f0:cc:ba:
                    7f:c4:74:1f:e4:7a:3a:a7:f7:ba:77:01:af:df:c4:
                    6c:9f:4d:79:c9:66:88:14:be:80:d5:4c:b0:ea:be:
                    d2:3c:b8:57:c2:de:61:80:84:8e:4a:e5:92:f6:f9:
                    e9:15:5f:00:ac:20:0d:cb:81:fa:4c:f8:1c:33:c3:
                    7f:3d:a2:18:93:8f:a1:86:23:ab:8f:6b:41:48:48:
                    61:8a:c4:91:3d:bc:63:a0:07:b4:3b:f6:6c:d2:a1:
                    d7:a9:a3:24:d5:6a:37:5e:44:aa:dc:13:9f:88:3d:
                    e0:f5:1f:10:be:87:e7:3d:8e:43:0a:21:ab:13:48:
                    49:ad:70:e3:56:1f:65:46:70:eb:22:ca:62:51:8a:
                    e1:ef:5e:69:92:b9:0c:89:90:73:38:ff:c5:e0:0e:
                    27:e3:eb:c9:70:b0:03:a7:c2:ee:64:41:13:b4:b1:
                    43:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:ED:C1:17:70:F9:F8:84:D4:DB:55:0C:3E:3A:E2:07:F3:E1:4A:41
            X509v3 Authority Key Identifier:
                keyid:45:94:F2:EC:17:DF:56:C3:D0:65:40:F3:66:D2:AF:11:8B:31:7F:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RZTy7BffVsPQZUDzZtKvEYsxfx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/5DB555AAB8DA11EEBC4BEC2DC4F9AE02/RZTy7BffVsPQZUDzZtKvEYsxfx4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:48:ce:a0:6d:37:39:d7:31:d7:1d:21:9a:63:61:79:5a:2d:
         fd:d4:6b:71:ef:4b:ef:b2:8a:f3:02:19:74:68:de:5e:4d:89:
         de:bd:8c:75:dd:9d:aa:40:e7:84:bd:e7:16:10:df:5a:7d:67:
         5b:c6:d4:62:9e:50:ee:e0:12:d3:bc:ae:22:61:76:83:72:db:
         22:9b:ae:43:52:ef:2d:da:43:50:f6:0a:03:23:6a:0f:20:27:
         70:cf:68:dc:cc:98:ff:5d:ca:3c:f8:f1:98:9d:18:22:60:ca:
         77:dd:11:11:02:38:ca:62:b3:6c:d7:72:a9:a7:0e:7d:3a:36:
         2d:d0:7c:75:87:56:0e:b5:7b:44:22:28:fb:65:77:11:5e:bd:
         ee:20:67:72:7c:fe:95:55:00:7e:3b:06:f1:72:9e:52:a3:cd:
         a8:7d:25:ae:0a:67:f3:0f:35:6a:fd:a9:e3:ff:2d:51:3d:56:
         fa:87:63:42:82:c3:e0:5f:3e:af:76:29:0b:22:0f:76:66:7c:
         94:3b:5f:c1:d2:dd:95:b4:a6:ed:34:4e:4b:fb:18:a5:a0:ae:
         2b:e6:2e:71:c9:1b:25:46:31:be:2e:2b:6e:a1:c0:99:91:86:
         bc:b3:55:c7:b7:0c:28:c2:70:8c:ce:7d:6e:8f:4d:2b:e4:cc:
         64:01:da:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:20 2026 by rpki-client