Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
File:                     Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json)
Hash identifier:          jYqopekgM1FMqC7C5UH6pkaPSEDwK/Og60c9XiYVRf4=
Subject key identifier:   B1:FC:45:06:15:DA:B1:6C:59:4A:F9:AE:B9:56:D8:5D:5C:59:C9:D1
Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85
Certificate issuer:       /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85
Certificate serial:       09A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
Manifest number:          099B
Signing time:             Thu 16 Apr 2026 19:54:50 +0000
Manifest this update:     Thu 16 Apr 2026 19:54:50 +0000
Manifest next update:     Thu 23 Apr 2026 19:54:50 +0000
Files and hashes:         1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: 5fVmqS4s2JoI+zn4K+OHUF8nwPfKlFIe8RfHZREOeXA=)
                          2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: bnQhAcJYz0rCPLum5ciaF2yyWJMv/4ICnov/yZzyOZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl
                          rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2471 (0x9a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85
        Validity
            Not Before: Apr 16 19:54:50 2026 GMT
            Not After : Apr 23 19:54:50 2026 GMT
        Subject: CN=69e13e8a-9698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:9f:dd:dc:73:d1:db:ee:92:d2:df:a6:2b:
                    e5:ff:3e:ec:da:5f:aa:a2:e9:b1:fa:ff:35:c6:c9:
                    ea:11:4f:a0:e5:8f:8f:df:ce:df:35:af:50:21:cc:
                    a4:6a:7e:f1:39:eb:8b:ba:e9:5a:26:9a:13:2c:30:
                    29:9e:40:82:be:16:46:7f:8a:95:c4:c2:0f:90:b2:
                    98:fc:da:0b:2a:6e:fc:31:81:40:cf:f1:1e:40:ab:
                    67:7f:68:ab:9c:50:c6:1e:bf:98:07:33:9f:1e:48:
                    02:ac:b4:4d:ac:d1:3b:ba:bc:07:c0:dc:35:b6:b5:
                    14:28:78:fd:ea:b7:ff:65:ce:cc:a8:d6:a8:0f:2c:
                    93:15:5a:d9:44:8a:d3:4c:01:1b:19:b6:aa:44:0a:
                    11:ff:2a:f7:54:ba:05:9c:99:82:a7:6b:0f:33:a7:
                    91:db:f5:44:c3:c1:9e:00:44:9e:07:74:86:6e:88:
                    bd:17:bd:94:01:11:2d:b4:9c:a0:2b:66:3a:df:62:
                    0d:63:0f:90:a1:02:1e:9c:54:3b:89:74:98:94:a0:
                    4b:fd:bf:61:ed:98:6e:4a:85:2a:35:62:e6:a9:aa:
                    31:00:34:d5:9c:b9:f4:58:fe:d6:21:c7:17:11:f4:
                    94:97:d6:a9:5e:d4:34:d1:28:c2:e3:9a:03:59:88:
                    2d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FC:45:06:15:DA:B1:6C:59:4A:F9:AE:B9:56:D8:5D:5C:59:C9:D1
            X509v3 Authority Key Identifier:
                keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a0:8a:3a:0c:8d:a9:be:5b:a7:ca:5c:38:42:c7:3f:aa:e8:
         e5:fc:44:0b:ea:7b:48:8e:c7:d2:58:6e:ff:67:37:fc:83:29:
         52:f0:1e:41:42:dd:35:ca:3d:d9:b4:2f:1a:72:13:36:43:72:
         7a:94:e6:38:29:64:16:23:53:a9:af:15:67:42:de:67:88:7e:
         5c:09:bd:f3:30:b3:bb:9b:86:a8:52:26:20:7e:62:b8:7c:85:
         ca:05:1f:2f:8e:95:a7:9e:65:c5:97:31:d5:8d:a1:b8:22:08:
         38:28:bc:f7:23:61:34:1c:db:ba:02:0e:4d:05:98:b4:da:ee:
         12:13:bb:34:72:01:6d:ca:67:12:f9:e9:b5:1c:d0:00:d3:9d:
         72:89:ae:e4:9f:f6:94:34:b6:3a:a5:15:b4:a0:6a:51:54:85:
         78:72:5d:7a:38:fd:61:57:ed:bb:07:4e:56:b9:48:f9:02:c5:
         e3:63:3e:bb:4c:c5:4a:69:f5:91:44:15:93:6f:61:a2:84:ac:
         df:5a:1f:46:af:eb:42:d1:13:8c:23:8c:aa:63:dc:f2:d6:cb:
         31:2a:1b:ee:20:c2:72:86:94:79:50:38:ed:05:56:7f:2b:83:
         17:10:f9:04:36:0c:19:94:20:5d:6b:c5:dc:af:7f:a7:fc:6c:
         37:d1:ed:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:06:34 2026 by rpki-client