Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
File:                     Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json)
Hash identifier:          pEG0amsqq+musi61ET2DGPMnQ17u9LpyhkIaqcYV5hk=
Subject key identifier:   C1:7E:B8:14:2E:B4:5C:1D:C5:0A:F1:BD:44:6A:B9:82:AE:9B:55:0C
Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85
Certificate issuer:       /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85
Certificate serial:       09DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
Manifest number:          09CF
Signing time:             Tue 28 Jul 2026 20:14:23 +0000
Manifest this update:     Tue 28 Jul 2026 20:14:23 +0000
Manifest next update:     Tue 04 Aug 2026 20:14:23 +0000
Files and hashes:         1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: 73ys7IReih027opshwejdsWbCLwvIhJYUYrv+Nzmr/Q=)
                          2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: bnQhAcJYz0rCPLum5ciaF2yyWJMv/4ICnov/yZzyOZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl
                          rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2523 (0x9db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85
        Validity
            Not Before: Jul 28 20:14:23 2026 GMT
            Not After : Aug  4 20:14:23 2026 GMT
        Subject: CN=6a690d9f-88a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:cb:21:fd:b1:f4:43:7f:75:e4:55:a0:ad:
                    7f:06:d6:7c:79:db:36:45:36:a6:51:f4:3a:46:15:
                    39:27:d2:1c:49:04:dc:06:f1:50:96:40:d6:0d:2c:
                    39:56:6f:df:fc:51:ca:3d:ce:3a:dc:d7:39:9e:7f:
                    d2:c9:44:cb:8e:9a:93:e6:fe:1c:97:51:66:4b:43:
                    d4:b7:2f:c6:06:0c:e6:ef:5f:36:7e:ef:f5:3b:ff:
                    80:46:52:80:1e:4a:f3:04:78:80:d0:38:3a:11:82:
                    3e:e9:ff:15:b9:3c:e0:8c:5b:c8:af:b1:91:bf:fc:
                    60:d7:38:df:c6:72:a8:fa:18:55:cf:5a:d3:58:b4:
                    29:db:83:91:50:04:78:4f:0e:b2:42:69:bd:a4:45:
                    0b:d6:8d:d0:7e:d0:2f:8f:7f:4d:ad:68:56:b7:c1:
                    1f:4b:31:6e:ca:1f:49:a1:14:65:8e:6c:2f:bb:4c:
                    f4:24:a8:fb:43:25:3d:7e:35:9c:76:f4:c9:73:26:
                    95:ce:13:28:30:fd:8b:40:7c:68:87:15:48:e7:a9:
                    81:22:0f:db:1d:6d:f0:b8:64:85:ed:38:69:34:c4:
                    8c:02:2a:bd:6a:70:84:50:ee:fa:b1:58:0e:c0:02:
                    8d:f1:83:56:72:69:e3:a2:be:2a:47:76:56:a4:4e:
                    69:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7E:B8:14:2E:B4:5C:1D:C5:0A:F1:BD:44:6A:B9:82:AE:9B:55:0C
            X509v3 Authority Key Identifier:
                keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:06:db:0d:e6:48:e0:e2:79:d7:4d:15:28:9a:b5:4c:5e:59:
         83:de:1e:2a:42:60:87:12:97:10:24:c2:2d:42:61:5c:22:8e:
         41:d7:e5:8e:1f:1a:08:19:99:5d:06:dc:08:f9:b9:fe:2a:4d:
         3e:51:eb:9d:03:93:65:e3:4a:18:55:aa:d8:03:c8:3f:c6:0c:
         b3:92:2b:32:35:af:b8:e6:7b:3f:28:14:b5:ca:9d:fd:04:8f:
         dc:5d:8b:92:92:4e:6a:79:e2:ad:d5:f4:2d:85:46:90:e1:57:
         d8:5a:bc:c9:48:32:ef:fe:78:34:ab:71:a8:81:87:78:70:4c:
         ec:d9:33:0c:39:69:62:fb:b7:0c:94:1e:d3:42:0e:f1:fd:c0:
         dd:c9:02:3e:8a:93:64:ea:04:81:c3:97:b6:3d:fb:3d:3b:f4:
         9c:d0:c1:4b:71:92:f4:c6:a0:6f:52:0a:e4:49:ab:54:dc:63:
         76:2c:c4:56:3e:07:25:cf:64:e4:73:76:33:84:1e:81:98:5a:
         37:c5:77:3a:39:66:18:c5:d2:2d:16:c7:9e:bc:05:be:e5:4b:
         87:ab:1c:a4:79:90:2f:21:80:bd:1a:f9:be:14:6e:ad:36:51:
         89:54:35:46:65:f0:ed:0b:86:0e:a6:09:75:ce:1e:d7:9a:d9:
         1e:60:4a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:58 2026 by rpki-client