Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
File:                     Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json)
Hash identifier:          hpbbHgzzk/xsWQVx7o1FUXU27hsJhwsIaqbQxJ/Pf08=
Subject key identifier:   87:68:0A:41:83:65:64:EE:5E:E4:73:6F:9A:9A:5E:C8:8E:58:34:23
Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85
Certificate issuer:       /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85
Certificate serial:       09C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
Manifest number:          09B8
Signing time:             Fri 12 Jun 2026 19:58:17 +0000
Manifest this update:     Fri 12 Jun 2026 19:58:16 +0000
Manifest next update:     Fri 19 Jun 2026 19:58:16 +0000
Files and hashes:         1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: /iy3KqfI0GeKHZ2BIwZ59IiD1IiONLUaWH0JiUGVDdQ=)
                          2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: bnQhAcJYz0rCPLum5ciaF2yyWJMv/4ICnov/yZzyOZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl
                          rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:58:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2500 (0x9c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85
        Validity
            Not Before: Jun 12 19:58:16 2026 GMT
            Not After : Jun 19 19:58:16 2026 GMT
        Subject: CN=6a2c64d9-c624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5c:0f:59:18:d3:b1:f4:51:62:02:ed:05:38:
                    fc:a0:3f:c4:c3:db:aa:fa:bb:32:72:04:60:df:e6:
                    41:fa:63:71:40:db:d7:01:fa:66:de:42:71:ef:41:
                    60:33:f8:42:7c:36:1c:1b:9e:89:ff:46:13:64:82:
                    64:b2:5f:d1:3f:2d:46:c0:7d:73:36:19:07:2b:47:
                    81:5d:c1:29:e2:f4:8f:f3:b4:99:ca:c6:e5:d0:89:
                    39:57:a4:b9:96:ae:27:3e:d6:f8:77:a2:48:bf:ca:
                    f5:00:8f:19:36:67:19:de:a7:1b:47:f8:3d:c7:43:
                    94:c1:a9:4e:2a:45:e3:e0:16:f9:26:f0:b1:90:ce:
                    f4:6b:10:56:ee:f0:be:9d:78:fd:37:85:f1:6e:13:
                    e2:a4:2b:9d:84:2c:d5:01:a0:14:39:71:2b:cb:fa:
                    f8:b4:0f:4d:8b:28:d3:89:c8:99:81:80:2e:1e:4b:
                    1e:6b:3c:fe:6f:bd:0e:af:cc:69:5e:05:14:52:fe:
                    ac:73:0b:2c:2e:9a:ad:09:af:83:bb:1e:33:21:da:
                    08:0b:f9:c8:5d:ca:95:8f:6d:7f:03:90:1a:63:66:
                    5a:a8:64:21:70:62:fd:d3:0f:e6:c1:99:3d:6d:4d:
                    f5:0c:c0:57:06:d6:78:da:f5:c3:ce:50:65:e0:aa:
                    12:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:68:0A:41:83:65:64:EE:5E:E4:73:6F:9A:9A:5E:C8:8E:58:34:23
            X509v3 Authority Key Identifier:
                keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8a:2f:2c:0f:81:42:ec:5c:ad:75:cd:ae:51:ae:cf:9d:b3:
         e6:6c:58:26:3e:92:25:33:f6:ec:24:83:bb:ba:ff:31:c9:66:
         b6:fb:04:3f:c5:3d:ef:e6:ee:00:fe:e1:68:28:29:1a:59:dc:
         2a:58:b5:4e:2c:b3:cf:79:fd:8f:ca:7a:9b:de:9f:c0:e1:fb:
         97:9b:88:e6:bd:26:92:9f:0b:49:f3:58:f3:04:5c:6d:eb:58:
         e8:57:18:3b:62:24:42:2d:ba:8a:bd:17:0d:5f:4c:6a:2d:78:
         c3:c3:7b:ad:9a:63:c3:0c:9a:19:4f:51:14:98:b9:74:0f:d2:
         46:78:a4:5d:39:7c:1a:13:cc:0f:2b:11:e3:3a:46:60:0d:f0:
         92:af:71:92:5b:d3:b9:29:0f:75:9c:67:52:4e:05:02:fc:26:
         b5:8c:3b:cf:38:52:aa:ab:f6:ac:f1:b8:bc:62:21:c4:3b:05:
         f0:4c:9a:6e:bb:f2:d5:6c:67:cd:47:fb:04:42:9a:29:26:dd:
         13:2e:80:79:85:0d:38:61:27:9c:52:d1:5a:02:e7:86:ec:6e:
         89:fd:a4:3c:4d:4d:8f:e6:89:47:96:8c:85:b8:a9:8c:36:33:
         e5:b7:92:75:c0:e6:74:67:eb:f3:8c:62:d6:7d:61:6c:41:45:
         cd:d0:28:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx
NTI1MkRCODUwHhcNMjYwNjEyMTk1ODE2WhcNMjYwNjE5MTk1ODE2WjAYMRYwFAYD
VQQDEw02YTJjNjRkOS1jNjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi1wPWRjTsfRRYgLtBTj8oD/Ew9uq+rsycgRg3+ZB+mNxQNvXAfpm3kJx70Fg
M/hCfDYcG56J/0YTZIJksl/RPy1GwH1zNhkHK0eBXcEp4vSP87SZysbl0Ik5V6S5
lq4nPtb4d6JIv8r1AI8ZNmcZ3qcbR/g9x0OUwalOKkXj4Bb5JvCxkM70axBW7vC+
nXj9N4XxbhPipCudhCzVAaAUOXEry/r4tA9NiyjTiciZgYAuHkseazz+b70Or8xp
XgUUUv6scwssLpqtCa+Dux4zIdoIC/nIXcqVj21/A5AaY2ZaqGQhcGL90w/mwZk9
bU31DMBXBtZ42vXDzlBl4KoStQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIdoCkGD
ZWTuXuRzb5qaXsiOWDQjMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC
QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy
NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4
amw4SEowa0FYSVFWSlMyNFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARYovLA+BQuxcrXXNrlGuz52z5mxYJj6SJTP27CSDu7r/MclmtvsEP8U97+bu
AP7haCgpGlncKli1Tiyzz3n9j8p6m96fwOH7l5uI5r0mkp8LSfNY8wRcbetY6FcY
O2IkQi26ir0XDV9Mai14w8N7rZpjwwyaGU9RFJi5dA/SRnikXTl8GhPMDysR4zpG
YA3wkq9xklvTuSkPdZxnUk4FAvwmtYw7zzhSqqv2rPG4vGIhxDsF8Eyabrvy1Wxn
zUf7BEKaKSbdEy6AeYUNOGEnnFLRWgLnhuxuif2kPE1Nj+aJR5aMhbipjDYz5beS
dcDmdGfr84xi1n1hbEFFzdAoig==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:12 2026 by rpki-client