Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
File:                     Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json)
Hash identifier:          4XjmoxdbpysVx9qATxuwozA1GJlFvZkIwudaz+IBGVk=
Subject key identifier:   37:A6:30:39:F9:FE:D1:25:E8:45:A9:B2:D4:64:E9:4A:15:D8:EB:DB
Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E
Certificate issuer:       /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E
Certificate serial:       24EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
Manifest number:          24CD
Signing time:             Thu 16 Apr 2026 15:44:49 +0000
Manifest this update:     Thu 16 Apr 2026 15:44:49 +0000
Manifest next update:     Thu 23 Apr 2026 15:44:49 +0000
Files and hashes:         1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: 93ecvpdlpN8O6eiTsN1sFAIW3b3kTzTRXJ4mccFf6Hs=)
                          2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: U8OxEGjdn2Oyo4nAXHMe2uZlkKT+HU2vh2Rj/xEEZGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl
                          rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9455 (0x24ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E
        Validity
            Not Before: Apr 16 15:44:49 2026 GMT
            Not After : Apr 23 15:44:49 2026 GMT
        Subject: CN=69e103f1-7613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:b9:7d:49:37:46:05:aa:8a:61:56:2a:02:
                    83:1f:e2:e3:71:f9:c2:cd:42:4a:03:2f:7c:3a:9d:
                    fb:20:ba:48:9c:31:91:cd:54:ee:05:bd:5e:a5:98:
                    13:d0:44:7c:7b:5b:9f:e1:6a:ed:a2:a9:ab:a4:2a:
                    65:e5:77:f9:58:88:e9:eb:4e:a3:ce:41:c2:75:de:
                    23:9c:69:af:64:9f:3f:3e:2f:8c:7c:4d:9c:59:e1:
                    a6:12:8e:70:5f:b9:24:65:be:33:ff:c7:9a:06:a2:
                    cf:d7:e7:c7:b6:d4:6b:fa:b9:f7:f3:9d:cb:a0:f8:
                    97:63:da:c2:1f:3a:9c:ed:86:37:67:67:8d:55:44:
                    8c:cd:16:8b:49:55:8d:8b:3b:a2:03:c5:34:a8:45:
                    80:a8:fe:cb:35:b3:02:4a:1d:48:e2:ee:91:d0:5b:
                    96:3c:a9:02:8c:0a:76:50:58:15:f9:00:0b:96:73:
                    5c:f4:ca:e1:1e:e4:ee:ca:57:18:ba:44:d9:5a:a8:
                    25:b3:3a:9a:4d:c3:56:32:cd:5a:b7:0d:e4:d3:35:
                    57:ea:4e:a9:40:c3:4d:96:ac:d1:b3:a9:b8:3d:1a:
                    07:e5:78:74:86:5c:10:7c:e4:0e:8a:e4:ea:a0:f1:
                    f0:53:0b:71:ea:51:4b:ae:65:aa:2f:ec:ac:24:6e:
                    42:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A6:30:39:F9:FE:D1:25:E8:45:A9:B2:D4:64:E9:4A:15:D8:EB:DB
            X509v3 Authority Key Identifier:
                keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d9:dd:08:5d:91:6f:d4:dc:3b:43:ae:74:38:9f:d4:0d:c1:
         f8:f0:e5:9f:4e:90:b4:cf:85:c1:a6:90:21:63:96:37:bd:6c:
         cf:53:a5:52:68:6e:21:15:1e:50:c8:25:14:5e:3f:34:cd:08:
         e6:fc:01:e9:ef:b1:ec:58:bd:cf:53:ff:25:3c:1b:ab:ce:d2:
         21:35:ef:7a:87:7a:0e:f4:c8:a7:51:c8:0c:0b:b6:98:ea:3c:
         e0:e2:cb:1c:8a:b9:c2:1c:42:e2:2c:28:50:9b:7e:55:6f:11:
         59:c1:96:ce:b1:b7:2a:20:97:18:05:8f:ac:4d:2e:8e:98:c4:
         1b:c1:df:d6:e8:49:bc:8b:12:85:28:3f:65:90:d8:80:f3:e6:
         2b:a6:f8:1c:39:35:69:5f:3b:3c:d3:a3:8f:a0:ea:53:6a:94:
         ec:85:d5:44:ed:d4:36:b9:64:83:85:35:90:4e:95:eb:81:30:
         5d:b2:88:b8:d3:d5:ef:9a:af:8e:9d:0f:34:61:ea:d6:55:d4:
         04:23:6a:71:3d:fb:a0:18:c4:b4:28:ee:cf:11:61:50:50:9c:
         86:1c:ce:a9:7f:c1:52:54:7f:f9:e2:00:c7:d6:4c:b1:ea:4b:
         2c:07:22:f2:38:16:0e:53:95:31:82:69:cb:5f:60:05:26:58:
         7e:a1:7d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:07:41 2026 by rpki-client