Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
File:                     ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json)
Hash identifier:          8viXoA551w4JJZ+1xHVJ3KXRBu669ctrodA4/EpLW3s=
Subject key identifier:   B6:8C:87:6F:E4:69:F2:3B:F3:0F:BE:DB:94:E3:B1:F6:C6:B2:ED:7B
Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65
Certificate issuer:       /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
Manifest number:          F9
Signing time:             Wed 15 Apr 2026 05:51:24 +0000
Manifest this update:     Wed 15 Apr 2026 05:51:23 +0000
Manifest next update:     Wed 22 Apr 2026 05:51:23 +0000
Files and hashes:         1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: NsIjGLNRvwGU2ceyKWq/VgAp6LNb4LOSz/FHlkZuAQs=)
                          2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: gk55dQC8eTI12/UHwkyE0xAYw726BD8sevAqReEeCXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl
                          rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 05:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665
        Validity
            Not Before: Apr 15 05:51:23 2026 GMT
            Not After : Apr 22 05:51:23 2026 GMT
        Subject: CN=69df275c-bc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:9d:cc:84:5e:a5:99:e7:d6:4a:25:79:52:
                    16:bc:9e:6d:c8:4e:9b:f0:4c:8d:f8:fc:30:41:a0:
                    5c:0c:9e:f1:f2:bc:fb:00:50:07:dc:b3:1f:27:20:
                    76:22:8d:c8:96:60:f2:b0:f6:a8:98:f2:1c:67:28:
                    72:48:e0:8b:83:44:9d:3b:e1:0c:bb:25:cf:7a:ab:
                    9b:f3:cc:9e:42:91:46:c3:0b:57:0e:32:1c:56:4c:
                    37:8b:51:85:d4:09:a0:de:64:ed:18:85:6c:f8:14:
                    03:e7:8d:0c:9c:d7:3d:98:7c:69:bb:96:f3:cc:c0:
                    5c:36:e1:56:a0:eb:60:f5:c1:13:7d:a5:8b:55:00:
                    ae:8e:20:a2:e4:e4:7c:b6:e2:05:53:d7:35:f2:9c:
                    1d:52:e3:e8:4a:85:0c:a6:d9:be:0c:f0:3c:38:d7:
                    a5:4d:8c:51:68:8c:4e:df:9e:cb:0e:6a:46:27:88:
                    35:67:42:cc:ce:25:c8:fc:8c:be:f6:98:e2:65:b9:
                    79:5a:b6:4d:56:20:60:16:d9:da:98:77:1c:21:3d:
                    90:63:7b:85:ef:ee:c3:0d:eb:45:9a:e5:a9:6b:6d:
                    16:cc:b9:39:06:7b:a5:f6:fe:b1:05:b3:8a:3c:1b:
                    4d:25:71:5f:28:83:b3:cb:c5:72:12:cb:78:2a:93:
                    45:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8C:87:6F:E4:69:F2:3B:F3:0F:BE:DB:94:E3:B1:F6:C6:B2:ED:7B
            X509v3 Authority Key Identifier:
                keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:85:c2:d1:d5:de:96:5b:43:d0:bb:70:a2:58:b5:cf:25:88:
         a2:b7:80:11:c1:92:da:63:64:30:53:5c:45:0b:94:65:e7:17:
         6a:02:d7:99:38:97:26:b8:4e:7f:de:c6:b4:c8:83:f1:aa:fb:
         d5:7e:83:bd:5b:2f:ff:52:06:0b:e2:e3:2f:8c:ec:ed:95:e7:
         d5:5e:77:f1:31:15:f9:1e:ca:95:54:60:be:88:cc:d6:97:68:
         a8:4c:db:19:b8:70:34:2a:7a:2f:c0:95:cf:01:2c:a4:16:6e:
         f3:0b:3d:6e:49:eb:b5:80:e1:d0:bb:9e:41:26:a2:fb:04:4c:
         b5:b9:42:33:f4:3c:8d:c0:0c:36:de:7b:8a:a8:79:c6:3b:da:
         f0:d7:3f:ce:7a:11:37:ca:f3:da:11:47:dc:39:65:3c:95:b7:
         cb:36:e6:e8:84:4d:2c:8f:be:3d:70:0b:be:06:56:d2:8b:55:
         69:68:79:51:30:96:25:83:87:1d:ab:61:5f:0d:6b:3d:d5:ee:
         45:d3:48:d4:4f:22:1d:07:4f:ce:66:70:9c:f2:64:fc:6d:9d:
         7b:30:d4:78:9d:4e:96:24:a1:47:88:7b:b2:98:14:b6:e9:3a:
         3b:db:8d:66:33:a8:43:d7:17:a7:04:5d:b6:52:21:f6:8b:f8:
         15:7e:40:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:24:05 2026 by rpki-client