Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
File:                     PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json)
Hash identifier:          41E83yS9GmSNSZbfEt5nbon243CkC85kRyZEdxcxMm4=
Subject key identifier:   00:21:60:43:3F:58:5E:F3:BC:F5:62:42:B1:89:92:89:B6:F0:0C:45
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Certificate issuer:       /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial:       0827
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
Manifest number:          080B
Signing time:             Thu 16 Apr 2026 21:06:10 +0000
Manifest this update:     Thu 16 Apr 2026 21:06:10 +0000
Manifest next update:     Thu 23 Apr 2026 21:06:10 +0000
Files and hashes:         1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: NEIRdGmdjTxayaGqnHUayox2gIcveBPlmM22VJYWqIg=)
                          2: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: EZxaNB8Cg1CajysGL+HI5uVaed24iixfpfYF8glfmow=)
                          3: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: uC8BC8FOfX07Bz7LL4CTmAUAe/spoS+Jn5Z7MYh3ovQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
                          rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087 (0x827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
        Validity
            Not Before: Apr 16 21:06:10 2026 GMT
            Not After : Apr 23 21:06:10 2026 GMT
        Subject: CN=69e14f42-93cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d0:91:0f:64:d0:d6:1a:f7:63:ba:3a:15:8a:
                    15:84:c4:43:08:ca:40:fe:09:c0:60:a9:e8:c2:bf:
                    c1:78:2d:17:e9:cd:95:46:55:b4:27:13:09:2a:dd:
                    01:04:3a:2d:33:14:2b:4e:be:43:92:7a:54:78:69:
                    a0:fc:7f:40:2f:78:1e:fb:b5:97:66:20:2d:c7:23:
                    ef:6f:fc:7b:8a:1c:c8:6f:c6:d8:41:a2:2b:5d:6d:
                    80:2c:a5:cd:47:64:8d:8d:fa:55:7b:ba:30:25:86:
                    c6:a2:8a:c7:62:6a:cb:0f:15:c1:7d:12:ce:f0:41:
                    0b:41:fb:4c:66:fd:ae:93:29:61:36:e2:a9:f3:78:
                    0d:30:c3:4c:18:e6:8b:6a:36:1b:cd:dc:41:c2:e3:
                    be:d0:7d:49:61:64:a2:07:39:1f:16:ca:8a:4c:25:
                    76:6e:71:cd:39:eb:ad:9c:3f:d2:32:a2:0e:7e:25:
                    01:be:e3:e7:e1:f4:8f:52:d1:12:4f:c3:e4:79:e5:
                    3b:35:4d:0d:2f:e1:c0:d6:5f:cf:f6:5f:22:43:86:
                    f1:17:43:7b:f5:26:6f:f6:ad:7c:19:8a:67:ae:2e:
                    3a:0a:ef:56:2d:e7:a1:2e:2c:6a:70:d9:55:ca:ed:
                    7f:26:e5:dd:4e:1a:50:ae:d7:0d:8d:8e:17:13:f0:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:21:60:43:3F:58:5E:F3:BC:F5:62:42:B1:89:92:89:B6:F0:0C:45
            X509v3 Authority Key Identifier:
                keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4c:08:85:52:4d:2c:52:75:0b:ce:2c:ee:87:a2:e6:25:e1:
         9d:a7:c0:9d:6b:77:09:3a:07:2b:93:56:74:49:c3:a6:e3:10:
         3e:79:3e:c1:fa:d9:7c:0e:55:9d:2e:3f:73:03:9b:d6:d9:72:
         01:a5:11:c8:4c:c4:e9:4e:bd:28:84:75:a1:6e:5b:b6:1f:36:
         ae:55:af:73:3f:c7:da:37:a4:87:0a:fb:7b:72:73:26:1e:7b:
         53:87:67:5e:d2:23:2a:7a:14:f9:6f:93:6b:79:c2:9e:73:95:
         61:f4:b3:fd:8a:c4:a0:3b:bc:d9:34:76:a1:fd:a2:f5:09:68:
         a1:e7:99:f0:d5:76:99:e2:91:34:b6:c3:2f:1f:a5:e4:d3:ab:
         91:3b:25:18:80:6a:38:2e:6d:2e:a5:0a:30:dc:e8:b0:82:5e:
         8f:b6:e9:22:e4:0a:4c:35:ef:4f:28:94:c5:f0:a0:7d:d7:7d:
         bd:e5:28:41:52:6c:ba:f2:19:fb:d2:10:15:41:af:b8:39:28:
         98:05:67:d9:89:d4:05:f3:18:b3:56:e9:78:ee:dc:76:35:0c:
         69:e9:2f:82:89:05:59:5a:ef:72:4f:e5:d6:c1:3d:ca:c1:cd:
         9d:9b:17:c8:70:c1:6d:13:77:77:e1:7c:9a:90:1a:aa:28:ee:
         67:b8:cd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:17 2026 by rpki-client