Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
File:                     60tZM16DIXRfd2sCDOUkz3OZH-0.mft (raw, json)
Hash identifier:          dok/VQ3V7DUwfEmnGcq+tJNpptEMvT7fY0tPUwCcsMc=
Subject key identifier:   19:4F:9D:3F:9E:C5:1E:2F:86:AD:B2:05:9B:90:81:17:E0:91:BD:83
Authority key identifier: EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED
Certificate issuer:       /CN=A9142DC9/serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
Manifest number:          7D
Signing time:             Wed 15 Apr 2026 07:16:34 +0000
Manifest this update:     Wed 15 Apr 2026 07:16:34 +0000
Manifest next update:     Wed 22 Apr 2026 07:16:34 +0000
Files and hashes:         1: 60tZM16DIXRfd2sCDOUkz3OZH-0.crl (hash: zwHhpvJxO9iXlgf2hAF474vLYgTjNUKMxMQoOZHc/Xc=)
                          2: 2F14B290801B11F0989DCE76C4F9AE02.roa (hash: 2Sh4HNxYtB9dGVF8vJ1SzNebK3nTgLRc3WLrBkkeJGc=)
                          3: 3AC24DBE801B11F09DAF167CC4F9AE02.roa (hash: KgTcEBQwyeNNEcPVGV0LGEJQJnqAyFvRcFGWQSUD/3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl
                          rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142DC9, serialNumber=EB4B59335E8321745F776B020CE524CF73991FED
        Validity
            Not Before: Apr 15 07:16:34 2026 GMT
            Not After : Apr 22 07:16:34 2026 GMT
        Subject: CN=69df3b52-bf98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:2d:38:b2:04:82:f9:66:fa:76:2e:b1:42:
                    2e:80:9b:c4:32:cb:c7:e2:5e:2f:80:7a:d5:2a:16:
                    05:d7:05:21:ab:11:83:c5:ae:9c:5f:b0:c1:05:45:
                    63:8c:65:92:42:03:0d:1e:32:4b:ab:4e:28:f4:1f:
                    0a:b4:3a:43:b3:11:c4:b9:7f:e7:7c:8c:3d:0e:8e:
                    d1:eb:e7:c0:59:13:8c:a4:b3:9a:a8:7e:70:3b:1a:
                    4f:6e:82:01:63:d8:3f:61:c2:73:77:a8:86:3c:09:
                    c5:91:20:80:23:4f:cf:4c:55:a1:43:44:b5:ce:89:
                    54:2b:ec:3d:c7:78:b7:8e:c3:bf:44:84:44:2a:d3:
                    45:7e:b2:ba:82:f5:ed:33:2b:15:fa:49:5f:8a:1b:
                    55:ff:ba:fa:be:e4:91:be:05:a8:27:3d:45:9c:57:
                    8b:8d:7c:eb:05:49:13:88:e0:bd:a5:00:7e:3e:bb:
                    32:0e:18:c9:cd:83:5c:ba:e9:a8:a4:94:ea:64:0f:
                    73:0d:50:b4:78:e9:57:12:0f:60:f6:f9:1f:73:31:
                    a0:c8:74:87:6d:7a:ad:1f:ac:49:ba:6b:67:ba:a6:
                    72:b6:3a:64:22:a9:4c:62:3a:19:22:21:f7:92:4c:
                    fc:0b:be:d9:69:41:d6:72:f6:e5:e1:2a:b4:13:47:
                    d2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4F:9D:3F:9E:C5:1E:2F:86:AD:B2:05:9B:90:81:17:E0:91:BD:83
            X509v3 Authority Key Identifier:
                keyid:EB:4B:59:33:5E:83:21:74:5F:77:6B:02:0C:E5:24:CF:73:99:1F:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60tZM16DIXRfd2sCDOUkz3OZH-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DC9/7AF67C747C6111F091D34129C4F9AE02/60tZM16DIXRfd2sCDOUkz3OZH-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:07:b0:50:b1:10:c2:fb:48:f6:d8:1d:05:f8:b2:2b:94:3e:
         cf:3f:f5:e3:bf:af:70:3d:57:c2:21:10:d6:b7:0b:83:54:84:
         c1:5c:be:9c:37:21:f6:d5:f5:40:9c:b4:b6:46:69:b4:ba:81:
         d8:74:71:b1:1b:9d:34:c0:1e:82:9b:13:65:d0:d3:86:c1:d1:
         33:35:29:42:c0:c9:f7:8a:7f:f5:13:d6:ee:67:8d:0c:3d:b3:
         68:80:0c:42:8c:15:f0:e2:ff:c6:6e:00:bb:fc:04:8e:28:94:
         bd:1a:57:62:18:da:4f:c5:02:61:c8:a1:d6:e2:38:4d:65:17:
         d5:32:a1:52:a5:10:5f:bb:ef:d1:47:0e:bb:d2:9b:1e:76:44:
         42:38:81:34:de:de:6b:18:b0:27:18:c8:3c:ec:ab:b9:54:24:
         79:84:94:c9:57:51:e0:fe:0f:32:f9:fd:0d:32:b5:80:c3:ed:
         de:bb:bd:23:ab:2c:bc:79:7d:93:e8:19:b8:f6:b5:e5:c3:25:
         10:cd:01:bc:fb:df:92:82:9d:cb:e4:93:69:e2:10:0f:a4:37:
         f7:d2:9a:d6:c7:ff:64:e3:ae:6d:19:41:af:29:49:c4:f0:b9:
         40:a7:96:b7:8d:4e:91:d8:0e:57:a7:e9:72:0f:ba:4c:d2:11:
         5d:95:7a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:07:53 2026 by rpki-client