Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
File:                     ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json)
Hash identifier:          NDaTmKYNh6qr8di6JbM0xCgJxalRTy1TaU4Wk03UByw=
Subject key identifier:   CA:54:7B:37:5A:11:07:F7:E6:31:F1:52:1B:E1:89:49:42:7C:0A:C9
Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD
Certificate issuer:       /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
Certificate serial:       0914
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
Manifest number:          090D
Signing time:             Thu 16 Apr 2026 20:11:51 +0000
Manifest this update:     Thu 16 Apr 2026 20:11:51 +0000
Manifest next update:     Thu 23 Apr 2026 20:11:51 +0000
Files and hashes:         1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: 1PqDNSWSecBlWl/tRNs62f4ww70oau3dAAyt3y9njwQ=)
                          2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: okmXmHYulLyxDZHeOTwAQb95eohRY4pGXYv8eeAWmU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl
                          rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2324 (0x914)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD
        Validity
            Not Before: Apr 16 20:11:51 2026 GMT
            Not After : Apr 23 20:11:51 2026 GMT
        Subject: CN=69e14287-760a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:cb:9b:6d:27:23:9d:67:ab:3c:66:28:c8:
                    da:66:f0:51:5a:32:d2:31:4f:05:ec:5b:60:1a:72:
                    52:f7:4e:8d:14:03:7f:ee:19:8a:8a:50:14:68:23:
                    e4:17:3c:6a:91:dc:79:7d:40:34:bc:de:67:4a:40:
                    0a:19:4a:ed:df:39:a8:fc:90:34:14:42:04:92:f8:
                    86:a9:af:15:54:ed:bb:7a:67:28:f8:48:25:ef:4b:
                    95:56:19:90:ec:eb:6d:9d:a5:a3:3d:e2:2b:65:11:
                    07:e9:74:f0:4e:a9:7c:f6:61:b8:79:c8:6e:83:88:
                    4b:15:a5:5e:3d:f0:3a:4b:f5:3d:0a:e5:a4:bb:3f:
                    91:61:28:97:35:7c:88:27:de:0b:ff:66:17:2e:83:
                    0e:f9:a2:23:2b:8d:44:56:e8:fe:a1:48:0f:7b:dd:
                    77:53:63:68:0b:9b:98:02:3c:98:c0:1f:43:94:05:
                    0d:6f:61:1e:6c:f4:69:6a:7d:c0:84:67:c0:f7:07:
                    bb:3d:86:d0:c9:41:2c:dc:bf:70:e9:a5:40:51:dc:
                    0f:f2:14:e4:a7:89:2d:53:2a:b8:46:2f:bb:cb:cb:
                    e4:bd:d4:5f:57:3e:28:d7:8a:90:4a:97:fd:d0:c8:
                    1c:eb:bd:74:f2:b3:4d:18:86:0a:e8:ea:1a:6a:b8:
                    fc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:54:7B:37:5A:11:07:F7:E6:31:F1:52:1B:E1:89:49:42:7C:0A:C9
            X509v3 Authority Key Identifier:
                keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:51:fb:08:6c:fd:ff:3c:b6:e2:eb:90:15:f8:97:d2:0b:51:
         d5:a6:c6:d0:25:b2:49:07:4e:26:97:af:ab:c3:f7:3d:26:3e:
         24:a5:06:98:73:90:6f:5f:1a:8a:45:b5:43:fe:d3:ea:a6:34:
         8c:71:e3:17:5d:04:b1:08:37:15:31:43:96:6f:6e:8e:bd:1e:
         57:3f:64:95:24:74:7f:e0:8f:dc:1e:cd:6b:7e:f9:30:eb:05:
         b8:bc:c5:0d:31:9d:55:30:ac:7a:79:1f:f1:21:31:57:05:96:
         8d:25:a9:c8:a0:4d:d0:6b:67:05:14:a6:f4:ac:28:97:bd:6f:
         b7:3b:eb:18:ef:19:0d:28:e3:f3:c2:1b:40:70:bd:4d:50:27:
         0d:3c:12:33:95:03:4e:e0:03:35:31:e5:dd:45:78:78:69:a6:
         72:75:85:5b:66:6b:b2:c4:3e:cf:1b:2b:95:c8:84:2a:e6:11:
         d2:a9:c1:ac:81:43:1d:86:7e:36:9b:b6:75:78:08:6e:c9:1a:
         07:c6:ea:ea:14:89:56:c4:44:56:52:f6:70:68:8d:16:ad:54:
         17:bc:a1:25:57:1d:34:ea:16:df:88:88:b9:db:78:99:38:ce:
         e4:02:a2:9a:33:bb:d7:c2:e1:fa:36:b4:a6:7f:7f:c3:83:c8:
         8a:43:40:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:53 2026 by rpki-client