Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
File:                     z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft (raw, json)
Hash identifier:          Xq9xOIn67FiRphWmJvSK3a3Z4mX4YwdjS0Gpb3bWRvc=
Subject key identifier:   F5:0A:18:DA:1F:77:86:AD:E9:4D:75:BA:74:E0:60:00:AF:3B:6F:B2
Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A
Certificate issuer:       /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
Manifest number:          013A
Signing time:             Sat 13 Jun 2026 05:33:43 +0000
Manifest this update:     Sat 13 Jun 2026 05:33:43 +0000
Manifest next update:     Sat 20 Jun 2026 05:33:43 +0000
Files and hashes:         1: z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl (hash: qkt4/rwnBCAk5V/o8XsUY8HkejiyxoFe4eJtMJq2Uuk=)
                          2: D7A7F3FEE18711F0A8B43181426F56BC.roa (hash: vh4+TvOiKZauBrK2eZX3+JUCcmsgQa2Igdr6PGVraWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl
                          rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149C62, serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A
        Validity
            Not Before: Jun 13 05:33:43 2026 GMT
            Not After : Jun 20 05:33:43 2026 GMT
        Subject: CN=6a2cebb7-0381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:05:f6:ec:1f:1d:40:28:76:e9:a9:6b:b6:62:
                    7d:83:29:b4:4a:7a:f2:d4:4e:34:29:c3:7b:6c:7c:
                    db:c2:79:5c:97:fd:74:9a:e0:ef:f2:da:89:2b:c5:
                    bb:e6:bb:ea:c8:dc:e2:bc:3b:54:a4:39:c3:64:a9:
                    24:dd:16:72:40:d6:c0:e3:39:ed:a8:c9:9e:5f:ba:
                    4c:dc:c4:56:bd:bd:4d:61:17:d9:4b:4e:67:0a:91:
                    09:2f:e8:f3:21:00:61:ae:35:96:c3:71:e6:8f:b8:
                    07:ed:d9:07:85:d8:bc:4d:b3:ef:cf:29:e9:94:06:
                    5b:22:57:5c:55:3b:fd:ff:ea:cd:9d:b3:1b:8b:72:
                    0e:87:b8:5c:9f:84:39:eb:e1:d9:56:51:0c:3e:e3:
                    5a:0a:bc:9d:5b:a2:d0:56:10:1d:8d:70:6a:64:fd:
                    74:67:82:32:88:67:05:ed:82:ca:84:8a:82:78:f9:
                    97:55:22:bd:be:c0:8e:09:01:e8:85:12:9e:b1:5d:
                    1b:5a:50:84:e0:f5:ad:4f:0a:54:5d:3d:d2:89:e5:
                    da:cf:84:f8:64:06:c5:44:67:a5:84:6d:81:f4:4b:
                    0b:53:fc:ba:5c:c0:6c:ae:f7:1e:18:77:bf:f0:af:
                    44:9d:8f:5f:56:7e:a2:93:1c:b5:54:82:8d:33:50:
                    4f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0A:18:DA:1F:77:86:AD:E9:4D:75:BA:74:E0:60:00:AF:3B:6F:B2
            X509v3 Authority Key Identifier:
                keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:bd:66:a6:fd:77:03:e5:c2:80:4a:a0:b7:d7:8f:6e:26:a2:
         85:30:19:da:ed:2d:b1:ab:dd:32:cf:62:92:05:ff:29:41:91:
         fb:37:b8:15:21:71:54:0b:54:b4:93:40:a4:f8:4c:ee:1b:38:
         ab:a2:58:cf:75:ee:bc:4b:15:7d:ec:74:70:45:95:07:7a:6c:
         90:dc:92:55:c5:c7:6b:87:b4:2a:36:11:c1:3f:75:fe:7a:a6:
         17:42:e8:bc:ed:09:9b:34:c3:88:f3:75:27:67:0b:75:cb:13:
         8b:5f:29:21:2f:fb:48:3b:22:a4:10:33:d5:58:26:d4:19:ee:
         6a:06:00:53:70:d1:1f:f6:b6:13:0e:dc:44:92:e0:57:ba:c1:
         15:74:c8:8e:b5:0b:d9:4c:97:e2:1f:cb:1f:52:c8:cb:18:f3:
         2b:7b:82:d6:58:45:b8:a3:e2:07:42:ce:49:c8:0d:0b:06:27:
         b8:bf:75:7a:ff:75:fc:9b:24:a4:08:0b:4a:97:de:3a:f3:65:
         54:40:97:c1:26:06:ab:e2:d5:f2:95:54:71:0c:43:95:43:5d:
         19:ca:15:07:2e:4b:49:f1:e2:5e:6d:25:16:11:04:9a:a9:a8:
         4b:4e:9a:81:bc:7d:2d:a3:96:f0:49:74:63:af:25:3d:77:f4:
         bb:a8:eb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:33 2026 by rpki-client