Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
File:                     9MxDBOF5Dgj17JKahzciadCPtoE.mft (raw, json)
Hash identifier:          2uvl9k605KRRqEYUubdWBOK0gYybyXUvzd1AFvhVKM0=
Subject key identifier:   78:95:82:A6:33:6F:4D:F7:88:60:F2:74:11:10:72:96:58:E8:6E:E0
Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
Certificate issuer:       /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Certificate serial:       04A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
Manifest number:          0499
Signing time:             Thu 16 Apr 2026 23:52:50 +0000
Manifest this update:     Thu 16 Apr 2026 23:52:50 +0000
Manifest next update:     Thu 23 Apr 2026 23:52:50 +0000
Files and hashes:         1: 9MxDBOF5Dgj17JKahzciadCPtoE.crl (hash: HbvesX2HvoIFdScS6W8/BvKugQbIjkaNYAq6oJ+gKvM=)
                          2: 0E7858548CBB11ECB0842F23C4F9AE02.roa (hash: 2rQJWPdUgZ0hNF0HMVFMTi4ImpvJKJ7bVW+COUiFLto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
                          rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167BCA, serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
        Validity
            Not Before: Apr 16 23:52:50 2026 GMT
            Not After : Apr 23 23:52:50 2026 GMT
        Subject: CN=69e17652-4299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:99:ff:7c:7f:39:27:68:c1:99:03:48:0e:
                    7c:84:6e:54:67:3a:6e:f9:d9:22:ab:75:f6:dc:b3:
                    95:1e:2a:4d:e7:97:5d:2f:8e:e8:9e:9c:2e:10:2b:
                    55:cd:82:53:c2:95:16:e3:aa:3d:ab:89:e7:f2:9c:
                    12:96:e8:99:12:27:b7:45:1b:a0:57:56:3f:67:37:
                    4e:26:e2:11:ab:40:d7:c9:f7:f0:6d:6f:28:b8:eb:
                    19:11:06:da:36:c0:b1:4e:1e:2c:2c:eb:4a:c8:1f:
                    ba:dd:79:16:30:b3:07:14:08:d2:e0:73:29:d8:9e:
                    e2:15:1d:76:9f:90:5e:86:a7:3b:fd:1e:04:a4:c8:
                    98:b6:da:1c:00:1e:40:5f:8d:2b:84:62:f3:a1:d3:
                    ac:dd:14:1b:b2:fa:85:10:90:62:03:06:5a:01:6f:
                    61:ba:ad:89:51:7b:31:71:e8:ce:c5:d7:6d:c2:2d:
                    be:10:aa:c6:b8:76:85:8c:14:06:02:c1:f6:6b:15:
                    aa:a5:ee:63:c2:c1:28:de:55:f9:b1:de:84:a9:78:
                    3f:31:9b:8d:96:8f:b1:93:b9:8b:cd:f0:90:94:08:
                    b3:a5:28:83:33:98:ea:77:64:ad:b1:79:92:90:b2:
                    21:d9:1e:1a:93:84:52:48:04:08:0f:82:a6:48:03:
                    0b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:95:82:A6:33:6F:4D:F7:88:60:F2:74:11:10:72:96:58:E8:6E:E0
            X509v3 Authority Key Identifier:
                keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:10:2e:da:db:9c:67:16:44:5b:28:b5:69:20:c5:89:54:f7:
         f0:b6:42:46:03:ff:3d:76:26:40:b4:77:19:13:0b:ac:f5:38:
         44:e8:77:00:80:87:30:22:67:cb:fe:59:29:59:ec:ed:f1:ee:
         df:9a:8a:21:68:35:ca:90:7c:65:60:df:48:d6:3e:8d:a8:db:
         d7:88:b6:90:c6:7d:8b:3a:cb:47:41:7d:e0:1a:05:ca:e0:0a:
         ae:43:d1:75:3f:a6:b3:aa:94:ea:49:36:d0:58:00:d0:0c:06:
         7a:cd:36:fa:77:54:35:07:9f:f0:27:a4:3e:ab:19:a3:ac:79:
         ae:bf:c6:b3:e4:e7:31:e3:a1:b2:58:8f:11:3a:31:ff:40:e2:
         2a:b7:2b:09:98:26:84:58:0e:67:98:95:3b:7a:c4:5a:4b:8f:
         f7:8a:a7:72:e1:0e:12:9a:df:ae:04:87:62:a6:90:28:b2:51:
         5d:bc:85:3b:88:89:71:0b:11:d9:2c:4e:35:5b:f0:77:10:61:
         ba:12:f1:56:ac:83:0f:0f:c6:8e:8c:0a:28:8d:26:5e:2b:66:
         db:fe:f4:94:1c:0f:24:fd:f7:d5:6e:37:19:99:3d:1b:4e:40:
         df:d2:f9:3e:66:c2:77:d3:7d:a3:ae:20:1e:ad:b0:19:81:31:
         e8:06:45:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdCQ0ExMTAvBgNVBAUTKEY0Q0M0MzA0RTE3OTBFMDhGNUVDOTI5QTg3MzcyMjY5
RDA4RkI2ODEwHhcNMjYwNDE2MjM1MjUwWhcNMjYwNDIzMjM1MjUwWjAYMRYwFAYD
VQQDEw02OWUxNzY1Mi00Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmWWZ/3x/OSdowZkDSA58hG5UZzpu+dkiq3X23LOVHipN55ddL47onpwuECtV
zYJTwpUW46o9q4nn8pwSluiZEie3RRugV1Y/ZzdOJuIRq0DXyffwbW8ouOsZEQba
NsCxTh4sLOtKyB+63XkWMLMHFAjS4HMp2J7iFR12n5Behqc7/R4EpMiYttocAB5A
X40rhGLzodOs3RQbsvqFEJBiAwZaAW9huq2JUXsxcejOxddtwi2+EKrGuHaFjBQG
AsH2axWqpe5jwsEo3lX5sd6EqXg/MZuNlo+xk7mLzfCQlAizpSiDM5jqd2StsXmS
kLIh2R4ak4RSSAQID4KmSAMLNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHiVgqYz
b033iGDydBEQcpZY6G7gMB8GA1UdIwQYMBaAFPTMQwTheQ4I9eySmoc3ImnQj7aB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0JDQS82MkJDRDVERTdB
OUIxMUVDOENDMjc0MkJDNEY5QUUwMi85TXhEQk9GNURnajE3SkthaHpjaWFkQ1B0
b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlNeERCT0Y1RGdqMTdKS2FoemNpYWRDUHRvRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0JDQS82MkJDRDVERTdBOUIxMUVDOENDMjc0MkJDNEY5QUUwMi85TXhEQk9GNURn
ajE3SkthaHpjaWFkQ1B0b0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaxAu2tucZxZEWyi1aSDFiVT38LZCRgP/PXYmQLR3GRMLrPU4ROh3AICHMCJn
y/5ZKVns7fHu35qKIWg1ypB8ZWDfSNY+jajb14i2kMZ9izrLR0F94BoFyuAKrkPR
dT+ms6qU6kk20FgA0AwGes02+ndUNQef8CekPqsZo6x5rr/Gs+TnMeOhsliPETox
/0DiKrcrCZgmhFgOZ5iVO3rEWkuP94qncuEOEprfrgSHYqaQKLJRXbyFO4iJcQsR
2SxONVvwdxBhuhLxVqyDDw/GjowKKI0mXitm2/70lBwPJP331W43GZk9G05A39L5
PmbCd9N9o64gHq2wGYEx6AZFDg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:12 2026 by rpki-client