Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
File:                     PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json)
Hash identifier:          pqV5ibsE4LJl1RIaigoyl6Ddjm6TX9Z48Wc3e0pDWNM=
Subject key identifier:   30:AD:DB:C6:12:4E:EA:E3:79:9C:51:98:C0:6F:BE:05:C1:46:E9:BF
Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E
Certificate issuer:       /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
Certificate serial:       0857
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
Manifest number:          084F
Signing time:             Thu 16 Apr 2026 20:42:59 +0000
Manifest this update:     Thu 16 Apr 2026 20:42:59 +0000
Manifest next update:     Thu 23 Apr 2026 20:42:59 +0000
Files and hashes:         1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: o67raE3ABvL6Fq8JGZGSKxbOMTSRnrdua6SIBj4rkZ0=)
                          2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: ttDGmX8Wz8ITP3sU4vGhTPNCup0+jAVIOIBp2YmhCbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl
                          rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2135 (0x857)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
        Validity
            Not Before: Apr 16 20:42:59 2026 GMT
            Not After : Apr 23 20:42:59 2026 GMT
        Subject: CN=69e149d3-b781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:b1:e5:f3:4a:a3:b0:ae:0e:47:15:c3:01:
                    11:56:ca:c3:f4:25:4a:d4:96:3a:0d:01:55:ab:3d:
                    bc:37:86:bc:1b:28:4a:88:ae:0d:85:db:ec:e6:76:
                    ac:58:4f:df:b7:79:d8:86:0f:14:80:c1:75:09:89:
                    29:af:43:17:eb:43:d6:8b:68:29:32:61:bf:5f:c1:
                    77:6f:97:ef:d1:81:c8:5c:38:86:ab:45:43:1b:42:
                    bc:de:0a:9b:53:01:21:8e:81:6d:15:1b:d1:50:64:
                    da:62:5d:e6:dd:f8:5b:37:d7:08:0f:f0:72:78:e7:
                    bd:d9:6d:4c:28:b0:25:1c:f8:f6:ff:83:43:75:05:
                    9e:e7:5e:90:da:db:6f:07:a5:be:3b:70:95:0e:78:
                    11:48:d5:3f:bd:cf:06:56:7f:e6:e6:f3:e8:96:2c:
                    dd:0b:61:7b:21:4a:90:e9:d0:c7:87:9d:01:c4:2b:
                    d2:89:48:50:c7:6d:a1:c1:1b:ce:17:21:51:78:e0:
                    02:42:1b:ab:5a:54:fa:fb:41:dd:2a:78:12:13:4e:
                    14:c5:ce:82:c1:64:fb:fd:a1:0c:13:2b:b2:05:c7:
                    1e:f7:9f:bd:3c:88:7d:3f:cf:f4:a1:36:75:20:23:
                    2f:27:1f:57:75:e2:b6:32:da:81:59:f3:e3:57:59:
                    7b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AD:DB:C6:12:4E:EA:E3:79:9C:51:98:C0:6F:BE:05:C1:46:E9:BF
            X509v3 Authority Key Identifier:
                keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:0d:28:25:96:d2:03:e7:2c:d1:25:a6:40:dd:22:52:12:16:
         2b:8f:94:69:cf:09:9b:3e:c3:1d:11:0d:66:c5:1c:60:dd:fe:
         1f:86:49:1e:c3:c7:50:f9:a0:30:80:3a:50:d0:57:ff:96:a2:
         60:04:c5:02:b1:36:ab:1c:e4:bc:5f:19:a7:82:4c:7d:36:db:
         fc:d6:2d:b4:71:04:ce:87:88:b7:65:e1:2c:f7:e2:db:b8:67:
         3a:ea:39:80:89:5f:59:f2:71:43:c8:1d:ee:98:8a:11:2f:14:
         90:5f:c1:14:04:5f:64:10:56:74:4b:d9:a4:cd:a5:0d:00:a6:
         59:d3:f0:a0:97:1b:47:67:95:4d:c8:5c:03:5c:c7:31:89:c2:
         08:6d:11:65:67:e5:32:3e:17:38:aa:b7:1c:09:44:cf:77:f6:
         a3:a8:3b:21:11:ec:30:73:b0:b9:90:6f:0e:7e:e5:a1:33:8f:
         c4:75:df:61:a7:c4:7e:a1:8d:26:dd:27:ab:56:85:ec:2c:26:
         53:63:fb:f2:49:81:e9:da:83:ca:cf:0c:16:f4:fb:cd:38:98:
         79:99:f5:ed:03:af:7d:33:fb:3a:e4:a1:eb:d5:11:b1:ac:64:
         d9:98:8e:70:ca:27:26:ba:3d:10:0f:4d:a2:0f:e9:18:2e:77:
         51:f0:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:15 2026 by rpki-client