Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
File:                     RzKsKGdyTfzuirIikX9q8r0Ojz8.mft (raw, json)
Hash identifier:          FUMfLn1Fs967sj2A4lAQcIslHVwFY0ild2kzRJXVrag=
Subject key identifier:   74:DD:C8:88:8E:50:11:8F:4B:62:EE:F8:F5:1A:BC:3C:52:BE:91:A9
Authority key identifier: 47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
Certificate issuer:       /CN=A9130915/serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
Manifest number:          65
Signing time:             Sun 05 Apr 2026 07:18:45 +0000
Manifest this update:     Sun 05 Apr 2026 07:18:45 +0000
Manifest next update:     Sun 12 Apr 2026 07:18:45 +0000
Files and hashes:         1: RzKsKGdyTfzuirIikX9q8r0Ojz8.crl (hash: lY18B7zTXhlYLTAyW2kYC6XTn7Y3agUFSeWZXBhNV4c=)
                          2: 80981C2A985211F0B8F76E80C4F9AE02.roa (hash: KZeGyK+XEJU2VjuaLIn3E2fbp7OCAvLZENE4Plyufvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl
                          rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130915, serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
        Validity
            Not Before: Apr  5 07:18:45 2026 GMT
            Not After : Apr 12 07:18:45 2026 GMT
        Subject: CN=69d20cd5-8671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ed:96:1a:bd:b1:04:77:13:d3:66:61:0f:9d:
                    46:dd:44:3a:c4:41:a1:e9:0a:1e:06:2b:92:e6:6d:
                    0b:01:a8:72:08:df:2e:13:d6:0f:78:57:54:7f:4f:
                    79:c4:7f:a7:52:b4:cb:55:2e:46:ea:d3:f4:93:81:
                    ca:0f:01:f2:11:25:ae:35:ac:6e:21:b9:d8:0d:2d:
                    0a:70:9c:af:37:9e:dd:33:73:6a:11:e2:7b:c6:d7:
                    07:be:d4:d2:d9:e8:57:f6:cb:b0:85:2c:75:a8:62:
                    e5:57:fb:aa:69:48:17:9f:8b:c6:5b:fd:ef:b4:14:
                    27:91:6b:31:67:0d:21:41:53:82:18:75:bd:45:92:
                    21:59:d3:1f:01:74:c6:12:94:7a:a5:3e:b8:6a:21:
                    23:1a:16:15:fd:9f:96:dc:1e:69:81:49:48:4e:27:
                    14:34:6b:cd:e2:bb:62:ec:2f:d9:f9:72:41:9e:ce:
                    60:60:e0:11:c2:fe:86:a3:4c:c6:33:00:fc:95:aa:
                    d0:1d:2f:de:b1:0a:3b:5c:2c:4a:9e:5d:66:cc:29:
                    a7:d1:ab:aa:e6:80:3c:81:f2:23:55:98:e2:c1:ce:
                    20:7d:e3:28:f4:1d:f0:26:30:9a:2a:6c:1b:03:9d:
                    e2:15:33:c6:26:04:55:ab:e2:13:aa:7c:8d:7b:05:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DD:C8:88:8E:50:11:8F:4B:62:EE:F8:F5:1A:BC:3C:52:BE:91:A9
            X509v3 Authority Key Identifier:
                keyid:47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:50:b2:ff:c7:16:83:5f:93:56:4f:88:23:50:df:86:34:2b:
         20:84:c1:f7:4c:3c:a6:24:66:a5:8b:76:4f:7a:44:71:f9:e9:
         2a:07:1d:3c:d2:7d:94:d4:75:bb:55:88:18:ff:94:28:04:d4:
         a5:57:b9:d9:aa:a9:ee:92:49:8c:f4:89:ac:61:c7:c9:04:05:
         08:15:f6:70:d2:36:1f:3b:db:cd:67:fd:30:16:78:0c:66:7b:
         d4:79:0b:e4:06:ae:15:2c:cc:11:a9:05:24:49:ee:ac:24:33:
         87:f3:be:11:1e:d1:7a:06:d3:a0:f0:e7:ab:31:fc:de:a8:e9:
         f0:df:16:de:02:e4:84:21:1f:34:69:a4:cd:02:9b:71:1c:55:
         a2:aa:27:b5:a2:c4:8a:fd:c6:a2:7d:cd:e1:5f:eb:61:63:e2:
         ab:88:d6:52:2c:9a:3d:98:1c:e8:a2:21:86:ae:c6:d4:11:2b:
         5c:c7:47:6f:bd:94:96:8f:71:66:8e:fc:01:39:36:65:85:db:
         d4:9a:23:d2:b4:db:0e:f4:29:13:be:15:de:09:5e:fe:5e:ca:
         72:b7:9b:4c:9d:dd:84:a8:1b:6c:89:98:7d:16:91:35:77:5f:
         d4:7b:13:53:2a:4c:fe:7c:03:78:95:29:17:c1:5e:14:8d:87:
         c4:5a:07:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:24 2026 by rpki-client