Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
File:                     Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json)
Hash identifier:          p6KMsc/igdoi31J1bHT0hfS1U8xWmotANbzW7ggKjY8=
Subject key identifier:   2B:77:30:FE:34:13:37:FD:D3:C7:10:29:02:30:74:2C:01:DB:80:23
Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85
Certificate issuer:       /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85
Certificate serial:       09E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
Manifest number:          09DA
Signing time:             Tue 18 Aug 2026 20:11:16 +0000
Manifest this update:     Tue 18 Aug 2026 20:11:15 +0000
Manifest next update:     Tue 25 Aug 2026 20:11:15 +0000
Files and hashes:         1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: 07hCDxgZbQKKogW9k/Cpw1uD4yZ7zuSr6roEtdbvxmU=)
                          2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: bnQhAcJYz0rCPLum5ciaF2yyWJMv/4ICnov/yZzyOZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl
                          rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2534 (0x9e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85
        Validity
            Not Before: Aug 18 20:11:15 2026 GMT
            Not After : Aug 25 20:11:15 2026 GMT
        Subject: CN=6a84bc63-5af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:df:be:06:5e:a6:db:26:1b:29:5d:63:5e:08:
                    82:7a:25:d4:c6:0d:36:c2:4f:e9:0b:f8:6f:cd:8c:
                    ff:4b:7e:d7:ab:8f:86:a5:2f:d2:4b:c2:c1:e8:d1:
                    27:81:fc:94:fa:f8:40:18:9d:01:7e:a1:53:7c:a6:
                    2c:77:c7:b4:8e:89:4f:f1:09:b6:03:15:ed:6d:4c:
                    d0:12:2e:7f:17:ea:dd:45:59:92:36:88:47:3b:be:
                    b9:48:68:ec:0e:c7:a6:6b:4e:1a:f3:27:e0:57:1f:
                    72:f6:09:6a:d4:4e:2e:d4:e9:c8:35:3b:7c:5f:01:
                    48:bd:31:98:5c:51:39:7c:84:3c:08:c2:8c:e1:bc:
                    42:28:4e:50:2f:48:19:94:10:92:a8:99:93:02:49:
                    09:f9:e3:b8:08:ad:1b:c8:b5:28:a7:20:7f:a1:5f:
                    fb:4f:fe:64:27:8b:b4:e9:9b:7c:1c:a2:c0:b2:d1:
                    f8:c2:8c:77:f4:11:49:32:9e:13:f8:59:fa:34:32:
                    14:53:a5:85:e0:1d:1e:41:7f:ce:93:08:6c:32:3f:
                    82:aa:5b:b5:64:31:05:72:ea:44:eb:b4:16:5b:45:
                    13:06:5c:ba:95:90:e5:d0:68:9f:ce:53:ab:15:02:
                    17:c9:5d:d8:54:c7:37:f5:5c:33:85:e2:5d:f6:82:
                    80:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:77:30:FE:34:13:37:FD:D3:C7:10:29:02:30:74:2C:01:DB:80:23
            X509v3 Authority Key Identifier:
                keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:30:a7:9b:ad:52:b5:f0:e0:2d:9a:a8:d3:ab:e4:d7:ea:63:
         c4:35:03:41:93:85:72:e0:63:b9:3c:9a:1e:69:b9:41:53:bb:
         16:98:3a:cd:48:b3:3a:e3:d9:61:9e:68:33:02:c7:7c:17:a5:
         26:59:b7:60:66:58:ce:19:5e:1f:59:b2:45:03:fb:3c:0a:c9:
         cb:ef:7d:26:6d:d0:93:0e:c5:3e:99:e6:23:1b:9c:d4:d0:9c:
         84:8e:ab:3b:d8:66:6b:2b:a3:c5:e4:0d:d1:b9:3d:a8:35:1e:
         42:2a:cf:45:46:8c:46:ed:03:3a:d2:bc:bd:b6:c0:02:be:38:
         c8:78:4a:5b:a2:12:20:79:21:bb:d2:2c:b6:f9:4e:16:b7:bf:
         29:a2:fb:d1:88:77:c7:4c:98:de:a2:a0:c4:e8:ac:f6:e7:87:
         b9:e0:7d:46:95:a8:da:f4:2d:30:c0:5c:d2:4f:a5:3a:a6:cb:
         d6:f3:a8:d3:2a:0b:17:65:55:9f:ce:f2:fc:04:db:bd:dc:7f:
         99:7a:01:32:c7:15:50:39:19:3c:a7:a1:c0:32:1e:94:de:6e:
         09:3b:78:c0:e8:fd:2e:c8:6e:ed:94:0c:2c:cb:17:c9:56:d3:
         0b:e8:4b:13:2e:ea:41:e3:69:75:49:f1:ad:80:37:e7:23:b2:
         47:d2:23:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:57 2026 by rpki-client