Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
File:                     Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json)
Hash identifier:          FjA2r6JuA2EPCtpVvO4FYuNA4kg8wCvsnwG9Fil/pXw=
Subject key identifier:   47:B6:76:81:7D:A1:36:9B:C4:D0:38:0C:25:4A:6D:EF:1B:8A:90:36
Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85
Certificate issuer:       /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85
Certificate serial:       09C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
Manifest number:          09BD
Signing time:             Mon 22 Jun 2026 19:57:38 +0000
Manifest this update:     Mon 22 Jun 2026 19:57:38 +0000
Manifest next update:     Mon 29 Jun 2026 19:57:38 +0000
Files and hashes:         1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: b6Mjqu8Rolsu7a0RN6T+VosTgp/RoHLGzkJFZ1agEy8=)
                          2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: bnQhAcJYz0rCPLum5ciaF2yyWJMv/4ICnov/yZzyOZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl
                          rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 19:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2505 (0x9c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85
        Validity
            Not Before: Jun 22 19:57:38 2026 GMT
            Not After : Jun 29 19:57:38 2026 GMT
        Subject: CN=6a3993b2-53e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:ae:03:db:9f:6f:1f:e4:e1:ff:5c:13:73:
                    35:15:9d:74:b4:50:60:5f:9f:bc:7e:1d:cd:91:73:
                    d9:a7:d8:eb:87:5d:2a:bb:b7:16:98:b9:c2:d6:c5:
                    e6:af:23:dd:7b:ec:10:d2:b6:90:a0:b0:9b:f7:e6:
                    32:dc:0c:5f:26:10:0d:b1:30:30:ad:79:8a:02:c1:
                    4d:fc:f4:c0:7b:a3:b1:2f:9c:77:48:54:fe:9a:fd:
                    6f:fa:0f:de:27:b4:cd:40:6d:7e:23:fe:17:1e:f3:
                    47:a3:a0:a2:de:ee:df:51:9c:60:b3:ca:8c:f3:ab:
                    77:cf:cc:a7:5f:f9:0c:91:a0:a1:50:89:2f:5f:d3:
                    8c:35:06:67:b3:7b:ef:7e:8b:54:ee:63:8a:f2:34:
                    0e:ee:ed:a3:8e:18:cb:fc:e5:6e:95:4a:8f:76:a7:
                    d1:ef:20:98:98:5c:31:8c:23:d6:45:1c:c4:fd:86:
                    f6:d3:83:c0:e6:e6:66:0b:2b:6f:6c:db:6b:74:62:
                    90:73:28:fd:49:c1:d4:04:22:55:7b:4f:17:e7:a5:
                    92:a7:f2:37:63:d5:62:a1:9b:66:cf:da:6a:32:25:
                    be:0d:a4:41:c3:9c:bb:7e:c8:47:21:86:31:09:f9:
                    e2:ca:3a:02:e9:b1:74:c1:a9:e1:b4:97:cc:bc:79:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B6:76:81:7D:A1:36:9B:C4:D0:38:0C:25:4A:6D:EF:1B:8A:90:36
            X509v3 Authority Key Identifier:
                keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:c9:e8:82:7b:45:2f:1a:22:8c:64:ab:08:90:bc:aa:94:76:
         a5:14:d3:98:53:1f:1f:b3:08:20:09:b1:47:3c:91:bc:c4:43:
         36:37:19:13:a0:e5:07:ad:3a:c9:be:02:44:5c:2f:c3:24:f8:
         d5:41:8b:36:0a:0d:9c:a4:37:c9:19:8f:d8:31:4c:09:7b:3a:
         4c:c0:08:e0:fc:ab:87:9a:0e:37:62:0f:f6:c8:fc:02:87:fa:
         8a:7f:a7:a7:72:0b:ba:0b:e9:b4:69:1f:db:fb:bc:60:1e:69:
         f0:af:c8:aa:5f:21:15:1e:8b:ba:75:55:5f:04:fe:2a:0e:25:
         7e:69:fd:90:ee:c1:08:4e:9f:27:95:e6:2f:7d:cc:2d:0d:ba:
         0e:81:fb:fd:97:61:13:ac:a4:a1:16:78:e6:3e:2c:b3:8c:c0:
         6b:82:53:ce:62:a1:ae:3c:89:58:75:3f:dd:17:9f:c4:c2:1e:
         51:40:77:0a:87:97:2f:a2:46:71:64:54:5a:f4:ef:ca:d4:78:
         aa:90:3e:a7:85:37:95:61:a8:0f:14:50:77:ef:6c:60:e6:d4:
         97:14:0f:68:47:f1:60:1b:ef:c6:44:87:97:7f:3e:e2:73:ac:
         55:ab:68:5e:04:59:3d:a9:c4:fb:63:10:7e:31:71:bf:b1:51:
         41:1b:2f:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx
NTI1MkRCODUwHhcNMjYwNjIyMTk1NzM4WhcNMjYwNjI5MTk1NzM4WjAYMRYwFAYD
VQQDEw02YTM5OTNiMi01M2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0TWuA9ufbx/k4f9cE3M1FZ10tFBgX5+8fh3NkXPZp9jrh10qu7cWmLnC1sXm
ryPde+wQ0raQoLCb9+Yy3AxfJhANsTAwrXmKAsFN/PTAe6OxL5x3SFT+mv1v+g/e
J7TNQG1+I/4XHvNHo6Ci3u7fUZxgs8qM86t3z8ynX/kMkaChUIkvX9OMNQZns3vv
fotU7mOK8jQO7u2jjhjL/OVulUqPdqfR7yCYmFwxjCPWRRzE/Yb204PA5uZmCytv
bNtrdGKQcyj9ScHUBCJVe08X56WSp/I3Y9VioZtmz9pqMiW+DaRBw5y7fshHIYYx
CfniyjoC6bF0wanhtJfMvHnA4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEe2doF9
oTabxNA4DCVKbe8bipA2MB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC
QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy
NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NEY0Ni9FRkE2OTUxMEFCQTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4
amw4SEowa0FYSVFWSlMyNFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvMnogntFLxoijGSrCJC8qpR2pRTTmFMfH7MIIAmxRzyRvMRDNjcZE6DlB606
yb4CRFwvwyT41UGLNgoNnKQ3yRmP2DFMCXs6TMAI4Pyrh5oON2IP9sj8Aof6in+n
p3ILugvptGkf2/u8YB5p8K/Iql8hFR6LunVVXwT+Kg4lfmn9kO7BCE6fJ5XmL33M
LQ26DoH7/ZdhE6ykoRZ45j4ss4zAa4JTzmKhrjyJWHU/3RefxMIeUUB3CoeXL6JG
cWRUWvTvytR4qpA+p4U3lWGoDxRQd+9sYObUlxQPaEfxYBvvxkSHl38+4nOsVato
XgRZPanE+2MQfjFxv7FRQRsvGA==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:48 2026 by rpki-client