Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft
File:                     Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json)
Hash identifier:          IH9dEqJVHj9PsuTHnDX9oG7LVGY2/o5X59vC9x6HYps=
Subject key identifier:   92:75:87:D2:3F:55:50:0B:E9:05:CD:A9:6B:BF:42:F4:81:5B:6B:84
Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A
Certificate issuer:       /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A
Certificate serial:       01F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft
Manifest number:          01EB
Signing time:             Sun 05 Apr 2026 02:53:56 +0000
Manifest this update:     Sun 05 Apr 2026 02:53:55 +0000
Manifest next update:     Sun 12 Apr 2026 02:53:55 +0000
Files and hashes:         1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: xJtHzFLULNcnAfFQhrPZNOewtmks++iI6wJejO28pFA=)
                          2: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: AF0W4FDa8CoBiD6z3FUESJd4F8PISKrGbqKu0L1rR38=)
                          3: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: opDVDCbsBQzHpTdEZkXg8pK+yXFCw2wR9EtK3a8UOv0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl
                          rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121995, serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A
        Validity
            Not Before: Apr  5 02:53:55 2026 GMT
            Not After : Apr 12 02:53:55 2026 GMT
        Subject: CN=69d1cec4-e538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:2f:c0:8d:e7:30:94:76:81:43:b4:28:05:
                    c2:84:a2:a9:40:bd:0c:24:48:1c:26:4b:45:7f:de:
                    d2:d0:ed:ce:2b:38:7c:fc:05:54:32:14:81:0d:d7:
                    70:e7:88:36:26:4a:a8:fe:ef:fd:d1:6c:2b:7f:15:
                    15:40:f9:a0:43:3f:24:09:4d:bb:59:a9:c2:2b:e9:
                    78:f6:30:56:fb:c3:98:4f:71:6b:71:02:d6:72:bb:
                    1b:aa:1c:86:04:58:d7:1d:cf:24:aa:6f:4b:cf:ed:
                    6b:6d:f7:28:52:79:27:ad:1b:0c:74:72:b8:98:8c:
                    3d:af:42:9d:ff:45:cd:25:1e:65:15:37:d8:ef:14:
                    69:11:ce:cd:d8:37:f9:0c:33:be:7a:fa:6a:90:55:
                    6c:fe:cd:38:77:3a:8f:6e:0d:82:1b:96:e9:88:a5:
                    d2:68:f9:4b:77:bd:42:dc:7b:39:5d:0d:94:8f:76:
                    92:a5:96:ed:cf:82:c1:79:d0:7c:9c:0b:9e:23:32:
                    89:34:3b:f3:a0:67:1a:4c:2d:4a:ee:30:0a:b6:01:
                    dd:0b:89:8d:95:f0:3e:e3:6a:2b:87:40:50:fb:af:
                    a6:3a:32:b5:a3:d6:29:e7:b0:ad:2a:89:a0:d6:dc:
                    2f:7c:7f:4d:cf:3c:0d:75:36:ac:2d:ef:ba:95:15:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:75:87:D2:3F:55:50:0B:E9:05:CD:A9:6B:BF:42:F4:81:5B:6B:84
            X509v3 Authority Key Identifier:
                keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:50:d7:9e:6c:12:93:58:6c:e1:b9:ac:70:06:9e:ac:74:c5:
         28:9a:c6:af:e4:cd:a2:23:07:94:5c:56:f9:01:81:a8:28:40:
         2b:c8:da:e2:27:4d:d5:68:0b:25:66:c6:dd:f6:d4:c5:5f:b5:
         fc:92:c6:18:94:9a:61:78:40:be:c4:1e:4b:92:72:8b:88:69:
         86:1e:63:3d:f3:65:0c:e8:8f:c6:1d:a3:8f:f4:90:59:a4:5e:
         e9:31:78:1f:39:57:50:00:41:dd:c8:44:f7:0a:82:c8:43:16:
         f5:85:b3:42:e4:61:c5:cc:ca:51:25:ed:89:94:2d:c1:e1:5b:
         7a:6f:f2:6b:eb:42:1e:e8:a2:63:61:b7:6e:53:bc:30:b9:ee:
         74:83:56:96:a5:2e:52:49:a3:97:67:ab:7a:5a:c5:50:a7:f7:
         f9:2c:cf:ea:55:35:31:2c:5c:a1:4c:51:1a:82:d7:23:f1:dd:
         dc:4b:1a:8e:50:ad:b3:eb:4d:44:85:91:8e:9e:4f:9e:f1:ac:
         37:ed:57:8b:73:4d:9f:49:44:ee:40:80:6e:ae:c5:ac:6d:56:
         ef:08:6f:aa:e6:83:ba:73:5c:43:9d:38:93:53:f4:a6:39:18:
         8c:87:3d:32:22:7b:6b:25:3f:79:7b:c3:fd:4f:0a:b6:31:6b:
         13:b4:76:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:29 2026 by rpki-client