Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
File:                     iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json)
Hash identifier:          Cu8hZ7CMR/TK9neJpRCgeFRtldij/LSJCylldXkMviY=
Subject key identifier:   F9:BC:34:34:1A:5B:0A:E5:4A:75:8B:D0:61:0B:51:D4:5A:E3:72:4A
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Certificate issuer:       /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial:       08C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
Manifest number:          0897
Signing time:             Mon 20 Apr 2026 15:52:55 +0000
Manifest this update:     Mon 20 Apr 2026 15:52:54 +0000
Manifest next update:     Mon 27 Apr 2026 15:52:54 +0000
Files and hashes:         1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: KBZ5WPA8J1BpOn7wT2OnA2IbVxcEK2cLnGo8B7UAHaY=)
                          2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: gRWxoMUhWR3o1/E004zC+NaDH3WtqhH3fFB+vz1MWo8=)
                          3: 6205FF52113D11F1BF40122E203D8C67.roa (hash: YZA4lVzt1mgdsEJ++kdTfFeCS9rYdciYFwgd714ipgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 15:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244 (0x8c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
        Validity
            Not Before: Apr 20 15:52:54 2026 GMT
            Not After : Apr 27 15:52:54 2026 GMT
        Subject: CN=69e64bd7-0a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:d4:77:4a:38:93:87:27:8c:8d:db:37:bd:
                    da:77:ff:52:fa:ca:7f:a9:85:13:7e:fe:e5:2b:e9:
                    4a:e5:79:d0:7d:9a:da:fd:b9:a1:f5:e9:2d:ec:7d:
                    ee:dd:a1:01:6c:16:1e:b4:3c:38:17:4c:b3:45:cc:
                    ca:35:6d:9e:09:39:92:c3:88:ee:0f:5a:46:70:84:
                    77:e8:6c:06:92:84:59:18:e4:d3:62:e5:7f:0c:b2:
                    3a:93:aa:c1:36:d0:4b:dd:5f:ef:d6:b9:d2:c0:10:
                    46:21:03:87:6e:76:40:e6:a7:ab:f9:72:a9:49:c7:
                    26:ed:dd:44:a3:8a:ff:03:7a:12:07:72:84:b7:99:
                    bd:5a:22:40:05:9f:a4:27:9d:ca:24:37:0e:5d:80:
                    80:c0:3d:6b:f6:86:05:55:58:2a:65:52:45:4f:cc:
                    a6:2e:d3:ba:9f:de:97:92:b8:ed:42:57:85:df:f1:
                    dd:92:dd:92:91:16:37:77:a4:5d:40:05:6e:65:5d:
                    33:45:37:c3:03:c3:f6:0d:ef:95:f4:61:98:a4:72:
                    1e:52:fb:e7:18:1e:be:54:2e:f2:0c:a3:b3:89:6c:
                    53:81:7f:7c:42:09:30:0a:ba:72:de:28:20:eb:b0:
                    fe:2a:a7:71:73:2f:d0:b0:08:2c:c9:91:06:15:2f:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BC:34:34:1A:5B:0A:E5:4A:75:8B:D0:61:0B:51:D4:5A:E3:72:4A
            X509v3 Authority Key Identifier:
                keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:5f:e3:79:22:c2:c7:40:5e:7a:42:41:85:c6:19:32:e7:13:
         0b:b0:39:cb:5c:ef:52:61:aa:80:2c:62:bf:24:80:53:f3:8f:
         a5:ec:31:86:f5:13:e3:09:7d:70:47:2e:2a:e4:1b:7b:4f:70:
         86:26:1c:b2:b3:dd:af:74:fe:28:e8:a3:08:54:89:ce:3e:b1:
         a2:dd:58:a0:d7:69:e5:68:cb:f1:12:f1:18:ab:c8:1c:4b:db:
         84:db:5e:8c:8e:50:c5:42:a9:ff:a2:03:16:4c:05:36:49:2a:
         5c:6c:9f:53:52:24:6a:17:7d:28:73:7b:00:54:03:2b:09:80:
         10:48:d1:f7:46:3d:8c:0a:0e:34:9e:ac:ac:52:2c:d6:d0:5c:
         90:a6:d7:6b:28:5a:33:16:7e:56:17:03:02:43:a2:1e:d3:ef:
         60:72:95:f5:09:2e:0c:7b:08:c9:ce:e5:a2:46:ec:76:c3:20:
         a8:c5:7e:32:67:ca:37:60:77:44:3b:f2:fd:77:94:1c:93:6c:
         33:5e:65:7a:ab:c4:95:e3:f6:e7:85:e6:9d:87:23:fb:4c:2b:
         ee:a6:77:04:38:24:d0:b2:d1:ab:92:91:1e:f0:43:db:ff:73:
         46:04:7d:2f:01:23:7a:10:d2:ef:d7:c0:c0:80:ad:a1:35:d7:
         18:bd:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:44:46 2026 by rpki-client