Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft
File:                     9-izu07xkrh2NgHbMj9N4oMaEBo.mft (raw, json)
Hash identifier:          /rywea4zHtniz+HFp7aiZXos3IYgjPibXRyO575DOPY=
Subject key identifier:   A3:F6:11:34:DD:9A:7E:09:CF:63:08:4A:F2:19:39:9C:83:FD:A6:BF
Authority key identifier: F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A
Certificate issuer:       /CN=A914B6D8/serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A
Certificate serial:       0D18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft
Manifest number:          0D0A
Signing time:             Sat 18 Apr 2026 18:01:24 +0000
Manifest this update:     Sat 18 Apr 2026 18:01:23 +0000
Manifest next update:     Sat 25 Apr 2026 18:01:23 +0000
Files and hashes:         1: 9-izu07xkrh2NgHbMj9N4oMaEBo.crl (hash: QVDgvq13GMxvKkBeXigopo7X34yngEEgrTzsBllzV0c=)
                          2: 576819C8FFC811E9B70CA176C4F9AE02.roa (hash: Amw7E1YxZBlEfV1zp0e7MD9tZSbZD1DON7nJYMgbP5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl
                          rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 18:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3352 (0xd18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B6D8, serialNumber=F7E8B3BB4EF192B8763601DB323F4DE2831A101A
        Validity
            Not Before: Apr 18 18:01:23 2026 GMT
            Not After : Apr 25 18:01:23 2026 GMT
        Subject: CN=69e3c6f4-1962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:63:04:0e:e7:03:19:e9:cc:10:7e:a9:58:
                    da:cb:31:1f:91:4d:b2:e3:82:ed:9f:f1:0c:94:f9:
                    8b:82:f8:b7:d8:d6:5e:62:07:7f:c6:b3:1d:e6:3c:
                    8e:c4:46:28:0d:b9:67:0d:9f:29:5d:70:fd:b8:03:
                    0a:e6:90:52:36:c8:99:47:59:a6:ab:d3:76:02:db:
                    a7:b0:c0:9b:cb:1c:91:d1:9c:a3:32:8b:5a:09:d2:
                    00:16:ad:d0:ba:21:4b:99:00:7b:6a:bd:ff:5b:69:
                    09:06:d3:2c:1b:8c:4d:2e:e7:de:a2:cc:c5:d8:0b:
                    4d:29:9f:71:f4:8c:a2:d9:f4:df:52:77:3b:b6:a1:
                    8d:f8:af:0e:32:56:35:23:ae:14:a5:44:28:9f:ec:
                    a1:1a:7a:9b:91:c2:3c:de:68:a0:9b:77:27:ea:55:
                    a6:02:aa:15:53:19:a7:44:4d:82:9f:97:f6:85:bc:
                    1b:ab:ed:4e:e7:c3:26:fb:3b:c0:7c:65:3f:db:55:
                    5e:1e:35:32:ef:03:8f:36:5f:bf:84:5e:63:d5:51:
                    d5:c8:56:da:62:82:b8:5a:da:2a:de:01:0e:bb:21:
                    ca:c7:40:a0:4f:fd:b0:4c:1b:41:86:06:5d:9d:76:
                    81:0f:aa:46:59:7b:d9:3f:1b:4a:aa:11:5a:26:8e:
                    e3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F6:11:34:DD:9A:7E:09:CF:63:08:4A:F2:19:39:9C:83:FD:A6:BF
            X509v3 Authority Key Identifier:
                keyid:F7:E8:B3:BB:4E:F1:92:B8:76:36:01:DB:32:3F:4D:E2:83:1A:10:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-izu07xkrh2NgHbMj9N4oMaEBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/16333DAEFFBC11E9ABBB1451C4F9AE02/9-izu07xkrh2NgHbMj9N4oMaEBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0b:ab:e2:de:82:9d:e2:1d:25:43:1a:db:87:a8:51:be:c9:
         8e:b4:82:07:67:80:0d:f0:b2:97:e7:61:b4:32:5b:77:42:ef:
         91:60:e0:2e:0d:27:83:97:85:3d:83:34:ce:ac:62:78:72:fc:
         ba:2c:aa:56:fd:17:ed:d3:01:ee:59:81:61:c9:8e:2f:f7:5f:
         0a:ea:4a:37:49:17:e9:43:ac:4d:e5:75:06:77:19:7f:38:69:
         6c:d9:26:a0:c9:29:d5:12:6a:65:4d:4b:13:a4:be:94:3c:2d:
         a8:66:a7:a1:fd:b6:5c:63:75:f1:76:51:4c:b2:a4:5a:85:89:
         72:d0:21:23:d8:96:0e:99:f4:1f:3f:dd:3e:b1:7e:dc:d5:36:
         1e:09:bc:d2:f8:75:5e:51:94:a9:ab:c0:1e:f0:26:ae:3f:65:
         ac:28:c4:6c:7d:44:21:63:82:91:da:55:29:84:c4:80:a5:32:
         87:b4:eb:2e:be:96:16:18:dc:87:51:f3:0b:9f:65:24:af:2f:
         82:d9:e4:cb:aa:63:05:ea:14:06:fb:39:e4:00:42:4e:74:2d:
         d9:21:73:3c:3d:6f:1c:97:73:4d:9e:fe:a3:60:95:73:a4:52:
         4b:b5:cd:af:b3:8f:3a:32:d7:4e:84:06:be:80:6d:e7:c8:52:
         3e:37:31:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:26:38 2026 by rpki-client