Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
File:                     m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft (raw, json)
Hash identifier:          TsjzotbC0Q012uQv67e0H6QB/EsxWNwYcV65CrlZ60I=
Subject key identifier:   B1:23:6B:F3:D4:E3:59:7E:B0:2A:E4:21:71:41:D2:72:88:F1:B5:E1
Authority key identifier: 9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB
Certificate issuer:       /CN=A9169DB2/serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB
Certificate serial:       0964
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
Manifest number:          0953
Signing time:             Sat 04 Apr 2026 19:56:28 +0000
Manifest this update:     Sat 04 Apr 2026 19:56:28 +0000
Manifest next update:     Sat 11 Apr 2026 19:56:28 +0000
Files and hashes:         1: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl (hash: d7IBMQ0MzT9wdK8rR3X2Cc9/EMPMbNxNscLSw/GAe2c=)
                          2: 46106B5077E811F0B822833AC4F9AE02.roa (hash: hVi8R5MoEeImI8jjWziXAy2bRDHXtAtcy1qMeWpfzVo=)
                          3: C6B310B077E711F0B31CEB36C4F9AE02.roa (hash: NwQGIFAATHh4qnUFk70n9aQ78O4/bONv+lkYJMLHi/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl
                          rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2404 (0x964)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169DB2, serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB
        Validity
            Not Before: Apr  4 19:56:28 2026 GMT
            Not After : Apr 11 19:56:28 2026 GMT
        Subject: CN=69d16cec-32ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:75:ab:95:d5:06:8d:46:ce:c7:90:27:64:f2:
                    43:41:d5:a1:87:90:0f:ab:d3:28:56:ee:8c:af:08:
                    4b:07:55:e2:24:2f:28:f3:23:db:67:b2:ef:64:7e:
                    c7:7d:1d:48:89:07:de:87:c6:4a:3a:50:dc:e0:62:
                    5c:e8:32:44:42:12:13:e6:2f:72:6e:42:33:f1:dd:
                    57:bc:e6:64:a7:d2:79:f6:ba:65:f3:b7:27:9f:4d:
                    22:2b:b7:de:7d:09:be:bd:26:5e:c2:3e:b8:8e:7e:
                    04:8a:af:d9:48:52:94:51:2a:b6:9b:77:db:e3:8f:
                    54:bb:2c:5f:c4:10:d2:18:9a:ed:ca:fa:db:5a:c6:
                    ed:fd:61:e5:52:86:60:0d:63:be:d1:45:eb:dc:2a:
                    c2:7a:4d:da:4c:8d:bb:ea:5c:c7:32:ff:54:44:7e:
                    ed:1f:8f:13:73:04:fa:56:97:30:83:ba:95:6f:be:
                    0c:26:13:92:6f:d1:17:1f:4b:30:53:15:42:44:05:
                    7c:d4:bd:05:7e:58:56:d4:13:6d:73:a7:6c:6a:97:
                    84:ba:4c:8a:50:93:10:5c:e8:4f:bd:c5:f3:e1:84:
                    58:cd:cc:34:0a:65:d4:4f:52:48:56:fd:c2:f4:b0:
                    9c:9d:a5:9a:28:42:25:47:0c:11:70:75:1f:1c:33:
                    8e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:23:6B:F3:D4:E3:59:7E:B0:2A:E4:21:71:41:D2:72:88:F1:B5:E1
            X509v3 Authority Key Identifier:
                keyid:9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:95:c4:24:b0:58:4a:01:70:92:f8:d3:91:d6:c9:3b:91:93:
         5d:55:99:ea:72:cd:50:3a:af:ff:46:95:31:95:f0:8d:ce:83:
         a9:bd:d3:52:e6:d8:f2:e4:b3:11:62:0b:f4:84:e1:e4:c1:53:
         7f:ab:4c:22:f8:a5:98:75:7a:fb:d0:97:51:c5:d3:7e:b8:a0:
         9c:de:34:b4:95:74:29:28:b6:4e:f2:9e:70:56:aa:46:e1:14:
         bd:6c:44:22:dc:27:dc:90:8d:d3:63:4b:21:a1:73:00:a0:96:
         47:01:db:da:b4:87:c9:52:d6:2c:06:d1:21:b8:11:62:2c:f2:
         fb:32:f9:cc:9f:df:9f:f0:63:8c:16:01:85:96:ae:dd:05:ff:
         27:5c:b9:db:25:19:14:87:9c:b3:09:08:8c:52:af:a1:20:53:
         78:9f:e0:44:8b:7d:2e:05:13:4c:1b:19:8c:68:74:12:42:dc:
         36:b1:b8:4c:16:2a:b6:01:3e:51:91:02:3b:db:1d:7c:2a:85:
         fe:fe:22:a5:ae:1d:ce:8b:9a:c2:09:d0:01:72:fc:d8:6e:4d:
         16:5f:cd:53:dd:67:9f:6d:f6:aa:19:e8:c2:a7:0a:75:40:c6:
         70:bc:95:59:40:37:7a:b0:3a:49:68:d2:18:09:0c:56:7a:cf:
         5b:ac:c6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:47:28 2026 by rpki-client