Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
File:                     Z467ovhI48jl8HJ0kAXIQVJS24U.mft (raw, json)
Hash identifier:          3PY3kkCT15mgYlobKKmYywvVtqQkLbEUNnwzgexvWBA=
Subject key identifier:   BF:DC:6C:BA:A1:EB:19:85:5E:6D:88:7F:C9:32:6E:F0:16:51:EC:88
Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85
Certificate issuer:       /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85
Certificate serial:       099C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
Manifest number:          0990
Signing time:             Thu 26 Mar 2026 19:54:43 +0000
Manifest this update:     Thu 26 Mar 2026 19:54:42 +0000
Manifest next update:     Thu 02 Apr 2026 19:54:42 +0000
Files and hashes:         1: Z467ovhI48jl8HJ0kAXIQVJS24U.crl (hash: LaIspCa3i+o5RPn1u8mFTANQ36mwFErtLpKNNRm4N+Y=)
                          2: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (hash: bnQhAcJYz0rCPLum5ciaF2yyWJMv/4ICnov/yZzyOZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl
                          rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 19:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2460 (0x99c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114F46, serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85
        Validity
            Not Before: Mar 26 19:54:42 2026 GMT
            Not After : Apr  2 19:54:42 2026 GMT
        Subject: CN=69c58f03-a68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9a:2d:41:0a:19:e6:fb:7a:95:58:d3:2c:10:
                    aa:69:58:4b:71:78:5e:55:bd:4d:dc:5a:89:fb:8a:
                    38:45:3b:3a:bd:29:57:40:38:33:c0:da:3a:a4:d4:
                    07:63:85:3b:8f:45:e0:77:0c:77:44:8c:f1:c9:6d:
                    3b:0e:82:b5:1f:93:fc:fa:d3:85:aa:4d:1b:a6:e6:
                    34:a0:d8:75:1c:64:56:f2:02:d3:39:1b:f0:c8:c5:
                    62:75:ac:9b:79:f2:7d:cb:ec:d7:2d:93:5d:40:64:
                    61:15:a7:75:a3:b0:3e:44:a2:cb:9f:4d:4c:7c:cd:
                    58:01:f3:6a:28:a0:fd:43:73:39:8b:76:bd:23:b5:
                    09:b2:3b:ff:c1:5a:19:be:29:b1:a9:d1:99:84:4f:
                    c4:e0:79:f2:2c:18:05:b4:8e:9a:ae:32:72:00:43:
                    a2:aa:c3:ad:88:fb:70:7b:9e:07:a3:1a:65:dc:16:
                    76:ed:2b:77:d7:51:1e:ef:92:81:61:c4:b4:91:39:
                    82:7e:d3:6a:3a:c8:bc:92:ff:44:e9:9a:c1:cb:92:
                    13:8c:0f:f8:31:b5:db:77:b2:1c:63:69:fd:91:7a:
                    b1:4e:bb:10:af:05:b9:e2:5a:76:9e:1e:50:53:8f:
                    44:4c:34:ba:89:a4:36:e2:1b:a1:67:85:e7:7d:56:
                    cc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DC:6C:BA:A1:EB:19:85:5E:6D:88:7F:C9:32:6E:F0:16:51:EC:88
            X509v3 Authority Key Identifier:
                keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:56:8a:08:aa:1d:00:f0:33:bf:67:f3:d9:e3:2a:fa:0a:cc:
         89:c0:bb:34:3a:67:41:67:f8:3c:7f:5b:5a:6e:ef:0b:04:cc:
         43:77:81:91:c3:65:8d:0d:43:fb:2d:1d:74:8a:b9:56:0b:fd:
         eb:8a:1e:18:0b:0f:31:b6:ef:08:1e:a9:cd:03:45:3c:3b:25:
         3c:0f:97:63:1d:f3:b3:3b:49:9a:71:39:70:ea:a0:65:55:3b:
         28:cf:31:0c:93:98:88:4e:9c:ad:73:9b:26:b1:40:05:f4:8a:
         af:98:7c:e1:d3:50:b8:46:4d:37:9f:05:35:9a:ce:4f:76:9c:
         a2:56:3d:34:a4:80:3c:96:3c:cb:74:cb:40:21:63:db:a7:fe:
         89:42:18:06:d6:4e:73:ff:2d:63:60:c2:a4:d2:15:8a:9a:ba:
         1c:e5:79:c0:3c:1b:ea:03:78:be:56:b0:13:fb:4a:d8:13:47:
         d4:eb:eb:43:ca:dd:5f:9f:dc:fd:dc:c9:d6:ce:01:81:bb:44:
         d8:ad:9d:56:e0:42:b3:63:db:e1:54:a9:4f:e1:61:03:20:1d:
         49:42:10:da:93:5f:de:3e:e8:4e:38:cf:b4:e0:63:e3:cf:11:
         a6:3a:be:7b:d0:b8:3e:e9:d9:0c:7b:93:79:95:e2:cc:92:79:
         a5:73:ec:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:02 2026 by rpki-client