Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
File:                     S9XCMYZ-JzlRVcAceEizsByGBvI.mft (raw, json)
Hash identifier:          T1yScTGOtjU+QIlqO+g+ea5C5z6VKIfbQHwVlgvyr2c=
Subject key identifier:   6A:C1:3E:A1:11:E8:B4:04:42:92:78:14:E4:A6:F1:A3:13:26:CD:D2
Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2
Certificate issuer:       /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
Certificate serial:       047B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
Manifest number:          0473
Signing time:             Tue 24 Mar 2026 23:47:02 +0000
Manifest this update:     Tue 24 Mar 2026 23:47:02 +0000
Manifest next update:     Tue 31 Mar 2026 23:47:02 +0000
Files and hashes:         1: S9XCMYZ-JzlRVcAceEizsByGBvI.crl (hash: Jaf+xMNJEeAJri6a71KTjY61KgLCrdZmk+iqubdmeUw=)
                          2: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (hash: 8e29YKH9OC4F44m19NG7u8QMBSSDUe5BupTd2yMwpBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl
                          rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1147 (0x47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BBE1, serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2
        Validity
            Not Before: Mar 24 23:47:02 2026 GMT
            Not After : Mar 31 23:47:02 2026 GMT
        Subject: CN=69c32276-4bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:f2:d5:af:ad:e7:d5:4d:26:42:41:a9:b8:
                    b5:a3:41:04:9e:0e:33:82:24:b2:ae:9a:3a:0a:35:
                    20:e7:aa:17:1d:13:bb:7b:bc:0e:49:15:95:62:57:
                    85:3f:a5:19:bf:bf:c0:57:0e:c3:85:a5:14:b8:8f:
                    a6:95:24:57:b6:a0:b6:83:d0:66:e3:68:8d:a8:94:
                    af:49:0c:32:05:e0:df:2c:04:cd:7c:d8:ac:a9:2e:
                    ef:fb:7e:0f:19:fb:35:99:b3:30:d9:e6:d7:48:cb:
                    be:86:e7:55:b1:80:16:24:b4:33:8d:87:30:d9:85:
                    80:b5:8a:5c:52:20:6f:cb:9c:35:60:b0:3c:44:4c:
                    a7:64:ef:d1:71:5d:c8:5e:50:d5:41:aa:e8:d1:ae:
                    15:c1:10:f7:79:64:e2:09:96:b2:2d:71:cb:f4:5f:
                    aa:d3:51:25:03:79:1e:39:2c:c7:79:f2:40:cb:7d:
                    f4:87:a8:45:8d:81:ed:bc:51:ed:fc:17:38:1c:16:
                    6b:f8:1f:b1:e3:17:d8:47:7b:7c:f5:21:6f:8d:95:
                    43:63:39:78:81:a9:b3:dc:7a:5a:eb:12:17:02:67:
                    4c:a7:ff:64:57:ca:d2:20:74:3d:a3:0e:d3:9d:69:
                    bf:60:41:4a:3a:b7:d2:34:76:0c:4a:60:50:b5:74:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C1:3E:A1:11:E8:B4:04:42:92:78:14:E4:A6:F1:A3:13:26:CD:D2
            X509v3 Authority Key Identifier:
                keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5f:6b:84:2c:9b:f5:22:6d:d6:73:ab:fb:30:1d:3b:c3:b2:
         5d:9a:40:dc:1a:6b:d7:95:7e:f6:2c:eb:05:02:b4:e4:09:e1:
         ef:30:f4:02:e2:3d:b9:5f:9f:fb:c5:ff:5b:32:85:90:cd:ba:
         93:ba:3e:42:1f:ab:74:24:4d:1c:82:5d:86:25:b6:7f:f9:cf:
         09:cb:02:9a:1c:d5:44:7a:ba:77:91:fb:45:1c:68:b6:dd:0f:
         6d:46:b7:20:88:0d:dc:51:51:e9:37:e6:e9:5f:c9:75:f3:e6:
         cb:2a:f5:8f:09:06:08:d0:c7:06:91:ed:40:b5:8d:51:6c:15:
         b1:67:11:6f:5e:2a:ec:52:f0:7b:88:6e:d2:15:1b:a0:8c:cb:
         9b:05:75:b4:27:20:a6:62:e5:85:67:0f:2c:7d:58:1b:64:54:
         af:14:ba:dd:26:79:4d:a7:ea:d2:e1:28:77:98:af:5a:ef:18:
         d9:ac:ae:18:7f:62:1e:9e:6e:ea:3f:a1:bc:63:0b:13:ed:d8:
         d7:c0:c3:7d:2c:d9:2c:f2:55:d4:c5:5c:1f:90:77:17:6f:01:
         b6:c3:fe:75:e7:19:f9:68:99:87:c2:91:6d:56:8e:be:30:e7:
         e7:be:f8:82:5c:96:dd:9d:c2:e9:b1:04:3d:40:08:c2:b7:89:
         07:a7:a3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:07:06 2026 by rpki-client