Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
File:                     09zhcUP5z134AE-MZZf7LIzMcEY.mft (raw, json)
Hash identifier:          WA+WCXT35wqLml+RaaweObjx3LySjwy6pK1v+Uh6y28=
Subject key identifier:   69:05:C1:A5:A9:E4:27:6C:30:33:F3:80:05:67:A7:69:10:A5:A6:53
Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46
Certificate issuer:       /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
Manifest number:          0143
Signing time:             Wed 13 May 2026 05:26:27 +0000
Manifest this update:     Wed 13 May 2026 05:26:26 +0000
Manifest next update:     Wed 20 May 2026 05:26:26 +0000
Files and hashes:         1: 09zhcUP5z134AE-MZZf7LIzMcEY.crl (hash: JsrNgjFqlv/lqHegvMR8eAZjeNM3rD/yGH4sR6u0xhI=)
                          2: 6A3FA88A693C11EF8B032237C4F9AE02.roa (hash: Ut6wTzQqWH7gTz2iJzacD5zAQ3RJj3PLXlh5yOWIbT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl
                          rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D74, serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046
        Validity
            Not Before: May 13 05:26:26 2026 GMT
            Not After : May 20 05:26:26 2026 GMT
        Subject: CN=6a040b82-1d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:b5:34:8a:e9:b4:00:dc:3b:b7:cb:57:6b:
                    d8:7e:6c:6e:b1:e7:22:75:7e:a6:d5:02:58:27:79:
                    01:87:5c:b0:b5:35:b7:e8:2d:c7:d2:79:ff:8c:95:
                    4b:39:6d:03:4c:e3:4a:20:16:eb:20:dc:7c:6a:38:
                    2d:ce:97:69:8c:a4:8b:6b:a9:31:14:5f:b0:a8:eb:
                    df:b5:33:45:25:ba:2b:78:1a:9c:e7:01:e0:f4:0a:
                    af:6d:74:cb:64:97:39:76:95:af:ce:49:25:32:ac:
                    90:60:1d:78:95:c1:cd:dc:79:72:fb:ef:15:cb:70:
                    95:01:2a:8f:bb:f3:59:b6:ac:7b:8b:f2:5b:50:dc:
                    b0:c5:61:e1:c7:d6:18:56:74:34:eb:8c:f2:0e:5f:
                    de:05:f4:94:9d:a5:18:ba:7c:79:48:0c:46:7d:a0:
                    5a:f6:56:a7:6e:1a:0e:8a:a0:74:19:d8:40:b0:1c:
                    a1:5e:62:a5:d6:52:ae:85:fb:f0:7c:13:9b:4a:5e:
                    0d:c5:4e:c5:ab:3d:55:d9:41:98:ed:dd:87:dd:e1:
                    e6:1d:0d:64:47:3b:7c:f6:d9:3f:96:64:3c:ca:23:
                    56:d5:23:9e:4f:2d:d7:b2:96:00:ae:98:bb:4f:7d:
                    4c:db:c0:32:7a:c8:27:12:14:b2:50:56:d5:d6:88:
                    97:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:05:C1:A5:A9:E4:27:6C:30:33:F3:80:05:67:A7:69:10:A5:A6:53
            X509v3 Authority Key Identifier:
                keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2e:06:5a:8c:88:db:1c:ee:22:d3:73:5d:7e:7c:6e:ce:63:
         b2:92:ae:87:b4:6b:f4:7f:70:6c:35:cb:cf:53:61:56:c5:5a:
         c2:34:2f:16:b5:db:34:fb:8f:ce:8d:3e:2f:88:49:43:af:b6:
         f5:5d:49:72:6a:b8:eb:f3:2f:36:12:ef:17:b4:52:7a:4e:6c:
         3b:bf:1a:10:8d:42:91:e5:53:d1:28:d5:d4:96:c4:c7:1c:06:
         bc:2b:4f:66:5b:b0:96:64:90:43:56:77:0f:b1:cf:51:45:40:
         34:0f:57:41:7d:d3:90:93:ff:ed:ec:4a:20:47:83:3c:d2:98:
         bd:1d:15:c7:b8:ca:9d:a2:38:70:e3:46:90:5f:3b:75:a6:2c:
         82:11:bb:db:23:83:b5:0f:d8:00:8c:d9:03:d1:58:1e:ac:5c:
         1d:3a:dd:18:89:1f:2d:1f:4f:c7:9b:c4:35:64:13:ad:7c:8b:
         98:ff:25:54:6d:cc:fb:9b:6a:74:ac:3e:00:0f:9e:51:1f:fa:
         e8:52:ad:f4:8e:2d:cb:2c:8e:f0:15:cc:b9:71:f2:95:86:64:
         9a:3c:dd:f4:e7:3f:b1:4b:d1:3b:43:6a:8e:86:72:21:28:b2:
         b4:54:25:f3:55:e3:64:4c:dd:eb:f2:62:91:5f:38:d0:b3:27:
         d3:1e:69:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:51:01 2026 by rpki-client