Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
File:                     hNqJJ83vUDOW9ScgGU65MSCdPzo.mft (raw, json)
Hash identifier:          vzW1vFYEUb8Kxq4JSFZDuQsEZPqXIVjJ49a/Upb+9YQ=
Subject key identifier:   E7:1F:5E:BB:88:08:B2:83:85:4D:81:3E:BC:B8:37:E8:28:EF:29:C5
Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A
Certificate issuer:       /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
Certificate serial:       03B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
Manifest number:          03A6
Signing time:             Sun 05 Apr 2026 00:30:33 +0000
Manifest this update:     Sun 05 Apr 2026 00:30:32 +0000
Manifest next update:     Sun 12 Apr 2026 00:30:32 +0000
Files and hashes:         1: hNqJJ83vUDOW9ScgGU65MSCdPzo.crl (hash: WpRtvf6H+aIRFoiU6doKdSH7BQK4t3NcPxm9O1DzD+4=)
                          2: 00F0B7EEA87411EF88F5C638C4F9AE02.roa (hash: elymg/oKLo36bQB76f3/BjLy1dUOOeqORBslgCNGm4w=)
                          3: 3EABAF20D8E311EC8F274181C4F9AE02.roa (hash: PpySkmXHDFAMdn8q7qJMbkbAjwFyZ6Dte8VkGbnBdUI=)
                          4: 6910E952A86A11EF89DA976DC4F9AE02.roa (hash: VgHpUmv5XapUWkoHMwq6CHIEaAxNeoc/taSmWAxGkC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl
                          rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 953 (0x3b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F051, serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
        Validity
            Not Before: Apr  5 00:30:32 2026 GMT
            Not After : Apr 12 00:30:32 2026 GMT
        Subject: CN=69d1ad29-62a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:9a:d9:e3:72:e8:b3:f4:18:f3:9a:ba:fd:
                    1c:15:37:00:91:31:a4:8f:55:f5:eb:b1:09:49:72:
                    ef:67:1a:e5:b0:10:9a:36:8d:c5:1f:40:4c:48:79:
                    fd:09:8c:d0:24:89:16:cd:84:37:4c:62:f2:f7:c3:
                    a3:ee:a1:3d:34:ce:20:ec:67:23:cd:1d:5b:5a:cc:
                    e9:b1:2d:ad:28:3c:3b:35:61:a4:fb:88:3d:f1:a5:
                    6f:04:e0:f4:c6:08:ab:2f:7f:e0:cf:5d:eb:2b:8f:
                    cb:02:86:06:e3:95:07:d2:90:a0:29:3a:1c:9d:eb:
                    1f:cf:9a:51:ad:84:99:44:d7:77:2d:b4:4e:7f:03:
                    f6:ca:78:5c:12:a6:56:33:a8:11:e5:53:95:89:78:
                    b8:2d:d2:51:18:92:0e:92:c0:ca:da:70:2d:b9:5c:
                    ca:7b:e1:0a:df:f9:5f:8e:ad:30:2a:82:6f:13:2b:
                    13:ef:50:22:82:0b:ce:d1:71:17:40:11:45:b7:0a:
                    0a:4f:54:4f:ea:5b:16:bf:77:13:34:fb:de:99:33:
                    61:75:77:79:66:7c:09:00:cd:2c:2f:2d:da:71:53:
                    18:52:30:6f:e3:91:a3:ce:2c:6b:b9:37:9f:36:74:
                    b1:c8:fa:15:2d:fc:89:e8:fc:6e:a1:9e:f0:e3:ec:
                    1a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1F:5E:BB:88:08:B2:83:85:4D:81:3E:BC:B8:37:E8:28:EF:29:C5
            X509v3 Authority Key Identifier:
                keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b5:c9:e1:02:36:b2:9e:d8:76:66:e0:b3:4e:81:49:b6:79:
         96:26:37:a4:47:9c:ac:06:56:82:33:56:3b:6d:1d:42:63:ba:
         69:1a:24:b1:b8:a3:02:7a:b7:e9:b2:b9:b7:a7:73:91:7a:ab:
         61:17:51:74:71:bc:d8:97:3d:7f:eb:d1:58:dd:aa:41:0a:6f:
         24:a5:f8:0a:ba:2e:f3:ac:4f:64:1d:29:b9:f8:74:75:26:ff:
         32:c8:53:28:4f:ea:aa:70:d6:5d:43:a4:5d:ac:32:91:f5:f1:
         8c:ec:55:92:e0:84:c8:e2:51:18:3f:1c:13:7b:c0:9f:ae:c7:
         f6:bd:18:ff:9a:1e:d6:b7:ae:4e:18:c4:19:e6:38:73:d5:ca:
         8f:f9:01:c3:94:bd:dd:6e:cd:7f:2a:24:96:90:9b:12:ff:67:
         55:59:52:ec:55:8f:26:b7:cd:8a:a8:67:a0:2a:b0:5a:e9:cb:
         87:29:ef:21:47:29:2c:4b:52:bc:e1:2b:c7:db:93:c5:8f:94:
         21:3c:a6:82:07:db:fa:a5:06:7c:7a:e1:a9:9d:31:b1:b2:1e:
         60:37:16:cd:5b:40:75:fc:2c:a3:9b:2a:aa:a4:31:e3:53:10:
         0b:2a:3f:ce:a8:3a:e3:71:d9:f4:ec:27:57:e4:ff:74:21:bc:
         4d:cf:f2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:26 2026 by rpki-client