Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
File:                     hETqrJKViOiWt8WR9g40MEKw37w.mft (raw, json)
Hash identifier:          sfvIUDNUCtL3y563fS6dUjZ5JJQsPmHrGJrxKqByz/U=
Subject key identifier:   FB:FD:73:FA:F4:83:20:93:F9:54:93:F4:4A:13:22:73:E0:82:D2:3E
Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC
Certificate issuer:       /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
Certificate serial:       046A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
Manifest number:          0462
Signing time:             Mon 01 Jun 2026 00:52:02 +0000
Manifest this update:     Mon 01 Jun 2026 00:52:02 +0000
Manifest next update:     Mon 08 Jun 2026 00:52:02 +0000
Files and hashes:         1: hETqrJKViOiWt8WR9g40MEKw37w.crl (hash: QD0ySrt3pexfTzPBMNFsgYo7mCdM+hgLY6PN+UJTWWQ=)
                          2: C8899170FB7211F08F8762E74F6F56BC.roa (hash: ctiS/J2TVY8JJKVzXFhRdcRDN1f1H0n8TDJvzQMZJ5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl
                          rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 00:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130 (0x46a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114431, serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
        Validity
            Not Before: Jun  1 00:52:02 2026 GMT
            Not After : Jun  8 00:52:02 2026 GMT
        Subject: CN=6a1cd7b2-349b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:fd:a2:5f:1f:6c:9e:2a:e2:d7:1f:8b:2c:
                    6c:e9:f3:bd:08:ee:4a:22:11:5a:bf:64:8d:f4:76:
                    04:50:23:aa:b7:ea:e4:1a:23:ba:12:ce:57:9c:4a:
                    58:d6:47:76:36:21:72:0e:dc:d7:15:d0:1e:08:96:
                    f0:11:9a:fb:e8:ae:5e:7f:e8:ea:8e:25:d9:71:11:
                    65:fe:2c:ac:4e:5f:b6:49:55:0c:81:60:42:66:2c:
                    6b:36:47:0a:17:b8:bf:01:a0:1f:f9:1e:78:88:c9:
                    77:37:68:b6:6b:93:c5:a9:6b:58:ab:be:25:ce:b4:
                    83:bf:ca:4d:7c:74:81:8e:30:c0:f1:2f:03:3e:09:
                    e8:be:a1:f0:39:9a:09:27:47:c0:59:bd:a0:3c:ae:
                    e2:2c:d3:b7:7a:63:5e:68:84:f1:f7:ba:c7:26:16:
                    b0:6e:51:e8:5f:34:8f:99:a5:f7:d6:b6:33:27:d9:
                    62:22:88:24:7b:82:d7:4d:88:08:9c:07:d8:d7:7c:
                    96:f6:2d:0e:bf:dd:84:3c:1f:d2:a9:2a:67:48:05:
                    af:80:d8:fb:fc:60:77:29:54:07:1a:0d:15:cd:ac:
                    f6:d5:d3:d7:29:7a:7d:63:69:7c:28:63:97:ec:b1:
                    9d:24:91:2e:08:97:97:57:b6:ad:fd:b4:d0:cb:ea:
                    45:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FD:73:FA:F4:83:20:93:F9:54:93:F4:4A:13:22:73:E0:82:D2:3E
            X509v3 Authority Key Identifier:
                keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:9e:71:c3:81:ab:0f:89:b9:34:3a:04:bd:e0:aa:58:4c:58:
         f6:d9:b1:02:01:1d:50:d8:79:81:2b:95:ce:5b:07:aa:ff:6c:
         3f:d0:37:44:4e:f8:c9:49:f3:fd:c9:4c:3e:b1:ff:dc:f9:cf:
         eb:e6:a3:a7:98:e9:fb:be:cc:8c:78:e9:fa:44:cb:9c:ec:92:
         f0:f7:b4:a6:49:1e:e4:e1:1c:7c:7f:33:cd:3a:19:cc:71:02:
         2c:fb:c3:ab:32:cf:c5:d0:f1:e7:85:6f:a8:84:ab:6e:bf:d4:
         c7:14:7e:96:8f:c3:10:58:cb:40:90:96:5f:ac:0a:0a:ec:ab:
         25:3c:2c:45:41:6f:e7:f6:75:2b:4a:59:11:cd:66:44:a7:2a:
         9e:0a:af:2f:0f:ad:0d:f3:b0:92:4d:f2:46:2a:fc:3e:a7:68:
         4c:03:1d:d3:15:b3:c8:cc:0e:e0:0a:47:92:2d:e5:40:37:44:
         69:43:5e:57:0a:7f:90:fd:c6:fd:8a:14:bf:a0:ac:eb:c0:af:
         83:3a:be:d0:ec:69:a4:4d:99:52:e1:44:25:57:e8:e3:54:34:
         6c:70:39:99:ae:0d:83:cc:6e:fb:ad:ed:2a:f4:25:9f:17:c6:
         b8:b3:a6:bd:98:e6:35:0e:fa:db:f4:63:f4:18:75:29:52:b7:
         fb:95:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:29 2026 by rpki-client