Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
File:                     kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json)
Hash identifier:          qqrtOpNDyNj/UdcQbKntMc/uW9Cq2Kc7G+C1xDfX18o=
Subject key identifier:   9F:14:34:C5:ED:86:71:68:38:D1:DA:81:30:97:E6:C7:09:48:23:AC
Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
Certificate issuer:       /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Certificate serial:       0ABB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
Manifest number:          0AB1
Signing time:             Sat 04 Apr 2026 19:17:47 +0000
Manifest this update:     Sat 04 Apr 2026 19:17:46 +0000
Manifest next update:     Sat 11 Apr 2026 19:17:46 +0000
Files and hashes:         1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: XZEfuEtZhnMtPdyFoahWNUtmu4MBbLi/og79j/kQClg=)
                          2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: gSKNogEshZnmN/3zaUCV8zHvFUQUbigi4NIpUM9EKFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
                          rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2747 (0xabb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
        Validity
            Not Before: Apr  4 19:17:46 2026 GMT
            Not After : Apr 11 19:17:46 2026 GMT
        Subject: CN=69d163db-9f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:da:ee:84:74:7d:c2:d6:0a:a2:c0:69:4f:58:
                    fd:9a:bd:7d:b6:ac:47:b9:c6:11:4f:ae:d6:4a:29:
                    1d:80:46:94:1c:15:00:d9:4d:18:63:69:ed:0c:f0:
                    bb:da:b6:43:b5:0a:e9:f0:92:ea:8b:b9:83:2a:b7:
                    26:d7:6f:65:c0:01:73:12:e1:e4:c2:ef:61:d1:10:
                    8a:ca:df:b1:c2:76:3a:67:72:11:82:37:f0:0a:47:
                    cb:08:e0:e9:0e:d4:1b:77:de:6a:d1:d6:6e:3d:b2:
                    e6:ea:57:ed:93:2a:6c:aa:1b:31:58:44:ed:32:97:
                    44:a6:e8:10:8c:a0:1e:e3:9b:19:1b:3f:55:d8:69:
                    b1:95:f2:e8:07:e0:c3:80:b5:9a:f9:37:0e:45:7c:
                    fa:06:0c:72:15:56:0c:8c:14:77:69:46:99:19:82:
                    41:bf:5d:fd:7b:92:15:7c:49:8c:98:20:55:2e:c1:
                    97:a6:e9:73:11:f1:83:d0:22:90:e7:e1:ee:23:af:
                    74:c7:db:1e:8a:a3:da:74:cb:4c:92:60:b8:97:e6:
                    e6:97:e8:4c:bd:24:50:d9:d1:24:4c:4c:3c:1b:38:
                    59:34:bd:59:fe:f3:80:35:7e:4a:02:f4:8b:ff:bd:
                    52:b4:dc:3a:e7:75:96:62:fa:1e:50:99:b8:c9:e9:
                    65:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:14:34:C5:ED:86:71:68:38:D1:DA:81:30:97:E6:C7:09:48:23:AC
            X509v3 Authority Key Identifier:
                keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ca:b9:f7:e7:1e:4b:8a:8a:49:17:ce:02:a1:43:7a:23:40:
         0d:02:b8:03:de:8f:60:8b:fa:8d:3d:f1:7a:35:ed:8d:23:95:
         9e:d7:f4:3a:46:66:00:c5:0c:2d:01:64:a7:bd:fd:a0:ee:66:
         9a:33:80:f1:69:cb:59:93:e5:84:2e:97:3f:38:47:8e:32:31:
         15:62:9f:b8:e7:0a:ef:a5:5e:8c:62:ea:17:6d:e2:f4:0c:f8:
         57:80:15:c3:81:7c:28:b9:e5:8b:80:ee:86:b5:28:2d:42:66:
         d4:64:c1:ca:41:86:25:00:88:75:c7:4e:fa:c9:e8:49:88:6a:
         e8:5d:ae:e6:1b:27:7f:03:c8:fc:e3:bf:78:52:66:df:0b:5a:
         a6:22:3e:21:30:74:f5:e4:20:8e:40:bf:a9:49:98:a6:fc:93:
         4d:01:7b:64:74:98:53:b2:90:0f:fa:29:18:1b:65:94:a5:42:
         41:39:22:2b:b7:d3:80:fa:7d:19:7e:41:39:a3:a1:53:74:c7:
         b1:60:f9:41:aa:3f:e0:1b:d7:57:08:1f:e3:f5:3b:7f:9f:ed:
         53:88:66:d6:a6:de:0e:13:f1:4c:11:3f:5d:3e:9e:82:77:8c:
         9b:70:89:47:68:04:fc:8f:c9:a1:9a:83:42:02:5e:7b:bc:09:
         1a:af:91:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E3QTYxMTAvBgNVBAUTKDkwN0IwMzhBREVDN0MzRkE5QzY0OTMwRTY0MTlCMkZC
QkFCOUM4MUMwHhcNMjYwNDA0MTkxNzQ2WhcNMjYwNDExMTkxNzQ2WjAYMRYwFAYD
VQQDEw02OWQxNjNkYi05ZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqdruhHR9wtYKosBpT1j9mr19tqxHucYRT67WSikdgEaUHBUA2U0YY2ntDPC7
2rZDtQrp8JLqi7mDKrcm129lwAFzEuHkwu9h0RCKyt+xwnY6Z3IRgjfwCkfLCODp
DtQbd95q0dZuPbLm6lftkypsqhsxWETtMpdEpugQjKAe45sZGz9V2GmxlfLoB+DD
gLWa+TcORXz6BgxyFVYMjBR3aUaZGYJBv139e5IVfEmMmCBVLsGXpulzEfGD0CKQ
5+HuI690x9seiqPadMtMkmC4l+bml+hMvSRQ2dEkTEw8GzhZNL1Z/vOANX5KAvSL
/71StNw653WWYvoeUJm4yell+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8UNMXt
hnFoONHagTCX5scJSCOsMB8GA1UdIwQYMBaAFJB7A4rex8P6nGSTDmQZsvu6ucgc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80REI5NDQzQTcz
QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdfcWNaSk1PWkJteS03cTV5
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tIc0RpdDdId19xY1pKTU9aQm15LTdxNXlCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTdBNi80REI5NDQzQTczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdf
cWNaSk1PWkJteS03cTV5QncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmMq59+ceS4qKSRfOAqFDeiNADQK4A96PYIv6jT3xejXtjSOVntf0OkZmAMUM
LQFkp739oO5mmjOA8WnLWZPlhC6XPzhHjjIxFWKfuOcK76VejGLqF23i9Az4V4AV
w4F8KLnli4DuhrUoLUJm1GTBykGGJQCIdcdO+snoSYhq6F2u5hsnfwPI/OO/eFJm
3wtapiI+ITB09eQgjkC/qUmYpvyTTQF7ZHSYU7KQD/opGBtllKVCQTkiK7fTgPp9
GX5BOaOhU3THsWD5Qao/4BvXVwgf4/U7f5/tU4hm1qbeDhPxTBE/XT6egneMm3CJ
R2gE/I/JoZqDQgJee7wJGq+RAQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:26 2026 by rpki-client