Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File:                     H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier:          2A14TGrf2N6D41DzUMqDm1NioF7N0gmFGWkyTi91RJI=
Subject key identifier:   56:75:4D:AC:54:D7:5F:3A:71:45:1B:F5:F6:26:BE:5E:29:E6:A7:AB
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer:       /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial:       0CFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number:          0CE1
Signing time:             Thu 14 May 2026 18:25:24 +0000
Manifest this update:     Thu 14 May 2026 18:25:24 +0000
Manifest next update:     Thu 21 May 2026 18:25:24 +0000
Files and hashes:         1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: fC0/EL0HfmloNg44H55IzynI6dFIC99+RZGaGn2AfiQ=)
                          2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: lJfLPhd1kAAzDWL/Ne5AiMPNOkxSubYVAGKuzG/T5pk=)
                          3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: 7CjBAuah6/o6TO56EaGyhTraMGUdKeiH/EG6F7J9nYY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
                          rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 21 May 2026 18:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3323 (0xcfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
        Validity
            Not Before: May 14 18:25:24 2026 GMT
            Not After : May 21 18:25:24 2026 GMT
        Subject: CN=6a061394-bf61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1b:c0:95:5c:d6:55:d1:6c:bd:28:b9:36:4b:
                    31:22:97:80:ae:99:f8:c5:c2:02:74:96:fb:2e:74:
                    cb:8e:10:43:96:b4:a2:46:ec:67:14:c0:92:87:ac:
                    cf:95:7b:2d:a7:a2:93:20:a1:8a:10:9f:ff:df:9c:
                    e9:6d:a9:a1:a0:64:58:86:40:b7:90:10:26:35:cf:
                    72:22:00:49:ac:11:ba:73:e8:e0:3a:88:d9:aa:20:
                    cd:25:67:3e:99:0e:45:84:50:1d:1d:9c:b3:50:d8:
                    95:0d:c5:c4:72:54:43:c9:4c:3b:85:fb:fc:76:29:
                    09:99:38:55:49:f0:03:69:e7:ef:46:46:7e:d1:a2:
                    0d:dd:54:36:eb:ca:29:1a:0c:29:4a:ee:cb:1e:07:
                    f8:8e:13:c2:98:4b:b7:1a:22:18:ca:de:7e:5d:17:
                    e7:a7:47:f4:1b:97:e4:36:f2:d7:5b:93:dd:63:73:
                    ee:d6:45:a9:56:de:a6:d0:15:5c:b4:1e:43:14:fb:
                    5f:17:f7:18:41:7d:2f:67:11:47:fb:29:14:30:43:
                    7c:a9:9f:10:75:ef:4c:06:e9:73:6f:3a:dc:87:7d:
                    0a:08:0c:af:7a:3d:5a:0e:ce:22:70:96:18:e2:d3:
                    4d:3b:82:54:2f:02:4f:6d:ff:8b:56:52:4a:66:54:
                    f2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:75:4D:AC:54:D7:5F:3A:71:45:1B:F5:F6:26:BE:5E:29:E6:A7:AB
            X509v3 Authority Key Identifier:
                keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:27:c5:bb:45:90:24:d9:c5:b6:75:d5:22:c9:2e:19:2e:a7:
         89:4f:06:51:03:88:50:ab:15:8c:f1:ff:bc:6b:54:59:c0:d7:
         4f:b3:b4:5e:5e:27:6b:be:7b:b6:86:07:c7:ce:99:19:89:c2:
         47:c2:d2:46:60:4a:04:b0:3a:3e:a5:89:e8:af:c0:54:13:a8:
         e6:f4:02:68:a2:d1:0c:69:6d:51:38:80:bf:77:29:11:75:52:
         93:69:f0:78:04:0c:3c:a9:a8:42:96:f0:ae:f6:1f:35:17:4d:
         1c:0e:b1:18:d4:fe:24:7a:b6:45:79:c4:9a:76:b8:51:da:df:
         b4:8c:ea:a2:85:d1:e3:fc:52:83:69:1e:35:d9:5b:34:7c:e2:
         8c:54:b0:70:d5:e5:05:7a:2e:58:68:14:6a:a5:c0:48:14:e2:
         1f:fc:17:ab:9b:bb:f2:bd:3c:da:cd:21:b1:ae:2a:b3:79:63:
         09:37:67:c8:45:ef:b0:24:37:90:9c:9a:b8:21:94:e2:81:22:
         12:f8:0f:43:12:57:b1:b5:f7:e2:9b:5d:a1:b0:d9:1a:1b:29:
         b7:96:ab:d8:ff:e4:d2:f1:9b:9b:1b:61:f2:3a:d8:67:29:b0:
         cf:60:43:6f:dc:d0:a8:d1:20:7f:fe:0a:e7:ce:81:51:9f:42:
         fc:e8:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 01:27:34 2026 by rpki-client