Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
File:                     hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json)
Hash identifier:          Pp09BXcHUCm5ziiWjVpL0qiuhMOAzdXbJHBJEl4+5xw=
Subject key identifier:   0C:45:AC:FA:01:47:A3:2D:59:CB:CB:FF:69:EE:15:1F:9A:F9:E5:E6
Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
Certificate issuer:       /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
Manifest number:          0130
Signing time:             Tue 07 Jul 2026 06:45:57 +0000
Manifest this update:     Tue 07 Jul 2026 06:45:57 +0000
Manifest next update:     Tue 14 Jul 2026 06:45:57 +0000
Files and hashes:         1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: Q3q0IdyYr4YSpT284eMTytKk5iW41JdOKphbwv3fKQI=)
                          2: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: 9kbxY7GStAtFWFHK4CxfmaeBQ9+u1bor9LZiasl/Umo=)
                          3: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: E7TlvkUoTphr1MZbzvUv/cwDmCu/Xr2dNOXdFLK7X2o=)
                          4: B2BB920001CE11F182556E3A746F56BC.roa (hash: jrD4pqdoiKJI9NO9x+4SiaHnYuar82tQXf2WpPGDnIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
                          rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 06:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
        Validity
            Not Before: Jul  7 06:45:57 2026 GMT
            Not After : Jul 14 06:45:57 2026 GMT
        Subject: CN=6a4ca0a5-33d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:73:fd:cb:bb:e3:20:59:3a:10:f9:e7:00:
                    ce:2f:b6:6a:65:c7:00:e0:b8:59:b8:da:c8:88:f2:
                    f6:79:b0:97:1a:22:f7:19:5a:6b:4a:a4:c3:f4:e0:
                    6d:a2:65:88:b7:dd:db:6f:3e:39:a8:32:d1:b6:9e:
                    40:86:10:be:b6:65:83:a5:11:da:c1:ed:68:3a:d9:
                    e4:bf:c8:ca:9e:48:90:c5:fb:5d:c1:84:30:62:5a:
                    7f:ef:4a:1d:a6:b4:47:65:0f:51:bd:4d:bc:34:6c:
                    6d:ab:9e:66:af:88:30:ba:1a:3a:19:7f:f3:5f:b8:
                    cf:47:ec:f0:0e:d9:cf:1f:32:f5:5f:08:92:9f:a8:
                    04:06:98:7c:6b:cb:c8:9a:d0:75:16:68:15:b5:cb:
                    12:f7:45:7e:8a:07:96:c3:cd:b2:07:f1:11:2b:b4:
                    9c:a3:f2:21:e8:8c:48:be:ff:e0:ec:4e:64:6f:96:
                    3f:63:03:22:87:6d:b0:b5:92:39:66:c6:b8:e1:14:
                    7c:ae:d5:c1:64:57:39:0a:03:8d:cb:64:ce:fb:fa:
                    68:b5:a6:dc:4b:79:48:1c:72:80:43:14:a4:56:99:
                    1a:40:f9:c4:f1:e9:99:d9:26:5d:30:28:12:87:89:
                    52:f1:b1:7c:80:c2:d3:7c:90:90:e4:6d:4b:eb:74:
                    84:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:45:AC:FA:01:47:A3:2D:59:CB:CB:FF:69:EE:15:1F:9A:F9:E5:E6
            X509v3 Authority Key Identifier:
                keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f8:f8:3f:e3:1b:b7:07:e4:26:ac:9d:1b:0a:9e:a9:7a:52:
         fd:17:ca:a6:4c:39:d0:08:96:80:64:6b:af:5d:47:6c:34:d3:
         48:ca:09:a4:48:ec:08:e5:a0:4a:99:70:83:3b:19:26:c7:73:
         9c:fe:a8:71:d3:29:a9:b6:5b:34:fa:a7:9f:b2:1d:8e:96:37:
         38:d6:35:03:ca:15:6e:9d:fc:2f:26:6b:a5:61:12:fc:27:24:
         8c:19:e8:32:68:a7:01:b1:b7:2b:ba:28:7b:38:5e:b8:79:b0:
         6a:fe:56:24:e2:34:9f:59:ea:2a:7e:fe:a0:18:97:fc:6f:91:
         90:d3:68:f7:70:dd:68:be:3b:b5:9f:ee:c4:38:f9:44:cd:0a:
         01:f2:16:3e:b4:28:de:a4:a4:3d:51:75:ac:28:cb:16:82:5d:
         58:82:bb:dc:f8:c6:db:0f:ce:7e:ef:92:57:91:a8:87:4e:59:
         da:65:f9:ce:85:87:2d:d5:79:89:a6:cf:29:4a:d6:31:d6:2e:
         58:27:cf:3d:03:47:b1:93:28:0b:0e:b4:37:b7:58:88:6e:c9:
         4e:1d:39:68:b9:69:61:e3:fa:f1:b8:f2:26:cf:78:5f:f9:22:
         fb:fe:b7:26:43:a0:87:da:53:d0:72:93:81:3a:4b:da:fb:e3:
         f6:06:98:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:45:04 2026 by rpki-client