Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
File:                     hXUH8dizkVyVENUEcA7OiQsGaF8.mft (raw, json)
Hash identifier:          UP7LIk+jJlzV95Oo5o3csHP3F/44mxeoYLqrMWFUxds=
Subject key identifier:   72:8B:0E:4A:45:30:79:CD:01:49:49:2C:DD:5E:86:85:D0:0C:F2:F2
Authority key identifier: 85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F
Certificate issuer:       /CN=A916B7FC/serialNumber=857507F1D8B3915C9510D504700ECE890B06685F
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
Manifest number:          D1
Signing time:             Fri 17 Apr 2026 06:30:25 +0000
Manifest this update:     Fri 17 Apr 2026 06:30:24 +0000
Manifest next update:     Fri 24 Apr 2026 06:30:24 +0000
Files and hashes:         1: hXUH8dizkVyVENUEcA7OiQsGaF8.crl (hash: k+S82OEk74zsJRDnqJFMAmjpQRbGQbEE0eLMWbehqLM=)
                          2: B49957AA134B11F0AE18CB2BC4F9AE02.roa (hash: JXFvADq4YTaqaen/tnBh56vOg+t9TdkXrX7ZuGzAnPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl
                          rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B7FC, serialNumber=857507F1D8B3915C9510D504700ECE890B06685F
        Validity
            Not Before: Apr 17 06:30:24 2026 GMT
            Not After : Apr 24 06:30:24 2026 GMT
        Subject: CN=69e1d380-bf59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:a3:d6:c4:b2:d2:fc:ad:29:97:52:f6:0c:
                    d8:51:a7:f3:3d:b7:b8:f3:dd:65:0f:8a:e0:54:24:
                    54:ab:fe:a9:91:ad:a1:de:6f:f2:44:ad:34:b3:f5:
                    27:b6:00:9f:3a:19:88:59:e6:6d:08:c2:de:a8:59:
                    19:d3:e1:60:68:cf:75:50:94:62:4e:d9:b5:7e:99:
                    72:46:26:c1:04:14:88:0a:65:5c:9a:b7:7a:5b:a5:
                    ec:49:71:7c:e3:7d:45:5f:a2:87:9f:00:d9:22:9d:
                    e5:20:a1:0b:ab:41:86:a6:51:3b:95:bb:2b:2d:ca:
                    ff:7a:97:18:32:88:85:29:53:d1:0e:43:ea:5e:3c:
                    64:7f:6e:6f:d5:b5:10:93:3d:64:15:0c:70:be:b6:
                    2c:86:85:8c:e9:16:fd:b4:7d:8c:39:45:c6:7e:e7:
                    73:d3:1f:f3:32:bb:49:71:a5:b8:ff:e0:bf:92:0f:
                    f9:9a:38:dd:8c:dc:82:44:ed:b8:6b:15:4d:45:de:
                    a5:cd:7f:41:19:ae:e6:23:dd:1f:44:37:d3:37:87:
                    96:b9:48:1b:c4:e4:cd:d4:d2:56:f2:2f:b2:b3:d4:
                    06:ff:e3:77:e2:b6:9e:32:51:c9:98:22:26:22:0c:
                    ad:9e:52:3c:05:b1:06:6b:c7:05:16:ab:a2:c4:77:
                    d3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8B:0E:4A:45:30:79:CD:01:49:49:2C:DD:5E:86:85:D0:0C:F2:F2
            X509v3 Authority Key Identifier:
                keyid:85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:09:bb:b3:e7:57:27:a0:5d:ca:e5:74:50:87:70:13:e8:0c:
         ec:4f:3d:91:80:ec:49:b0:91:76:21:c8:6e:06:05:3c:02:f9:
         3f:fe:7e:3b:82:99:68:97:67:26:ed:45:2c:af:ec:cd:b3:98:
         66:84:6a:27:50:bf:46:54:14:86:d2:85:5b:1b:40:74:6d:5d:
         88:27:0a:fa:97:1d:f9:f7:22:69:b9:30:e1:08:43:09:d6:29:
         27:5a:1b:87:04:05:38:e2:76:66:08:bc:4f:b1:2f:44:fa:aa:
         bd:23:98:c7:46:b4:b4:7d:f6:a5:f1:0c:cc:b3:87:be:c4:80:
         0e:a7:59:07:4f:63:af:07:6c:46:c8:c1:42:33:29:a9:59:27:
         1e:80:48:d8:b9:c6:4f:2b:90:0e:db:c4:a5:2e:c4:47:2e:eb:
         6e:3f:ed:a6:7d:4a:ac:f1:88:e9:d7:57:bb:46:9a:01:73:3d:
         ee:15:d7:90:6a:70:e9:5b:88:58:37:49:f4:03:6d:03:61:76:
         fd:28:b2:40:c2:42:3a:24:c8:13:e9:5d:05:b8:0a:c4:76:59:
         aa:3c:7e:f1:e8:c2:04:eb:f8:a8:ca:5b:40:d0:f3:af:18:a6:
         99:c4:b2:89:71:ab:79:ee:b4:ec:ad:79:c9:c2:5f:37:74:11:
         2d:45:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:48 2026 by rpki-client