Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
File:                     hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json)
Hash identifier:          o/wRKxyEuwZDj64NWhOrgtDRC9XmXSwU+JEtDStEjV8=
Subject key identifier:   53:C4:E3:F1:89:68:D2:ED:59:08:A8:28:9D:ED:79:34:6E:02:4C:B9
Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Certificate issuer:       /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
Manifest number:          69
Signing time:             Tue 31 Mar 2026 07:27:58 +0000
Manifest this update:     Tue 31 Mar 2026 07:27:58 +0000
Manifest next update:     Tue 07 Apr 2026 07:27:58 +0000
Files and hashes:         1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: dP4/WyONbyRkgXs5H2vq+28JjynaHMcBiyPijzAKBc0=)
                          2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: zExyQQHeecBohiLc86ZLJXlDWNlgRbqbvrDnE+PSuCQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
                          rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
        Validity
            Not Before: Mar 31 07:27:58 2026 GMT
            Not After : Apr  7 07:27:58 2026 GMT
        Subject: CN=69cb777e-4386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:52:25:f9:25:f6:e7:ca:5f:af:a0:d3:15:fa:
                    ca:20:36:44:a7:65:a3:7e:5a:cb:3b:dd:17:94:da:
                    56:29:22:59:fc:3b:2e:d4:e5:c3:3c:e6:d9:85:5a:
                    2e:58:88:8d:60:91:4e:b7:7d:a2:89:ac:41:de:42:
                    36:10:63:1a:b7:33:d9:ce:5d:e5:ae:d6:74:12:b2:
                    7c:1f:50:a6:7a:09:a4:a3:88:a4:6d:5d:a1:15:08:
                    28:07:47:ef:84:85:4f:31:ee:4a:76:1f:1b:6e:f7:
                    8e:4e:a6:e5:b7:1d:d3:c2:3b:9e:5e:9c:e8:f3:ef:
                    aa:d3:78:5b:26:36:e0:f9:78:04:6c:d2:6b:6e:80:
                    5c:03:ee:00:02:73:cc:56:ef:6f:08:8b:1f:e4:81:
                    13:eb:f9:77:11:e9:0a:18:3c:fd:cc:65:ed:67:99:
                    90:07:7a:62:ff:d3:18:6c:b3:21:6e:45:60:ce:74:
                    69:4c:62:b8:89:db:05:09:dc:96:d4:08:19:e6:8a:
                    8d:7d:29:9d:33:34:47:cf:38:83:07:8f:52:69:1d:
                    d9:b8:09:a3:b1:f3:44:50:79:c7:05:4c:50:66:16:
                    d0:c9:77:42:b8:e1:d9:23:aa:3c:74:ad:6f:8e:8d:
                    50:79:c1:c9:0f:08:ad:ba:4b:78:8b:fc:55:7a:e9:
                    9a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C4:E3:F1:89:68:D2:ED:59:08:A8:28:9D:ED:79:34:6E:02:4C:B9
            X509v3 Authority Key Identifier:
                keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:63:7e:0d:11:71:64:f0:9d:e9:43:c8:f3:0f:5f:ea:b3:3d:
         55:01:f3:78:3c:76:64:bc:d6:0c:5a:b9:ce:9b:68:47:c2:38:
         a9:6f:6a:dd:21:2e:9a:51:b5:75:79:47:5d:85:63:19:24:44:
         10:4b:30:de:6c:f0:cd:af:f3:58:0a:89:e7:d9:6d:01:17:e3:
         69:25:76:98:d7:2d:4b:a4:51:3f:2b:8a:4e:e6:35:af:d2:97:
         d2:4e:76:2e:97:33:c9:22:5f:66:1c:35:75:c4:62:b0:77:44:
         b7:8b:d6:76:80:8d:ca:55:e9:2a:04:3b:6a:fe:77:51:04:cd:
         49:69:51:9c:6b:be:92:5b:0c:85:19:6f:92:67:da:88:a5:bd:
         31:4f:00:00:1c:a1:f2:16:a5:4b:e9:01:fb:b2:0e:b6:e0:0b:
         3f:bc:49:15:d3:9d:4c:cd:a1:41:d6:ba:d1:b6:0d:c3:d0:d8:
         7a:1a:34:67:00:02:bf:22:b8:46:50:ea:2c:21:54:2b:1b:ef:
         fc:46:6b:ea:0d:d8:e2:e7:1f:4c:0b:df:9e:fa:28:7c:ec:53:
         11:e8:0f:bb:c3:7e:df:b5:4a:1d:95:28:f9:87:3e:ee:7c:12:
         60:7c:14:fd:07:b9:dd:c9:1f:32:74:f0:39:a4:89:59:3c:9e:
         54:83:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 10:26:49 2026 by rpki-client