Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
File:                     Hwqez8yog84ajHjPFa9I2e-VQWo.mft (raw, json)
Hash identifier:          /pcnXXj5xiMeSIWTiDxxVmea5qZUy8bX9B6RXWnj9A4=
Subject key identifier:   D9:82:10:21:A4:51:C5:FD:27:71:26:D6:06:7F:79:DD:BA:70:57:EC
Authority key identifier: 1F:0A:9E:CF:CC:A8:83:CE:1A:8C:78:CF:15:AF:48:D9:EF:95:41:6A
Certificate issuer:       /CN=A917286F/serialNumber=1F0A9ECFCCA883CE1A8C78CF15AF48D9EF95416A
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
Manifest number:          04
Signing time:             Thu 21 May 2026 09:22:53 +0000
Manifest this update:     Thu 21 May 2026 09:22:52 +0000
Manifest next update:     Thu 28 May 2026 09:22:52 +0000
Files and hashes:         1: Hwqez8yog84ajHjPFa9I2e-VQWo.crl (hash: DfoU4cDFM3XgHD3yXs5AGPeSB5JjmZcmwGPCoJKL6k0=)
                          2: 427F4E6653C011F1A527BD9DBA833773.roa (hash: eG5S+GARzWRbVnPna51fSv5pLFPdQ2BwMOqn8Rq4jV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.crl
                          rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 09:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917286F, serialNumber=1F0A9ECFCCA883CE1A8C78CF15AF48D9EF95416A
        Validity
            Not Before: May 21 09:22:52 2026 GMT
            Not After : May 28 09:22:52 2026 GMT
        Subject: CN=6a0eceed-2200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:09:16:f8:a5:a0:e6:28:65:76:ee:e7:ec:16:
                    d7:31:af:bf:63:a5:29:af:64:a5:1c:a8:ab:7a:6a:
                    d4:ce:b0:cc:4c:b4:19:5d:4e:95:39:1c:92:aa:51:
                    5c:a2:c2:61:7b:97:c6:84:1d:df:23:0c:73:2d:52:
                    9e:30:05:a6:3b:e0:b7:b1:c8:e9:9f:26:0f:6c:0c:
                    3b:32:5f:b1:5e:d0:b2:b0:19:a2:72:ea:93:c1:bd:
                    54:14:88:46:05:7f:e2:dc:c0:83:98:60:79:be:89:
                    49:e6:4b:88:bc:4d:35:ac:bf:65:be:f5:b2:c6:ef:
                    3b:d9:95:10:25:97:d7:6c:9a:21:61:5c:2e:28:ea:
                    70:da:36:61:4f:73:81:2d:d5:8e:98:94:73:35:bd:
                    c5:0e:65:9f:cf:2e:8c:90:94:57:e0:29:fa:a0:d4:
                    1b:e4:d0:f8:07:e6:75:ce:90:48:a5:a4:84:4a:59:
                    f9:42:db:78:d6:94:62:b5:17:eb:a4:c0:b3:7a:11:
                    8d:ce:22:3a:f7:02:69:69:93:9a:9a:e5:0c:18:cb:
                    ff:f2:19:59:bd:1b:68:5e:26:3a:f3:1a:02:3f:22:
                    4f:9e:01:86:58:ed:79:94:b7:d9:81:e5:ba:0c:30:
                    aa:3b:0d:8a:f3:44:a6:b3:ec:67:6e:fb:db:ec:d9:
                    3d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:82:10:21:A4:51:C5:FD:27:71:26:D6:06:7F:79:DD:BA:70:57:EC
            X509v3 Authority Key Identifier:
                keyid:1F:0A:9E:CF:CC:A8:83:CE:1A:8C:78:CF:15:AF:48:D9:EF:95:41:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Hwqez8yog84ajHjPFa9I2e-VQWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917286F/0ADA084653BD11F1B6592A56B9833773/Hwqez8yog84ajHjPFa9I2e-VQWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:97:01:f2:09:77:37:b9:1f:03:e6:b1:1c:89:12:7b:4c:15:
         b5:c3:21:e2:14:57:42:db:53:02:fd:95:9f:a4:a4:69:d4:88:
         a6:b5:99:57:07:55:8d:42:06:e1:39:8d:aa:a0:bc:e9:2c:11:
         82:57:a8:a1:f8:8e:b3:88:63:cc:8a:a4:49:06:35:41:a1:48:
         e4:f3:89:f3:58:43:26:ad:7d:38:16:2f:21:57:04:8b:19:78:
         7b:5d:4a:5d:02:03:5a:c3:f7:5f:61:85:b4:3a:b2:bf:12:5f:
         6a:4f:9b:1e:9c:79:d2:2e:d0:d6:5f:00:cc:13:6e:71:69:64:
         b5:4b:1a:79:1c:0c:42:1d:80:8a:b1:ac:26:98:38:ce:ec:0a:
         7d:a8:9d:df:56:57:ea:c8:50:09:79:e7:3c:aa:97:88:23:d6:
         fb:cd:c2:d6:98:79:6d:c1:15:1f:1b:4d:88:f5:b2:f5:5c:66:
         dd:0a:5c:80:31:e6:fd:a1:d7:78:f6:2a:81:18:3f:87:fe:0e:
         73:1a:27:58:01:49:51:b8:41:ca:f8:ff:04:20:69:8d:3b:64:
         99:11:f4:6d:dc:25:46:fd:ce:e8:47:62:ed:69:8b:b9:3f:89:
         bc:ed:23:cf:ae:5d:f3:11:27:3b:98:56:98:5f:86:49:1b:4e:
         c2:e3:ec:41
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
Mjg2RjExMC8GA1UEBRMoMUYwQTlFQ0ZDQ0E4ODNDRTFBOEM3OENGMTVBRjQ4RDlF
Rjk1NDE2QTAeFw0yNjA1MjEwOTIyNTJaFw0yNjA1MjgwOTIyNTJaMBgxFjAUBgNV
BAMTDTZhMGVjZWVkLTIyMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTCRb4paDmKGV27ufsFtcxr79jpSmvZKUcqKt6atTOsMxMtBldTpU5HJKqUVyi
wmF7l8aEHd8jDHMtUp4wBaY74LexyOmfJg9sDDsyX7Fe0LKwGaJy6pPBvVQUiEYF
f+LcwIOYYHm+iUnmS4i8TTWsv2W+9bLG7zvZlRAll9dsmiFhXC4o6nDaNmFPc4Et
1Y6YlHM1vcUOZZ/PLoyQlFfgKfqg1Bvk0PgH5nXOkEilpIRKWflC23jWlGK1F+uk
wLN6EY3OIjr3Amlpk5qa5QwYy//yGVm9G2heJjrzGgI/Ik+eAYZY7XmUt9mB5boM
MKo7DYrzRKaz7Gdu+9vs2T0nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2YIQIaRR
xf0ncSbWBn953bpwV+wwHwYDVR0jBBgwFoAUHwqez8yog84ajHjPFa9I2e+VQWow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyODZGLzBBREEwODQ2NTNC
RDExRjFCNjU5MkE1NkI5ODMzNzczL0h3cWV6OHlvZzg0YWpIalBGYTlJMmUtVlFX
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSHdxZXo4eW9nODRhakhqUEZhOUkyZS1WUVdvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy
ODZGLzBBREEwODQ2NTNCRDExRjFCNjU5MkE1NkI5ODMzNzczL0h3cWV6OHlvZzg0
YWpIalBGYTlJMmUtVlFXby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBJlwHyCXc3uR8D5rEciRJ7TBW1wyHiFFdC21MC/ZWfpKRp1IimtZlXB1WNQgbh
OY2qoLzpLBGCV6ih+I6ziGPMiqRJBjVBoUjk84nzWEMmrX04Fi8hVwSLGXh7XUpd
AgNaw/dfYYW0OrK/El9qT5senHnSLtDWXwDME25xaWS1Sxp5HAxCHYCKsawmmDjO
7Ap9qJ3fVlfqyFAJeec8qpeII9b7zcLWmHltwRUfG02I9bL1XGbdClyAMeb9odd4
9iqBGD+H/g5zGidYAUlRuEHK+P8EIGmNO2SZEfRt3CVG/c7oR2LtaYu5P4m87SPP
rl3zESc7mFaYX4ZJG07C4+xB
-----END CERTIFICATE-----
Generated at Thu May 21 12:32:56 2026 by rpki-client