Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
File:                     HA69woHQL52iTsEXS6nPGEWbk-A.mft (raw, json)
Hash identifier:          8qxTX3BBUyE/I1gmoAElXUW3K3WFDsf2D3Se9aBWIAY=
Subject key identifier:   35:4C:82:0B:23:FA:41:50:6D:7D:53:A2:E4:84:D1:9F:70:B5:69:94
Authority key identifier: 1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0
Certificate issuer:       /CN=A9179D1F/serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
Certificate serial:       044E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
Manifest number:          0449
Signing time:             Sat 04 Apr 2026 23:59:47 +0000
Manifest this update:     Sat 04 Apr 2026 23:59:47 +0000
Manifest next update:     Sat 11 Apr 2026 23:59:47 +0000
Files and hashes:         1: HA69woHQL52iTsEXS6nPGEWbk-A.crl (hash: UPxgWm7qxrhbk8yfzRQDCjFWMJw0gGujWbUnB6wK4Wo=)
                          2: ED816DEC95DA11EC993BD050C4F9AE02.roa (hash: rZv1KMTGOlj4reQzqn5o1UsO9w76HC0DphD5Iy3DD6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl
                          rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1102 (0x44e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179D1F, serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
        Validity
            Not Before: Apr  4 23:59:47 2026 GMT
            Not After : Apr 11 23:59:47 2026 GMT
        Subject: CN=69d1a5f3-e9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:4c:dc:15:91:7f:5b:e7:e5:cb:7e:ae:0a:
                    ed:45:33:b5:e1:e9:d4:1e:44:49:73:6f:8b:c5:52:
                    7f:32:b9:de:5f:dc:07:a0:8d:89:6c:9f:57:15:eb:
                    26:1d:ad:13:4a:66:5c:49:21:7c:0b:f6:62:f9:3f:
                    c1:f2:27:ce:3d:ed:ca:55:cf:5e:8d:ac:0f:9d:ed:
                    00:85:44:f8:6d:64:4b:bd:aa:72:0c:4e:1c:00:1b:
                    e9:0a:78:ed:19:07:88:1a:1d:2d:19:71:b9:f5:24:
                    8c:fb:95:7a:26:2c:fa:c6:07:83:4a:61:56:b1:65:
                    20:33:cc:da:ee:31:f6:9c:06:c4:66:ef:2b:a2:51:
                    1f:57:3b:97:28:7e:01:0a:99:d0:da:e6:84:28:b4:
                    d9:8b:97:dd:e5:03:ac:4d:1d:29:7d:f9:2d:ef:3e:
                    77:72:2a:ac:64:15:f4:c0:cd:7c:ba:25:ce:95:35:
                    78:ae:56:40:84:87:65:a8:2a:2e:29:59:cd:c9:20:
                    81:5a:fd:34:7a:d7:f9:3b:6d:da:02:0f:31:71:bb:
                    d6:f1:aa:05:38:50:b0:f9:c6:c2:57:d3:c1:82:f2:
                    79:37:89:66:0a:54:49:ec:e6:73:f5:c8:fd:8b:a8:
                    e9:dd:08:7c:f9:15:93:82:ba:71:ca:b0:7b:7e:fc:
                    3c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4C:82:0B:23:FA:41:50:6D:7D:53:A2:E4:84:D1:9F:70:B5:69:94
            X509v3 Authority Key Identifier:
                keyid:1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:46:fa:c2:23:97:c5:49:7c:3f:96:0d:12:eb:29:e7:8a:3a:
         88:36:92:3c:a2:f7:bb:78:da:cc:73:5e:99:e5:00:06:71:3c:
         f3:49:67:30:d4:74:b0:c8:80:3e:27:e3:bb:82:57:1d:ed:83:
         de:70:80:92:89:0f:17:ca:0e:92:b6:ce:5c:c3:5d:b3:22:8e:
         dd:19:aa:83:43:0f:c4:bd:3a:6a:e9:8c:37:b6:cf:3a:8c:00:
         d9:af:d5:4e:27:90:8b:66:6a:7f:a5:bd:dc:77:98:93:a7:c9:
         83:e8:bc:41:43:57:90:61:f0:13:47:ec:8e:c0:24:44:ca:47:
         6c:54:ab:39:ec:1d:9c:94:a9:1e:d5:c4:ae:43:52:4c:54:99:
         e2:a9:47:ac:de:bd:fa:2d:22:af:65:60:52:14:5a:29:9f:c4:
         6c:b2:a0:54:7e:5e:aa:fc:10:a3:b7:8e:46:f2:f8:e0:4b:9f:
         ea:3f:be:52:54:fa:5e:43:20:c7:33:16:75:9e:30:a9:3a:f5:
         62:33:aa:71:7d:8a:06:22:e7:7d:d9:69:9a:4b:b2:11:c0:80:
         f9:2a:a6:27:37:51:1d:00:14:b5:af:31:1a:e6:0e:db:91:ca:
         37:55:f2:2c:47:76:37:f4:20:42:02:1a:e6:d6:aa:e5:55:70:
         f5:bd:ec:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:00:29 2026 by rpki-client