Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
File:                     _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json)
Hash identifier:          n/wqq7sdV1uQEKfOoQAWOY0gKyvJVcoYFYzv0OGAV50=
Subject key identifier:   32:D7:A2:03:8C:A9:9E:6C:E2:03:96:37:FF:50:36:07:36:DD:E2:24
Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
Certificate issuer:       /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Certificate serial:       042E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
Manifest number:          0419
Signing time:             Thu 21 May 2026 00:28:29 +0000
Manifest this update:     Thu 21 May 2026 00:28:29 +0000
Manifest next update:     Thu 28 May 2026 00:28:29 +0000
Files and hashes:         1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: t579X/CKiuBao3avsl9He0MkzqI1ewirs7+RdfN+iUM=)
                          2: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: kkADNHMGho1cJcxgujF7FqwJofNaLhAL0T7zwMKpQTE=)
                          3: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: gYFwC5k2adNiGUC8mTnrPd2F0ktvtrVBLWYeACoVYqU=)
                          4: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: IqecsrYsQpIp/5eCM+4hpeu8TBUj8KVmWEPSTo60jis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
                          rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
        Validity
            Not Before: May 21 00:28:29 2026 GMT
            Not After : May 28 00:28:29 2026 GMT
        Subject: CN=6a0e51ad-e57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f7:2b:67:29:97:c8:0e:c4:0b:ea:2d:ed:ee:
                    35:11:f4:dd:3b:57:47:02:a9:c9:8a:21:6f:8b:be:
                    6d:5a:ed:a7:8b:f7:4e:15:95:c9:e6:65:00:48:26:
                    35:e4:1b:b5:ba:73:3e:7e:b9:13:27:e4:13:49:34:
                    52:66:51:fe:d3:72:f2:41:72:db:30:5f:bc:ff:e4:
                    c2:1b:e5:5c:18:b4:67:e0:c0:0f:f1:33:0e:eb:97:
                    43:ac:d8:e6:56:29:b9:41:dc:bf:5e:7e:a0:12:e5:
                    22:e3:01:4c:ee:a3:ec:dd:ae:47:18:6c:2c:99:2e:
                    dc:53:4a:21:8c:7c:fa:66:69:19:35:dc:ae:ed:cf:
                    cf:4d:2c:ed:bb:f6:61:90:81:2b:56:80:64:10:eb:
                    61:2f:98:c1:94:8b:3b:30:71:e7:1e:a2:52:46:73:
                    59:f4:02:f5:c3:c1:c1:07:e6:af:65:ab:d8:fc:df:
                    74:f7:87:fb:89:70:c9:69:61:e1:1d:fd:c8:3f:22:
                    c3:08:3e:c3:de:57:37:29:be:8f:1b:38:ac:1d:fc:
                    30:40:89:2a:3c:9c:23:43:b1:21:9a:be:d4:be:c5:
                    61:04:7e:4c:9e:28:6f:ba:54:3a:6d:4d:05:7a:07:
                    74:44:eb:e0:5b:e3:80:dc:f7:3c:be:47:93:e0:d6:
                    ea:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D7:A2:03:8C:A9:9E:6C:E2:03:96:37:FF:50:36:07:36:DD:E2:24
            X509v3 Authority Key Identifier:
                keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:63:c0:2f:1b:4a:40:d7:3f:00:38:40:fa:0c:85:95:39:da:
         4c:7a:4a:22:55:16:8d:03:b6:db:18:9a:4f:b8:75:be:97:89:
         71:b8:c3:0d:5c:6b:9b:d2:0c:91:e6:01:d2:e7:34:b0:c2:44:
         6a:06:ea:6e:92:2c:41:ba:03:48:8a:24:7b:b5:a8:69:77:2e:
         80:58:d2:09:39:8d:6f:6e:47:0e:7d:4f:d4:fb:b8:f8:b5:59:
         39:d3:b1:65:39:42:9d:ed:e7:8c:4d:de:f1:58:a9:ef:95:2c:
         cf:6a:5e:8e:59:0e:86:76:f1:54:d0:4b:67:c9:46:1a:f7:c9:
         6f:f9:90:55:3d:60:5c:31:05:94:aa:55:e3:c0:07:8e:c2:8c:
         d9:2e:ea:cc:b1:a3:ad:64:a7:38:16:a4:0e:d8:58:37:22:8d:
         cb:24:eb:1a:35:89:63:7a:9f:00:2f:7a:1e:0d:e7:30:a5:d0:
         73:7d:e4:8c:8c:e4:09:33:4e:a7:56:9d:70:e7:8e:4f:02:70:
         3e:78:59:3d:75:26:bd:d8:44:1a:81:81:04:14:87:95:b1:06:
         22:6d:c7:7e:4f:b9:58:57:38:a0:85:c9:95:78:05:5b:65:c4:
         9b:0e:ac:8a:10:c7:aa:8d:80:20:2f:95:1f:14:1d:1d:9e:ec:
         ff:0d:61:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:06 2026 by rpki-client