Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
File:                     125huZ91Pv73mH9LNKitMyl4A6w.mft (raw, json)
Hash identifier:          hwLFtv6CZQFC30VOCsg/TgLQwiyyewzZdUImnz2a1eQ=
Subject key identifier:   EB:17:16:B4:B8:C9:5D:7B:F1:18:02:5B:C4:2D:FE:C1:0C:37:87:1D
Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC
Certificate issuer:       /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC
Certificate serial:       05B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
Manifest number:          05A5
Signing time:             Sat 04 Apr 2026 22:58:36 +0000
Manifest this update:     Sat 04 Apr 2026 22:58:36 +0000
Manifest next update:     Sat 11 Apr 2026 22:58:36 +0000
Files and hashes:         1: 125huZ91Pv73mH9LNKitMyl4A6w.crl (hash: c+TqwSFXdAgKtYMwJ7P4koccjq/hxhNmNIVpz2pumAg=)
                          2: 381AA9660EE711EC850D193BC4F9AE02.roa (hash: CcimU5bAMxt6xcfnTJqAhexXFkbfOFwQL0JFGN/P7Es=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl
                          rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1456 (0x5b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187C44, serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC
        Validity
            Not Before: Apr  4 22:58:36 2026 GMT
            Not After : Apr 11 22:58:36 2026 GMT
        Subject: CN=69d1979c-edf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:07:2f:0c:bd:f1:d0:d2:16:08:c5:55:68:a5:
                    54:d0:4b:f8:e6:ef:2e:c4:71:f7:aa:c5:fe:3c:5b:
                    ee:86:27:9d:d3:6c:85:76:ff:db:73:c0:17:26:05:
                    fb:ce:d9:68:59:3f:7b:3c:96:44:7c:f2:80:8b:6c:
                    74:dd:b6:5a:87:d8:1e:93:62:ee:39:64:08:47:9e:
                    c6:25:ba:2f:9e:9e:e4:b9:e9:ce:70:d2:c7:ca:ac:
                    ce:10:4b:53:4d:95:2e:88:9d:fd:4d:b8:e9:1e:28:
                    1e:9e:ce:48:47:f8:e5:85:61:40:57:e0:e8:9d:c1:
                    ea:81:1e:56:38:8f:d9:71:18:5e:d6:75:16:7c:7a:
                    22:a9:d6:61:c8:4b:08:79:f6:cd:24:e9:7d:46:11:
                    e3:c0:5d:91:06:ad:37:62:e9:2b:1f:c4:94:a4:29:
                    dd:1a:85:e4:e6:df:6c:53:c5:15:f6:3a:7d:45:95:
                    d7:04:1a:3e:00:e6:5f:fb:ee:ef:e6:db:a6:ce:f0:
                    eb:1f:ab:ae:b9:55:0f:0e:70:22:da:b9:8b:54:ef:
                    03:7e:64:28:7c:73:72:34:29:29:ef:d3:65:da:13:
                    75:3b:f6:36:b3:ab:6d:a1:fc:76:76:97:2c:f4:86:
                    bb:87:2b:27:84:fc:d8:fd:bb:52:c1:46:cc:85:eb:
                    1b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:17:16:B4:B8:C9:5D:7B:F1:18:02:5B:C4:2D:FE:C1:0C:37:87:1D
            X509v3 Authority Key Identifier:
                keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b3:3d:ce:65:bb:ac:7e:d1:70:8d:4e:a1:e0:73:77:2a:20:
         97:88:07:8e:4f:4b:ad:5c:c7:87:da:ee:45:41:a0:8f:8d:05:
         74:da:dc:b5:e1:90:34:1a:a6:c4:d6:10:8f:62:6f:6b:37:42:
         21:58:af:22:aa:48:b9:91:e4:36:07:16:3c:53:98:79:9d:f2:
         a5:bc:52:98:cd:be:fd:a5:d8:13:75:70:27:9f:d1:77:a6:e4:
         3a:16:c2:7e:49:be:e8:38:a7:d1:a9:bb:22:f4:8f:bd:3b:b4:
         f3:84:c7:07:af:cc:9a:d2:5f:b8:a6:00:eb:28:42:48:a1:4a:
         06:b2:6e:d5:7c:88:5d:44:eb:c9:80:ca:60:1e:1b:40:d9:5d:
         cc:9e:5a:3b:5d:49:aa:a6:1e:1a:fc:15:2a:f9:e5:f4:a8:71:
         f1:66:c6:86:1d:1b:c4:1e:85:53:1a:7d:1a:b6:77:70:f9:30:
         25:f2:2b:6d:18:c5:6a:4f:8b:8f:00:c2:a4:ed:a2:ba:51:8c:
         b7:e3:9d:94:56:31:dd:aa:c7:29:55:91:05:de:ba:23:9f:85:
         71:65:a8:c5:a8:90:b6:3a:ee:fe:1c:5f:ee:2d:44:d7:cb:ad:
         81:72:6f:10:ad:82:0f:58:6b:6f:31:a9:7b:49:30:8d:5b:8c:
         fc:eb:f5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:38:11 2026 by rpki-client