Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
File:                     hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json)
Hash identifier:          JW+i8YnIJwE5+CAduq/xoF9ABBPDFzqO6PnPSmESUqU=
Subject key identifier:   9E:31:04:76:60:73:A7:F6:8B:9F:33:49:49:5A:5A:65:DA:2B:4E:FF
Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
Certificate issuer:       /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
Manifest number:          0156
Signing time:             Fri 17 Apr 2026 04:49:26 +0000
Manifest this update:     Fri 17 Apr 2026 04:49:25 +0000
Manifest next update:     Fri 24 Apr 2026 04:49:25 +0000
Files and hashes:         1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: FvgvcPGPhgHpo5QezLQNMcG133G9CKBhGIQTJQ3zsbw=)
                          2: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: 9GZpU2PHliAK9NY+OWOq5Tt+JHpwX/IWIj0455bKALU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
                          rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
        Validity
            Not Before: Apr 17 04:49:25 2026 GMT
            Not After : Apr 24 04:49:25 2026 GMT
        Subject: CN=69e1bbd6-bf35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:4f:30:95:fa:99:cc:11:b9:2f:6f:b6:6a:
                    32:fe:d8:8f:34:ed:20:08:ec:4b:93:3a:f2:de:5c:
                    db:32:67:c9:7f:c4:74:f1:d0:8b:b6:e6:09:a1:1e:
                    17:f4:4d:e9:69:fe:9c:7e:c9:a7:3f:f7:a4:ee:4e:
                    a1:4b:ea:54:71:e7:9d:8e:e2:90:a9:d0:18:2d:05:
                    98:4c:f0:8e:43:eb:e4:2e:2f:91:20:fe:48:09:9d:
                    e3:fe:62:c7:fd:ed:ec:e7:24:05:b3:06:66:1d:4a:
                    77:c8:a5:38:26:ae:3c:b4:20:a8:dc:6d:fc:06:05:
                    87:05:ec:21:30:db:f1:21:47:87:40:81:bf:80:81:
                    f0:5b:27:0a:34:e3:e0:46:42:00:a2:3b:21:41:94:
                    a5:66:4e:d7:12:4c:38:d2:ea:a6:c6:ec:e5:8c:e5:
                    49:b9:43:ac:cf:15:d7:75:8d:10:87:63:66:68:f8:
                    9a:cc:a3:4d:75:15:cc:1d:f6:6e:58:be:1a:f9:89:
                    7a:c5:7e:5b:69:d4:b3:dc:f2:28:7a:e9:3e:d2:00:
                    e1:d1:6f:b9:b0:f8:7d:de:e6:9b:69:84:f6:14:b8:
                    a2:93:cb:69:1a:df:e5:8d:85:2d:27:5c:c8:a1:26:
                    d9:65:2f:6d:d7:2d:ab:2c:a6:8e:2d:ba:61:8c:81:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:31:04:76:60:73:A7:F6:8B:9F:33:49:49:5A:5A:65:DA:2B:4E:FF
            X509v3 Authority Key Identifier:
                keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cf:30:19:10:10:7b:6d:fe:72:11:c9:60:48:b2:4f:0d:23:
         f9:55:87:56:d7:52:95:3a:23:8a:fa:03:da:31:83:3e:fe:00:
         a1:bf:1e:81:a6:63:4c:5d:86:6e:00:74:2b:75:1f:67:bb:7f:
         c7:90:b6:e7:41:52:a8:f1:e7:ea:28:cf:d7:87:42:fd:98:6f:
         bd:a1:36:97:07:b8:d5:43:32:f7:b6:fd:05:0e:e9:51:56:8a:
         5a:79:39:9c:eb:8b:9d:19:f2:86:19:47:b0:c6:b4:57:07:d7:
         ae:d4:87:d3:b3:45:82:14:80:50:6f:02:0e:83:af:e8:4f:64:
         17:fa:dd:e7:cc:4e:a6:b1:bb:c7:2b:a6:a4:ed:fd:74:60:cb:
         da:37:23:7f:46:92:00:25:82:f6:25:39:bd:8e:43:cf:12:4f:
         18:0f:8a:dd:cc:74:a5:89:08:64:c3:cf:59:a8:4f:8d:21:58:
         35:ab:0f:92:b6:16:df:f0:2e:c2:4f:ae:36:ab:4c:5e:d1:06:
         4c:ca:74:74:06:85:a3:1f:a3:85:b9:f5:79:38:c4:6c:d7:09:
         2e:31:7b:42:e1:a9:9d:d3:6a:2a:f8:b6:d1:53:58:cf:7b:d6:
         6e:bf:5f:07:2c:f5:27:56:45:ff:1e:50:00:76:f6:15:37:e5:
         fc:6d:72:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBRTIxMTAvBgNVBAUTKDg0NUQ4OEUwQTIxNTE0NUYzNjdEOTMwNEJGM0Y3MUFF
RThFQjRDMkQwHhcNMjYwNDE3MDQ0OTI1WhcNMjYwNDI0MDQ0OTI1WjAYMRYwFAYD
VQQDEw02OWUxYmJkNi1iZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmCJPMJX6mcwRuS9vtmoy/tiPNO0gCOxLkzry3lzbMmfJf8R08dCLtuYJoR4X
9E3paf6cfsmnP/ek7k6hS+pUceedjuKQqdAYLQWYTPCOQ+vkLi+RIP5ICZ3j/mLH
/e3s5yQFswZmHUp3yKU4Jq48tCCo3G38BgWHBewhMNvxIUeHQIG/gIHwWycKNOPg
RkIAojshQZSlZk7XEkw40uqmxuzljOVJuUOszxXXdY0Qh2NmaPiazKNNdRXMHfZu
WL4a+Yl6xX5badSz3PIoeuk+0gDh0W+5sPh93uabaYT2FLiik8tpGt/ljYUtJ1zI
oSbZZS9t1y2rLKaOLbphjIGBJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4xBHZg
c6f2i58zSUlaWmXaK07/MB8GA1UdIwQYMBaAFIRdiOCiFRRfNn2TBL8/ca7o60wt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFFMi8yNkE2RjQ0QzNC
QUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZGODJmWk1Fdno5eHJ1anJU
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2hGMkk0S0lWRkY4MmZaTUV2ejl4cnVqclRDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEFFMi8yNkE2RjQ0QzNCQUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZG
ODJmWk1Fdno5eHJ1anJUQzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYs8wGRAQe23+chHJYEiyTw0j+VWHVtdSlTojivoD2jGDPv4Aob8egaZjTF2G
bgB0K3UfZ7t/x5C250FSqPHn6ijP14dC/ZhvvaE2lwe41UMy97b9BQ7pUVaKWnk5
nOuLnRnyhhlHsMa0VwfXrtSH07NFghSAUG8CDoOv6E9kF/rd58xOprG7xyumpO39
dGDL2jcjf0aSACWC9iU5vY5DzxJPGA+K3cx0pYkIZMPPWahPjSFYNasPkrYW3/Au
wk+uNqtMXtEGTMp0dAaFox+jhbn1eTjEbNcJLjF7QuGpndNqKvi20VNYz3vWbr9f
Byz1J1ZF/x5QAHb2FTfl/G1yMw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:58 2026 by rpki-client