Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
File:                     h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft (raw, json)
Hash identifier:          24kCITQ7IDLs0tb9qTIkC5rzhRh4TE6zCAtsMDoLnUI=
Subject key identifier:   E2:72:2B:10:B1:9D:AB:EF:E8:EE:AF:9E:0E:6D:C0:25:7B:7E:D5:79
Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
Certificate issuer:       /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
Manifest number:          F3
Signing time:             Sun 05 Apr 2026 05:53:45 +0000
Manifest this update:     Sun 05 Apr 2026 05:53:45 +0000
Manifest next update:     Sun 12 Apr 2026 05:53:45 +0000
Files and hashes:         1: h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl (hash: Prur0pt1w9JQVk900jMV8Du8ttNIkcEpo24kOWKZ7Ak=)
                          2: C8D5160AE75E11EF97E59E40C4F9AE02.roa (hash: P4tVkKssSKb9dDeUTAtVa6Ci3IKXk3pij9DywFDumYU=)
                          3: 8A991E5AD6DC11EF9E9B2B15C4F9AE02.roa (hash: XNgGFgwjyc461p4JNKdvJk4zW9gJQhSshCp4+fjMbAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
                          rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
        Validity
            Not Before: Apr  5 05:53:45 2026 GMT
            Not After : Apr 12 05:53:45 2026 GMT
        Subject: CN=69d1f8e9-3fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bb:b9:3c:1f:73:e6:3a:40:8c:1a:53:d0:4d:
                    f8:5f:a2:b3:5a:26:c9:74:b8:e2:44:c7:0a:8f:4a:
                    f2:03:3a:40:b2:02:09:69:b2:1b:20:d1:df:38:e1:
                    74:da:6c:5c:37:37:fa:8a:fb:0d:10:cd:1b:0f:99:
                    6d:0f:77:8b:cf:10:b6:5d:cb:0c:57:e4:c9:fd:3e:
                    5a:99:8c:66:99:8a:7b:85:8a:fb:25:17:7b:82:70:
                    20:8c:25:e1:03:84:ee:28:2a:ec:4f:69:6f:b6:b2:
                    10:b8:d7:77:ab:5a:fc:d2:4a:86:7e:cd:2b:70:55:
                    90:4a:61:d3:56:f7:83:bd:c5:0a:3c:df:02:81:a6:
                    07:d6:3d:c6:33:5b:ca:7d:62:a1:bc:3e:16:a6:c1:
                    28:9f:df:82:f1:f7:93:96:d2:74:64:d7:47:5a:8a:
                    82:15:33:5d:31:3b:7e:a1:c0:d9:df:dd:a3:b0:68:
                    59:aa:1e:6d:0f:a7:34:bb:ed:3e:57:bf:f4:55:2b:
                    0c:99:8b:88:17:3d:e5:3f:de:39:fa:da:94:70:1d:
                    e9:12:d9:dc:33:b2:c1:5d:b0:e7:05:a2:77:fc:5d:
                    10:7f:6d:77:58:bb:af:69:b2:ac:22:c4:f1:54:11:
                    d0:33:0b:f8:4c:83:d8:ff:42:81:02:dc:77:2a:49:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:72:2B:10:B1:9D:AB:EF:E8:EE:AF:9E:0E:6D:C0:25:7B:7E:D5:79
            X509v3 Authority Key Identifier:
                keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:aa:e2:92:42:0a:88:92:36:69:af:d2:32:fa:a4:6c:87:6d:
         b5:d6:26:00:cc:75:49:2c:5c:49:c5:d8:a4:1f:ea:9c:8d:1f:
         0e:8b:31:c4:77:dc:d5:ee:a9:42:b1:fc:80:7a:22:71:13:ae:
         94:d7:59:5d:98:a5:70:08:db:50:68:a3:41:bb:57:2a:ed:35:
         67:ee:3a:3d:3d:03:b6:00:98:cf:36:71:ea:85:2a:0b:93:bc:
         88:fa:0f:49:9d:3b:b7:2d:53:4b:5b:68:55:5a:d4:da:67:49:
         41:6f:ec:50:4d:c5:3c:1b:8a:bb:de:a3:3f:ff:ca:6f:cc:7d:
         55:9b:2e:6b:3a:b9:47:b0:5a:19:71:ba:e4:45:66:9f:57:f7:
         1b:b9:9d:69:34:63:3d:bb:01:76:4d:0d:84:e8:aa:f9:e7:91:
         b1:69:07:f0:bd:43:62:73:54:0c:22:e5:db:e9:44:a9:15:d3:
         af:75:7a:c3:57:19:9e:95:75:fd:ec:43:96:4b:f6:f7:69:9c:
         51:cc:24:73:a3:34:46:a8:40:0d:52:08:2a:39:9a:21:2e:92:
         65:96:58:e0:c1:ed:88:ce:6b:6b:81:75:62:51:db:9f:98:f1:
         d4:ea:e3:59:25:ab:dc:28:41:23:4c:09:47:86:dd:b5:c3:02:
         b5:fc:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:39 2026 by rpki-client