Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
File:                     HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft (raw, json)
Hash identifier:          QqyPM/CdZLli0Bl29XyH+ABMEJyYq0HTaLHyOAbcNs0=
Subject key identifier:   7D:AC:E8:45:1B:00:57:20:50:69:67:8D:EE:76:17:CA:BB:15:10:03
Authority key identifier: 1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
Certificate issuer:       /CN=A919EF2B/serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Certificate serial:       0374
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
Manifest number:          036E
Signing time:             Sun 05 Apr 2026 00:37:35 +0000
Manifest this update:     Sun 05 Apr 2026 00:37:34 +0000
Manifest next update:     Sun 12 Apr 2026 00:37:34 +0000
Files and hashes:         1: HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl (hash: Y9cUWBeAVK2CBPKtPiZ6N/4F4U/iY0EjM+3Gr+3WBV8=)
                          2: 830C9F90EBCA11ECA2A1747EC4F9AE02.roa (hash: 3NxrjtF1LNJgYupbzMrriTN+tRYzA8aged2EpehvID4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
                          rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884 (0x374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF2B, serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
        Validity
            Not Before: Apr  5 00:37:34 2026 GMT
            Not After : Apr 12 00:37:34 2026 GMT
        Subject: CN=69d1aece-b4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:97:d0:0c:1d:5f:78:43:64:40:c8:23:4a:
                    b0:45:5f:c5:e8:98:7c:5b:ae:7e:27:02:da:bf:16:
                    05:bd:d2:a0:af:ef:6e:22:9f:83:84:1c:08:5a:53:
                    50:a7:ff:5c:4e:9e:05:83:e8:6c:e6:f4:bd:a0:38:
                    f8:b5:0e:6d:4f:0e:7f:fe:a0:23:b8:cd:e9:d8:e3:
                    fb:f1:88:eb:9d:f6:99:37:72:c0:9c:82:05:0d:7f:
                    62:9c:a5:0d:ff:83:ce:ff:bb:b3:01:1e:14:6a:cc:
                    05:4e:0b:4b:4f:59:40:e4:96:04:74:42:ca:93:75:
                    92:f2:d1:dc:fc:6c:64:f7:55:23:7d:fb:e8:ff:6a:
                    9c:07:74:aa:5a:38:6c:ed:c1:2c:6d:df:d6:d9:1c:
                    b9:d1:fa:62:ce:73:cd:ee:5c:fd:41:d3:43:8d:47:
                    fc:b6:c1:f2:f8:00:0a:15:86:dd:38:f4:ff:94:dc:
                    0d:80:c0:bd:15:e4:7e:98:27:3e:44:92:80:1e:b1:
                    06:21:77:e7:50:59:a6:2e:d3:29:ac:07:35:de:7c:
                    fa:fd:12:d1:52:11:82:60:f5:f0:b4:db:fa:eb:4f:
                    a6:ad:bb:33:e6:0c:6a:ed:a2:9e:8e:83:b2:3e:6b:
                    b3:05:01:cd:2f:73:7a:9e:2e:99:2b:a9:c9:6d:14:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AC:E8:45:1B:00:57:20:50:69:67:8D:EE:76:17:CA:BB:15:10:03
            X509v3 Authority Key Identifier:
                keyid:1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7c:d7:86:f0:b4:f1:6a:1f:ea:8c:48:5b:3b:a2:04:7c:9e:
         60:d9:86:08:91:0f:6c:09:6c:e9:8d:29:15:cd:ff:eb:03:af:
         f8:92:47:2f:93:62:31:df:82:3e:dc:30:c6:ff:48:15:b0:70:
         0d:82:bd:9e:45:a2:ec:14:d6:95:58:59:4c:5a:7e:a9:8e:e3:
         74:18:29:1b:85:d3:f8:a6:07:dc:42:f1:7a:6b:7c:13:37:bc:
         47:9f:69:1d:21:f4:ad:f6:9f:d7:e2:ba:e4:25:29:61:59:67:
         44:47:c9:63:dc:0f:11:6f:60:78:38:ac:47:9c:38:ce:4a:26:
         d2:45:9f:20:3b:27:a1:06:9e:64:34:4d:ae:e0:12:1d:e3:ae:
         dc:c5:80:e9:4e:a9:ec:3c:c4:03:8d:81:d9:47:15:46:5a:20:
         15:3b:72:3b:05:85:da:90:f0:ca:46:e5:8e:92:3a:4a:55:e1:
         9e:65:c5:bb:d5:95:e0:89:d9:e2:0b:5f:f3:7d:a3:e7:64:f7:
         9c:5e:55:c1:e2:12:80:8b:25:5b:88:88:39:1f:89:1e:18:11:
         23:50:15:ef:9f:f6:74:80:db:5b:49:fa:3d:db:79:5e:fb:b3:
         eb:9c:87:29:b2:49:37:19:2d:37:4c:7b:6c:b2:f3:8a:07:13:
         88:87:ec:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:35 2026 by rpki-client