Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
File:                     0hsNWsWvkZAPUK2WADMT5R7WChA.mft (raw, json)
Hash identifier:          QS7b2FmPT5I5Eqq+I73+GG5iItamzPddkcVZ6qzGwxo=
Subject key identifier:   4B:F2:CC:28:A0:8D:92:97:A3:7C:AA:75:C3:D9:50:F8:DE:A9:36:C6
Authority key identifier: D2:1B:0D:5A:C5:AF:91:90:0F:50:AD:96:00:33:13:E5:1E:D6:0A:10
Certificate issuer:       /CN=A91A0E9D/serialNumber=D21B0D5AC5AF91900F50AD96003313E51ED60A10
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
Manifest number:          015D
Signing time:             Wed 19 Aug 2026 05:48:46 +0000
Manifest this update:     Wed 19 Aug 2026 05:48:46 +0000
Manifest next update:     Wed 26 Aug 2026 05:48:46 +0000
Files and hashes:         1: 0hsNWsWvkZAPUK2WADMT5R7WChA.crl (hash: gGwG+ydFqS1ph7i4MwNoCS/LrF0Z2IxiZCmkDZIBzcQ=)
                          2: 3996C94896D211EF924C486FC4F9AE02.roa (hash: RSWSsqKVGFqnc5MjQ5V0wfdqY1cc/uC9LzB1g38vtcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.crl
                          rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0E9D, serialNumber=D21B0D5AC5AF91900F50AD96003313E51ED60A10
        Validity
            Not Before: Aug 19 05:48:46 2026 GMT
            Not After : Aug 26 05:48:46 2026 GMT
        Subject: CN=6a8543be-0fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c3:85:97:85:c1:8d:05:51:2d:cc:bc:a9:f9:
                    a2:6d:cb:45:60:c4:1c:6e:e1:e1:c8:c7:74:c2:ac:
                    8b:c2:9e:0b:52:35:bd:ff:e2:c3:f5:21:76:73:84:
                    5d:42:2f:12:0c:1f:90:c5:c1:77:c1:9f:ee:c2:0d:
                    56:36:09:67:d4:e5:78:4a:d7:4e:72:b2:eb:22:1c:
                    46:ba:58:48:c5:0a:59:19:a5:a0:1e:3f:87:17:89:
                    89:16:c0:d7:77:d0:45:92:4a:00:ab:eb:cb:67:53:
                    cf:02:9e:d4:91:88:f3:36:bf:0c:dc:5c:99:59:43:
                    c3:45:4d:18:27:d1:e7:32:34:59:3c:52:35:43:6c:
                    75:6d:79:bd:bd:56:d7:8f:14:75:8f:97:fb:97:02:
                    cc:df:62:ae:0b:fc:a6:c3:51:b8:56:41:6a:6d:66:
                    f8:7e:bf:19:4d:a1:a8:0d:05:6d:dd:ca:9d:df:cb:
                    ab:c5:af:c5:75:4d:32:d2:ca:83:e6:68:08:28:0b:
                    3e:29:aa:a1:a9:87:d3:1f:ad:36:cb:dd:74:19:ac:
                    fd:c0:de:0c:4d:61:cb:ee:db:6b:61:22:e3:bf:12:
                    f6:a4:f2:8f:16:5b:16:99:7e:04:7e:b5:53:c5:ca:
                    ba:e7:81:ee:bf:c1:66:12:51:f4:69:6a:bc:3e:d2:
                    94:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F2:CC:28:A0:8D:92:97:A3:7C:AA:75:C3:D9:50:F8:DE:A9:36:C6
            X509v3 Authority Key Identifier:
                keyid:D2:1B:0D:5A:C5:AF:91:90:0F:50:AD:96:00:33:13:E5:1E:D6:0A:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:a3:97:ea:12:0e:8f:f6:72:b1:12:a3:e9:bb:9a:09:f1:dd:
         9a:b0:36:3a:83:46:db:a1:33:6a:67:c9:e3:14:50:ce:22:9d:
         4a:38:7e:04:56:d2:e9:7d:3e:43:9b:5c:7d:c3:6f:ff:8a:08:
         71:9b:4e:f0:4e:9d:07:2c:87:16:74:d9:cc:91:49:4b:be:bf:
         d6:10:63:c9:a4:c5:87:e4:a4:64:e9:cb:14:e8:83:cc:f4:35:
         06:cd:d1:41:5a:7b:82:02:bf:b5:9f:3f:c2:b7:3c:33:73:10:
         5f:3c:30:e3:30:b7:00:38:61:d0:9a:b3:ea:da:56:9e:08:09:
         69:44:da:47:4c:dc:41:ea:e1:3b:ea:c2:05:2c:4a:4f:e4:6e:
         28:3f:e0:0e:e7:9a:42:50:33:da:ad:6e:39:c9:ea:37:9c:0e:
         16:ab:f6:2e:4e:56:16:0b:10:46:10:60:d0:5d:14:85:86:8b:
         12:02:0a:78:a2:10:87:15:43:17:6b:01:e8:ff:bb:78:1b:9c:
         75:1d:0f:e9:f5:9a:fc:fc:82:d8:1c:db:40:d7:3d:37:b4:a7:
         16:ff:88:e7:8c:be:a0:84:c9:8b:0e:7a:31:d3:63:30:62:7e:
         72:f3:65:91:55:ca:66:19:3c:1d:80:0b:9e:ad:27:f1:58:96:
         dc:e2:79:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:31 2026 by rpki-client