Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
File:                     HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json)
Hash identifier:          jbRRzpXI2LQAng2nWaJ/mJAyx1FX11bYElWgKO9dBHc=
Subject key identifier:   10:69:AB:EF:CA:3D:02:F0:3C:BE:CE:A9:DD:CB:4D:02:02:A4:00:E1
Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2
Certificate issuer:       /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
Certificate serial:       04CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
Manifest number:          04C0
Signing time:             Thu 12 Mar 2026 23:28:27 +0000
Manifest this update:     Thu 12 Mar 2026 23:28:26 +0000
Manifest next update:     Thu 19 Mar 2026 23:28:26 +0000
Files and hashes:         1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: V+9OSN+rP6HexOSfpz3Zmn72Gae/7KNUop/1IqQnurc=)
                          2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: 31ILuWSDcxMEoCJtg/DemIqgF6JDQtA4+Gr57AYJDnI=)
                          3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 2RxAlS/oLuf7Y3VMI5wk5JfPIc2P4lPgJltprUhrclU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl
                          rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1230 (0x4ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
        Validity
            Not Before: Mar 12 23:28:26 2026 GMT
            Not After : Mar 19 23:28:26 2026 GMT
        Subject: CN=69b34c1a-94f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bd:a6:68:c9:b4:26:2d:d1:e8:c5:83:13:14:
                    8d:81:b3:97:f4:5a:e0:f4:41:ce:9b:5d:ba:02:d2:
                    58:d1:3b:27:36:b5:aa:68:33:e3:1e:1d:d6:2c:4c:
                    76:fa:24:ad:75:3c:09:76:6e:20:40:9f:78:7c:ca:
                    68:46:c6:01:4a:51:6f:1b:fe:f3:0d:2d:ec:fa:f1:
                    cc:08:b7:6d:0b:95:85:17:86:a1:66:7e:a8:5f:3e:
                    26:9e:99:b5:95:fd:83:37:1d:d1:0f:6c:91:bc:57:
                    5c:ce:94:b9:9c:0a:cc:52:79:be:6e:cb:45:29:c0:
                    23:ee:14:e5:a2:24:05:e0:52:8b:cb:64:3c:61:29:
                    35:61:ff:37:55:f7:7d:f6:e8:aa:3a:cd:08:9f:c4:
                    0f:39:24:9d:f7:e1:f7:7c:a8:b2:57:50:4f:00:8d:
                    8f:ef:d6:88:fc:3d:6d:b4:a2:a1:ee:24:c0:f4:d9:
                    99:fd:69:f4:e1:98:e0:1c:1c:0a:18:69:d0:47:37:
                    27:48:21:2f:a4:f2:d6:87:eb:7e:15:18:86:e7:04:
                    23:8f:ca:50:a3:8a:37:c5:79:d0:3a:bd:01:41:f5:
                    dc:6e:75:2d:a3:c7:83:64:e9:aa:cc:47:3a:9a:ae:
                    e2:b2:75:c9:ae:29:21:e8:61:17:a5:64:c8:a0:74:
                    23:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:69:AB:EF:CA:3D:02:F0:3C:BE:CE:A9:DD:CB:4D:02:02:A4:00:E1
            X509v3 Authority Key Identifier:
                keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:da:f2:e4:05:d6:8f:05:a1:53:90:57:a5:86:d8:a2:bf:fe:
         15:ac:69:1c:cc:a6:01:86:0e:53:d2:c1:f8:b9:ca:73:2c:52:
         3b:29:bd:d8:b8:31:56:ff:d3:3b:38:eb:4c:07:23:54:5e:b4:
         e8:96:02:96:06:33:7f:11:97:42:b3:56:de:c4:98:57:b6:c4:
         c9:de:f0:1f:98:48:ed:0c:12:11:0b:27:03:87:bf:5d:77:f6:
         01:91:e4:b7:8e:73:b1:8a:59:1f:86:07:bb:c0:49:fc:88:38:
         c5:17:02:ef:27:15:3a:77:a9:6f:10:bf:c4:7d:5b:53:01:ee:
         33:63:03:ae:b5:98:7e:d5:d5:1f:b1:30:c5:7e:30:10:df:0d:
         bd:f9:be:c0:df:9f:1b:a1:75:d5:51:35:b9:e1:7d:55:41:b6:
         11:93:b2:46:d4:af:3b:1f:28:56:7a:95:d9:38:0a:28:ee:96:
         fb:a8:7c:dd:ea:a4:76:b9:31:40:2b:af:53:2e:68:82:67:34:
         cc:db:4d:51:d9:8f:f9:19:3f:e4:0d:56:ce:f4:23:01:da:a5:
         3d:7b:8e:71:0e:15:9d:9b:2f:d3:13:10:db:7d:5d:f6:4a:10:
         df:8d:eb:38:10:f2:4e:a3:8d:20:8e:28:3a:8f:7a:df:cc:1a:
         75:1f:16:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 02:49:15 2026 by rpki-client