Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
File:                     HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json)
Hash identifier:          8FgWOTrTArALBzOe7kXcodlhZSp+Hk2MCRDaetc2ZQA=
Subject key identifier:   01:8B:AE:CC:31:5A:18:74:A3:FA:E8:57:07:40:95:CD:29:E7:17:E8
Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
Certificate issuer:       /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Certificate serial:       0292
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
Manifest number:          0284
Signing time:             Mon 11 May 2026 01:54:03 +0000
Manifest this update:     Mon 11 May 2026 01:54:02 +0000
Manifest next update:     Mon 18 May 2026 01:54:02 +0000
Files and hashes:         1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: 7GKylUrc9oWIXqp/+yw88IpfOx8EZyjkKZfiOzghAQM=)
                          2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: HKqMxuCnXZUWQyUBbuwuWp132t+lLGFUZQke8Tou0tg=)
                          3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: MRMfTNKXALiUr+Ks/cwLuFR+d+i53M1YUPrYan/sCwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl
                          rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
        Validity
            Not Before: May 11 01:54:02 2026 GMT
            Not After : May 18 01:54:02 2026 GMT
        Subject: CN=6a0136ba-4a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:7d:e2:df:31:83:cd:28:67:c9:7e:cc:bd:
                    c9:88:d0:ad:0a:3f:79:bb:ea:21:99:ab:d5:2a:23:
                    73:9d:bc:33:e4:7d:76:8e:78:2d:41:e3:40:5f:c2:
                    0b:8a:08:5c:04:c0:fd:ef:02:ed:4f:32:c0:c9:4e:
                    61:9b:db:55:63:c4:b9:20:84:08:3f:26:5d:05:22:
                    6a:ce:e1:1f:05:90:c8:35:e1:f7:c9:c1:7e:63:f1:
                    17:eb:a7:6b:6a:e7:70:4b:24:a5:6d:f5:49:60:3a:
                    fc:b0:95:d5:45:fe:2b:52:00:1d:e5:39:58:98:dd:
                    b8:b1:61:ee:a8:82:9f:b5:f0:c5:07:f0:68:6f:f3:
                    23:30:36:b8:4e:b6:e5:f5:82:a2:db:51:71:09:11:
                    51:df:98:5b:05:2f:13:89:3e:56:c8:07:33:1d:37:
                    54:4d:ed:eb:03:42:d7:86:16:87:63:79:5d:81:69:
                    5b:df:3e:31:ed:44:09:26:eb:f0:34:7b:66:91:d1:
                    73:e6:c3:47:ea:11:b5:31:46:2a:1f:c2:02:2d:08:
                    0c:04:8b:22:1e:b7:d3:48:49:2f:d0:a5:eb:a7:12:
                    9d:7d:16:db:29:5c:0c:7f:16:4f:0f:76:33:19:4c:
                    5f:ec:7d:47:58:5f:75:a0:74:c6:ad:88:e3:af:cb:
                    4c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8B:AE:CC:31:5A:18:74:A3:FA:E8:57:07:40:95:CD:29:E7:17:E8
            X509v3 Authority Key Identifier:
                keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b9:7b:92:47:d6:fc:5f:6c:d2:6c:e0:87:96:6d:ee:dc:f9:
         00:e8:d5:71:bc:ee:95:21:73:0d:58:6e:df:3f:dd:78:d9:b0:
         6b:7e:a0:c2:26:79:ff:55:31:9e:ae:71:ba:30:c7:da:dc:2a:
         fe:e4:28:49:32:ca:b7:39:cf:6a:b1:35:34:9a:61:43:60:52:
         c6:5a:41:86:dc:50:b2:fb:9f:6a:f4:51:49:4b:4e:f1:ca:7f:
         4c:62:2d:59:2e:17:ce:1c:d4:21:b7:2d:24:fc:34:f5:25:1a:
         ac:29:4a:98:06:f7:43:8c:a7:4a:e0:dd:b8:76:ca:c0:3a:5a:
         5c:18:20:72:0b:9e:df:b2:5c:18:de:39:49:3e:bf:36:71:da:
         3f:d1:1f:76:71:a9:b4:54:60:bd:95:7f:68:3d:1c:15:64:33:
         c5:c5:65:8b:a4:de:34:89:a0:2d:c2:0d:fe:09:42:df:d1:df:
         97:8b:b3:b5:0c:63:e9:c9:07:a9:c0:e0:c4:3a:56:ca:66:fe:
         20:ca:30:94:bd:db:b7:2c:eb:e0:49:b6:7a:29:47:37:82:71:
         f0:39:fc:3b:1a:6b:4c:d2:75:58:09:23:56:9a:18:8d:71:99:
         04:2d:1f:fd:8e:2a:38:7f:12:ab:8f:2e:7e:c6:51:9c:db:40:
         7f:b0:54:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:14 2026 by rpki-client