Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
File:                     htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json)
Hash identifier:          hNigDgVwy8tERoOihLtzJI0UbcFtHvbxWbGZjf1O3Uw=
Subject key identifier:   27:2E:05:CC:97:FE:52:03:B8:08:9C:56:1C:AC:64:33:03:23:A6:0D
Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
Certificate issuer:       /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
Manifest number:          01B6
Signing time:             Wed 25 Mar 2026 03:17:16 +0000
Manifest this update:     Wed 25 Mar 2026 03:17:16 +0000
Manifest next update:     Wed 01 Apr 2026 03:17:16 +0000
Files and hashes:         1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: Gd3wOmCQMZQLE7x0LeoYHgYaZD2ujak8DeDJMa5BraA=)
                          2: 1B000B60A70A11EE9D90E754C4F9AE02.roa (hash: JehbpvK4Dpb6wXVXNKOP9H34UDru94u30nPkff7PtWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
                          rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
        Validity
            Not Before: Mar 25 03:17:16 2026 GMT
            Not After : Apr  1 03:17:16 2026 GMT
        Subject: CN=69c353bc-857c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:d3:70:c9:9e:22:a4:e0:04:dd:4a:62:4c:
                    02:58:d4:03:38:19:95:e9:0f:5f:b9:48:54:4d:07:
                    a8:2c:9c:3e:49:4c:6f:30:f7:33:2a:c9:63:e8:38:
                    fb:3d:d8:1b:fc:56:18:76:7a:1d:ef:b4:cc:2a:92:
                    3b:70:a0:c3:49:24:35:d6:76:b6:95:b8:22:28:c6:
                    80:2b:8b:bb:89:45:8f:72:a9:bf:3b:7e:f6:bd:25:
                    03:60:ae:9e:69:c9:42:8b:ce:d7:3e:f6:11:43:91:
                    77:ea:f1:86:5d:3c:4f:b6:0f:f8:80:43:f5:86:bc:
                    da:e8:c4:0b:06:49:d4:97:40:db:75:13:cd:43:00:
                    5c:88:13:da:c0:df:bc:2e:7b:f8:fc:06:52:b6:7b:
                    70:1d:89:a2:5b:c1:ac:a6:ce:35:ca:48:c5:f1:d5:
                    0e:c1:ae:27:83:75:9d:eb:8e:59:58:ce:21:10:8a:
                    16:bf:55:04:9f:b9:8a:94:ac:ab:9f:56:b9:0f:6a:
                    f8:c1:56:08:2d:67:18:58:ac:d3:3a:e5:5c:4e:8c:
                    68:e1:36:aa:f4:48:e3:e9:86:6a:52:a9:35:bf:ab:
                    6c:3b:77:ee:ba:64:67:9a:f8:4b:54:08:24:88:da:
                    1c:ac:69:a2:87:f4:4a:c4:c4:7d:9d:7c:54:4c:d1:
                    5c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2E:05:CC:97:FE:52:03:B8:08:9C:56:1C:AC:64:33:03:23:A6:0D
            X509v3 Authority Key Identifier:
                keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e4:0e:e8:bb:88:48:8a:ca:de:88:80:94:b7:aa:96:54:b8:
         60:2f:ee:65:a3:4b:b5:0f:f7:f2:4d:bf:cf:09:2f:ca:cf:68:
         e7:90:b0:0c:17:0a:d1:f0:d0:45:ea:c2:d3:68:96:84:ec:db:
         cc:8a:3a:50:b9:97:c7:54:65:d2:45:d1:60:67:96:99:13:e9:
         ab:be:b1:a6:77:81:fa:56:db:b0:f2:f5:33:29:40:a9:74:66:
         08:ae:ca:46:d4:37:19:e5:f6:9a:47:19:ad:61:42:d8:60:aa:
         c3:3e:75:72:01:e3:ae:79:bb:e8:2f:ad:ad:b0:82:73:79:d3:
         60:55:69:85:24:54:2a:18:cc:b4:22:2f:be:34:91:d5:9c:21:
         d6:c3:13:ff:67:09:c5:70:41:e7:e6:21:6d:d8:b4:63:a4:a3:
         76:9a:37:c4:2c:ea:05:d3:94:2e:2b:26:18:45:42:68:a8:46:
         ce:0b:5a:32:54:a5:77:00:14:a4:04:f6:df:13:3c:34:50:79:
         37:0f:31:d6:86:c4:9b:fe:d7:2a:c4:6a:68:2a:b7:af:ea:63:
         3a:da:54:f7:34:8f:c9:c9:07:bd:3b:57:ce:22:05:32:1c:7a:
         81:26:36:d0:23:4f:76:08:f6:56:68:cb:70:6d:b4:af:16:72:
         0a:e6:c6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:55 2026 by rpki-client