Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
File:                     hEIqhfpOTNTW7plGMaPQ8OboLTo.mft (raw, json)
Hash identifier:          vS5Ieh4BRJta4zkdETDZckPg23z0Qn4QSLJ6BTqv0MU=
Subject key identifier:   BE:30:81:13:13:67:E7:EC:74:5E:A0:C4:CD:AF:58:FA:A8:34:71:DC
Authority key identifier: 84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A
Certificate issuer:       /CN=A911C61C/serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A
Certificate serial:       0415
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
Manifest number:          040D
Signing time:             Mon 11 May 2026 00:28:32 +0000
Manifest this update:     Mon 11 May 2026 00:28:32 +0000
Manifest next update:     Mon 18 May 2026 00:28:32 +0000
Files and hashes:         1: hEIqhfpOTNTW7plGMaPQ8OboLTo.crl (hash: o6fu8rgO1t65zETVtefYB4bypPMNLGgW9XJSr9N+RNY=)
                          2: 214E0454B58A11ECAF32FE29C4F9AE02.roa (hash: DeN5+WLuYB95EX5XxNOKqEvwckp++ai7lfprhRYcj3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl
                          rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045 (0x415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C61C, serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A
        Validity
            Not Before: May 11 00:28:32 2026 GMT
            Not After : May 18 00:28:32 2026 GMT
        Subject: CN=6a0122b0-a4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:60:59:fd:79:0a:71:99:74:22:e9:cc:aa:f8:
                    6f:ed:22:7c:a0:c8:d1:ae:61:f7:29:dd:5c:25:29:
                    39:6a:23:cd:5c:6e:5d:dd:7a:1f:90:c6:82:1d:1a:
                    d4:44:ea:82:87:bd:1a:7f:a4:60:0a:f7:68:f5:e8:
                    b5:6b:5c:6a:73:d8:ef:ee:d4:1a:72:ab:a6:32:07:
                    60:0f:c7:98:c0:ca:b2:e5:14:9b:a4:18:83:e7:55:
                    2b:a0:1e:fd:21:4d:3d:76:de:01:85:eb:97:53:88:
                    e1:48:58:bf:de:38:4a:64:24:52:99:07:02:0f:bd:
                    52:16:ed:85:b8:f1:08:8c:f2:d4:b5:17:c2:2c:22:
                    6a:e0:b7:59:7e:55:9f:96:f7:72:a6:c6:a4:d9:fc:
                    2c:92:61:d7:fd:ab:25:b4:65:f4:16:7b:54:ad:0c:
                    3f:0b:4c:a7:4f:1d:3f:5d:ba:9c:4e:f4:c7:b3:b1:
                    02:ba:20:f9:b9:fd:c2:40:0f:21:60:85:36:0e:9a:
                    96:fd:d9:51:64:5a:8e:92:1f:d0:ee:1f:d3:cb:f6:
                    96:83:92:07:09:ad:b1:d6:d0:68:06:ce:97:0c:3f:
                    74:d9:87:05:37:9d:b7:00:c4:3e:27:a3:3c:90:0b:
                    a9:01:8d:a0:78:f3:af:e6:88:ec:7f:68:1a:dd:f1:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:30:81:13:13:67:E7:EC:74:5E:A0:C4:CD:AF:58:FA:A8:34:71:DC
            X509v3 Authority Key Identifier:
                keyid:84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:38:15:68:2a:ab:28:18:09:e1:ab:6e:d5:6f:b7:bd:46:a8:
         f8:2e:90:f2:f5:10:fa:0f:41:03:e7:c3:59:8b:8c:b6:88:d2:
         40:d6:00:01:56:33:90:2a:12:33:4e:93:a4:69:04:96:c9:b9:
         b4:e2:ab:d2:77:d0:5e:89:45:5e:85:d4:6b:60:9b:44:94:81:
         82:0a:46:86:ca:34:56:d9:64:fa:f6:85:04:fd:26:19:82:5c:
         6c:cd:56:ab:ad:6a:bc:33:82:a0:33:ea:b3:89:24:bd:4f:20:
         69:25:37:d2:d5:f6:03:dd:ca:ec:f9:94:3b:68:94:61:de:03:
         20:eb:64:a0:3c:d4:67:ed:f2:42:a4:b6:8e:50:c9:37:f7:a7:
         a7:34:e8:fe:5d:60:d2:78:a9:4c:f4:8e:36:b3:c2:80:4c:6c:
         3a:44:97:7a:57:33:26:fc:3d:9c:a8:4e:89:20:9c:3c:93:34:
         39:db:be:f0:8b:75:07:38:03:04:18:ae:f3:80:04:5e:f0:8d:
         90:85:26:ae:32:d5:5e:96:f8:53:6d:29:47:68:de:50:0d:57:
         b6:0e:89:4a:92:84:c5:fb:5a:2a:53:8a:f5:fc:57:21:2d:d1:
         00:4f:5b:c2:54:ee:c7:5a:e9:3d:e1:8b:cb:a1:9a:73:35:7e:
         69:ef:b3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:47 2026 by rpki-client