Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft
File:                     0fHal9jt-Zxl369uyp87Umxgq0E.mft (raw, json)
Hash identifier:          PG/k49jLwlmWaSgIUzDGpFQ+Og9saTKSMIuaR0stY8w=
Subject key identifier:   C6:D9:14:E2:90:00:80:85:43:1C:86:2B:68:A3:76:AC:DE:63:A4:67
Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41
Certificate issuer:       /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft
Manifest number:          013E
Signing time:             Mon 11 May 2026 05:32:57 +0000
Manifest this update:     Mon 11 May 2026 05:32:57 +0000
Manifest next update:     Mon 18 May 2026 05:32:57 +0000
Files and hashes:         1: 0fHal9jt-Zxl369uyp87Umxgq0E.crl (hash: n/+H+Pb5jWDRE8UF5GKTmFzog4+Y4rEoO4NL7gscFU0=)
                          2: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (hash: 6wieboldL+svyfaS92rGNVhaWY2jMOAdUQcLZF1T9Xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl
                          rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41
        Validity
            Not Before: May 11 05:32:57 2026 GMT
            Not After : May 18 05:32:57 2026 GMT
        Subject: CN=6a016a09-b2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5b:30:d6:fb:4a:89:96:17:3d:6a:36:8a:d0:
                    c9:af:14:b0:c3:d1:c3:b9:02:05:fe:87:ef:4d:84:
                    e7:eb:82:1a:8e:fb:05:9b:c4:4b:f0:f9:eb:a3:c8:
                    27:7f:a5:2e:bb:e7:58:6e:62:01:3b:5e:79:e4:2f:
                    21:2d:31:58:0b:6b:b4:35:44:6f:a2:c3:93:56:59:
                    32:85:51:f8:29:70:5c:f3:6b:9e:e5:47:29:dc:94:
                    47:e4:34:f8:fa:31:48:c5:10:6e:9d:8d:58:90:56:
                    04:64:b8:ca:59:9f:b0:29:0d:70:1e:b6:4f:20:ff:
                    49:b4:1b:92:27:ce:cb:03:85:d2:af:2d:91:fd:27:
                    49:46:0b:6b:33:1f:83:cb:ef:7d:82:e1:7f:f8:2a:
                    5f:6d:c1:c7:cb:cf:d7:2b:39:f9:25:5a:16:cb:1c:
                    a1:13:d7:6e:64:76:2e:ee:c9:a2:80:90:fc:77:cc:
                    65:cf:7c:e2:48:97:33:4a:45:a2:8f:c3:f6:b9:52:
                    8d:7d:6a:ef:a7:cb:f5:25:3b:1a:ec:9f:f4:49:d1:
                    48:f4:4f:13:28:c2:26:9d:7f:81:d4:f6:0e:39:44:
                    60:47:c5:07:b6:54:ec:ed:8a:f1:81:2d:34:18:cd:
                    56:26:d1:b1:c1:ec:23:d1:61:fd:6c:e7:34:de:d0:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D9:14:E2:90:00:80:85:43:1C:86:2B:68:A3:76:AC:DE:63:A4:67
            X509v3 Authority Key Identifier:
                keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:9f:11:0d:1c:b1:75:ac:24:cf:06:a2:38:3d:ee:87:85:c1:
         44:17:b9:f5:b5:16:7e:45:92:bf:1b:43:f9:0d:38:5a:82:36:
         52:d2:59:db:57:be:63:b1:94:8d:d6:c1:f1:24:5a:71:05:06:
         b0:d2:b4:e2:ba:8a:8f:6d:7a:27:89:2a:fd:ba:5e:9b:98:dc:
         72:a6:80:71:cb:1c:f8:7a:ee:cf:13:1e:c9:12:ef:5e:15:3d:
         a3:47:02:0b:b3:a1:06:63:1c:db:dc:e6:b6:0d:61:70:fd:2f:
         88:7b:c1:6d:44:97:cf:d1:15:17:bd:aa:76:81:8d:7d:90:78:
         83:d0:a3:da:a2:1b:75:dc:e2:ed:2d:31:6c:0e:5f:73:b7:a3:
         b8:86:7c:08:d1:a7:20:eb:5d:86:ab:a1:f5:cb:0f:5f:78:99:
         15:f8:95:4b:19:d8:02:b5:56:0d:53:7f:2c:e0:ed:80:eb:38:
         38:d5:12:fa:ca:c5:2a:f4:aa:2b:33:62:c3:6e:ba:86:8b:bb:
         72:9b:e5:a1:f2:de:3d:50:38:47:60:d2:ea:a4:aa:0f:67:e3:
         f0:de:ba:e4:1b:93:32:aa:f4:03:81:b6:c4:6f:10:3b:71:10:
         f2:9a:8b:ef:67:03:5c:86:1c:4a:fa:4c:b2:d5:8e:8e:de:3e:
         67:1e:38:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:39:19 2026 by rpki-client