Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
File:                     hNKQTEi_9V2argiHuCwzDxubKaw.mft (raw, json)
Hash identifier:          KC8mF5fIVjYuiXxpqAy5VueJwwHi9f4+oomxxQL28Es=
Subject key identifier:   08:FD:05:D6:71:D5:7B:68:63:47:5C:D8:E0:E9:6A:70:FF:58:33:33
Authority key identifier: 84:D2:90:4C:48:BF:F5:5D:9A:AE:08:87:B8:2C:33:0F:1B:9B:29:AC
Certificate issuer:       /CN=A913A0F3/serialNumber=84D2904C48BFF55D9AAE0887B82C330F1B9B29AC
Certificate serial:       173A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
Manifest number:          172E
Signing time:             Tue 12 May 2026 16:37:52 +0000
Manifest this update:     Tue 12 May 2026 16:37:51 +0000
Manifest next update:     Tue 19 May 2026 16:37:51 +0000
Files and hashes:         1: hNKQTEi_9V2argiHuCwzDxubKaw.crl (hash: yckgb1j3K3C3u6xrfhG/eSdDa5gj3GPBIq19DHRWUFo=)
                          2: 0682A6A03DC411EBBFE0EA13C4F9AE02.roa (hash: efogen/tC+/AdiBRhX2upxGF7tJEq1IHdI05AOF10sQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.crl
                          rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5946 (0x173a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A0F3, serialNumber=84D2904C48BFF55D9AAE0887B82C330F1B9B29AC
        Validity
            Not Before: May 12 16:37:51 2026 GMT
            Not After : May 19 16:37:51 2026 GMT
        Subject: CN=6a035760-c598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:8f:c2:0b:16:2d:48:79:a1:db:6c:d3:2c:
                    74:86:50:34:f8:f2:0b:42:45:e8:5c:eb:23:e2:48:
                    b4:e0:ac:5d:e2:af:4d:5d:53:cb:00:98:7d:37:dd:
                    68:bd:37:8c:6d:6c:26:be:72:ce:0f:5a:5d:6a:4d:
                    84:77:65:b5:bd:8c:f7:7e:06:54:29:52:ae:14:f9:
                    7d:0f:5a:26:c2:5f:15:97:48:5e:a7:f5:d1:66:a6:
                    60:04:b1:1f:0a:71:1c:5d:74:e4:fe:41:c9:5f:5f:
                    d4:b1:7f:4e:46:79:62:57:27:30:1f:3c:58:ef:6a:
                    36:5f:4f:d4:11:de:07:8b:fb:d8:1f:3e:96:96:9f:
                    0d:d7:d3:4b:35:9a:9a:1b:93:3b:7f:f5:13:80:96:
                    43:aa:74:50:cf:7e:dc:c4:57:7c:ea:66:54:79:c1:
                    1e:f2:d9:fb:5c:09:a9:03:b2:91:fe:89:55:a6:38:
                    b2:53:b0:23:b7:cd:af:5b:06:6f:c1:a8:37:37:52:
                    11:ab:49:2a:dc:f3:d7:5c:19:07:e0:d8:ca:94:ef:
                    11:cd:c5:8e:30:5f:19:d7:6b:d4:b8:6d:af:f5:18:
                    cb:66:e7:8d:d9:ec:51:67:70:d9:a5:11:33:d4:2c:
                    2b:55:de:2c:17:92:c6:c1:26:e0:50:13:5e:ab:b8:
                    30:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FD:05:D6:71:D5:7B:68:63:47:5C:D8:E0:E9:6A:70:FF:58:33:33
            X509v3 Authority Key Identifier:
                keyid:84:D2:90:4C:48:BF:F5:5D:9A:AE:08:87:B8:2C:33:0F:1B:9B:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:56:50:ae:74:39:20:d9:3a:ca:e7:ef:85:10:31:f8:bf:9d:
         8c:8f:59:77:1e:68:b9:d1:81:43:e8:7b:e5:40:bd:b1:4e:5d:
         c0:c2:ee:db:3a:38:fb:48:13:65:ac:21:cc:1b:94:a9:11:fd:
         41:40:83:b7:5b:e6:64:a8:f6:02:bf:f5:f9:c5:6b:8e:a9:df:
         34:54:ea:c2:7e:94:4f:71:f4:f0:8b:1f:e5:16:b1:66:7e:53:
         f2:96:46:18:8c:58:a3:18:03:48:80:f6:dd:98:bb:47:f1:c4:
         03:12:e7:19:47:50:b5:85:ba:05:e9:03:b6:c2:9a:0b:f9:a3:
         ba:48:3f:93:79:02:19:aa:52:17:26:c1:7c:67:58:fb:c6:19:
         31:fd:59:73:21:f5:50:3c:59:5e:68:fc:0d:87:82:b6:0b:d6:
         64:b5:b6:dd:05:c4:d6:97:d2:bd:ee:47:c7:38:3c:d0:cd:6d:
         cd:51:90:8e:cd:70:13:1e:51:22:6c:72:ca:1a:fa:34:4d:5f:
         37:f8:37:54:20:79:2a:7b:e0:e1:f2:f8:52:6d:78:f4:a6:82:
         e1:67:13:a3:ea:c8:ca:0e:16:99:f2:76:01:89:60:55:d3:0e:
         dd:2a:17:a3:ec:5b:6c:26:5e:32:42:e6:26:81:19:68:44:11:
         d9:66:9f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:38:57 2026 by rpki-client