Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
File:                     _HkvHWLyld9EH6IejzvPJ8phBjA.mft (raw, json)
Hash identifier:          tMvQPhjcH/IbAKN1vlS594i66s1LEp79k58sgAVWPWc=
Subject key identifier:   FF:DC:29:D0:14:63:25:2B:01:A3:61:1E:A0:29:57:90:7C:E3:61:2C
Authority key identifier: FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30
Certificate issuer:       /CN=A913DAC6/serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
Manifest number:          0145
Signing time:             Mon 11 May 2026 05:21:06 +0000
Manifest this update:     Mon 11 May 2026 05:21:06 +0000
Manifest next update:     Mon 18 May 2026 05:21:06 +0000
Files and hashes:         1: _HkvHWLyld9EH6IejzvPJ8phBjA.crl (hash: 1z9n+y52nR61Zr7v4/tKRU57n1Su0mxOHrTw3zhdYi0=)
                          2: B01E86045EC511EFA4479F42C4F9AE02.roa (hash: zsKXMSkp+PvWPKVbS2PdjPccXHzghWKgI1Bm0STGTmY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl
                          rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DAC6, serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630
        Validity
            Not Before: May 11 05:21:06 2026 GMT
            Not After : May 18 05:21:06 2026 GMT
        Subject: CN=6a016742-91fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:78:d0:a9:75:18:32:7b:70:70:db:53:46:fa:
                    0a:9c:fb:eb:51:e8:25:49:82:a9:60:04:8b:25:65:
                    aa:4e:f5:fe:bb:7f:34:5b:b4:5d:f1:eb:32:49:3a:
                    78:87:d6:7a:cb:ca:96:c4:7f:74:1d:fa:2c:1e:5e:
                    43:41:93:61:22:f4:74:4d:97:f6:1e:e4:15:07:35:
                    12:aa:c2:19:3e:ac:52:e3:86:0d:c0:c7:b0:72:45:
                    02:b8:8b:26:14:fe:21:b7:25:c8:19:99:07:31:d5:
                    60:c2:07:35:d7:13:29:ae:40:9d:4b:99:25:b1:1f:
                    02:36:21:ed:be:72:79:1b:53:bb:5c:da:cb:7d:26:
                    56:cf:96:27:a2:7f:6a:de:59:a8:04:08:32:49:2b:
                    77:0c:ef:3d:5c:34:6c:98:db:10:cf:a6:18:83:cc:
                    a4:c3:9c:4b:91:02:2b:3a:d4:74:fc:0b:bc:8c:6d:
                    62:28:a7:d8:b2:c2:c0:6f:73:4d:ae:d9:b8:16:26:
                    d4:89:08:ce:d1:d8:7b:ab:bf:0c:23:a1:80:bd:3d:
                    99:98:45:1d:08:73:d8:49:80:29:2d:9a:5a:ab:63:
                    68:70:f3:e3:74:8d:4a:f0:57:5e:81:44:58:c7:2f:
                    85:dd:0f:0e:b8:0c:3b:f0:fc:3b:7d:30:54:e6:d5:
                    a8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DC:29:D0:14:63:25:2B:01:A3:61:1E:A0:29:57:90:7C:E3:61:2C
            X509v3 Authority Key Identifier:
                keyid:FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0e:7a:a4:ef:a7:c8:ea:8e:db:b3:61:4b:72:c8:66:ce:73:
         84:0f:02:ac:3c:61:9c:92:f8:e4:8a:8e:9d:70:33:01:89:83:
         af:88:0d:35:18:03:70:1d:41:d3:1c:f3:20:94:e7:82:19:db:
         54:90:e3:8f:6e:31:8c:ec:26:3d:2b:68:be:67:94:75:e8:8d:
         a9:e9:55:29:e5:8a:48:19:fd:f6:10:24:84:2f:17:dc:f4:10:
         b4:8c:95:36:b6:16:74:b6:bb:f6:df:b5:d4:d4:cb:17:88:5f:
         19:2e:9d:bb:fc:f2:22:b6:4b:b5:6e:41:09:22:ca:4f:4e:52:
         55:7f:4c:c4:d3:04:c5:7b:1e:e7:45:17:b1:b0:89:dd:55:bc:
         46:87:6c:00:bb:7d:f4:0a:ca:70:b8:85:33:be:c2:72:ef:c2:
         ef:70:b7:b6:21:df:b8:f9:c2:0e:cb:18:1b:19:62:d8:43:0d:
         12:e3:fa:70:f3:5a:34:e0:43:eb:95:92:b3:02:d4:b7:1f:c3:
         03:36:2d:16:84:95:73:ac:b3:29:5a:d6:19:48:ce:7b:de:9b:
         7d:e6:d2:56:99:70:8d:81:37:f9:48:32:f7:3e:0f:b0:60:8c:
         0e:2c:8c:16:24:f3:12:b4:05:4b:03:06:0e:66:44:5e:6b:fa:
         d7:f5:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:21 2026 by rpki-client