Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
File:                     HSQuN7enRsN-RUFFarAJiztXPPw.mft (raw, json)
Hash identifier:          3L3gLpyyvKMSBfu4P5ugw5GW2H7ActCM7MYN7aNHKWI=
Subject key identifier:   21:79:1F:E4:16:A2:65:84:9A:A5:DD:38:7C:D0:4F:87:2B:40:62:AE
Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC
Certificate issuer:       /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
Manifest number:          A0
Signing time:             Wed 13 May 2026 07:31:42 +0000
Manifest this update:     Wed 13 May 2026 07:31:41 +0000
Manifest next update:     Wed 20 May 2026 07:31:41 +0000
Files and hashes:         1: HSQuN7enRsN-RUFFarAJiztXPPw.crl (hash: s+KoEhVjc6AA2kUlQOVrjWhmlxX67Cf3D++eK7SLsQI=)
                          2: 96E040E063B211F09B18DA38C4F9AE02.roa (hash: TJexH2mJnGHPHwiqib8qKUREb69KfASR/45xsIgcTsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl
                          rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 07:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC
        Validity
            Not Before: May 13 07:31:41 2026 GMT
            Not After : May 20 07:31:41 2026 GMT
        Subject: CN=6a0428de-1e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4a:35:da:49:71:7d:1b:f4:e6:ab:fc:5b:06:
                    a5:c6:f7:ac:4b:06:ac:3f:78:a3:0d:dc:17:a8:ee:
                    5f:a0:8e:0c:e2:19:d3:fd:7d:e0:be:80:06:54:26:
                    fa:07:ad:39:5c:d1:33:9d:03:a7:25:f0:01:e5:ea:
                    d0:74:da:a0:68:0c:9c:f2:fb:e0:2b:6c:65:ca:5f:
                    29:66:c2:99:b1:33:15:ac:70:1c:09:ce:8d:c5:49:
                    24:bc:8d:aa:21:01:f2:a6:e9:4d:78:ec:13:ac:a9:
                    57:0b:47:8e:de:57:8b:5a:35:58:81:bb:8b:eb:7f:
                    ff:20:8d:4f:d6:75:0e:25:a9:70:6d:84:3c:b1:c9:
                    12:bd:14:ad:1a:d0:93:1b:0c:14:4a:c7:24:ca:65:
                    39:21:e8:da:7b:f8:56:dc:d4:aa:c3:b4:dc:66:d3:
                    85:70:57:57:26:74:4d:50:b6:65:4a:71:9e:43:52:
                    2e:a7:c0:c0:ec:e5:92:a1:6b:46:31:e4:67:e9:fe:
                    20:7a:3b:28:47:ca:dc:6d:f7:09:6e:aa:ed:5b:44:
                    a3:74:5c:e9:e1:62:e0:bf:ce:52:c9:fe:1e:3e:e0:
                    20:4a:fb:87:d7:6c:1f:be:1e:04:a9:e8:c9:75:72:
                    da:58:b0:82:1e:10:7b:e9:02:fd:01:50:d6:c6:93:
                    5b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:79:1F:E4:16:A2:65:84:9A:A5:DD:38:7C:D0:4F:87:2B:40:62:AE
            X509v3 Authority Key Identifier:
                keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:fc:d9:37:fc:a5:ad:c7:c7:9d:00:a7:60:dc:d5:84:bd:
         0c:4e:ef:d1:8e:27:05:5f:d7:58:23:be:77:f9:7a:4c:ac:bc:
         97:17:ad:a7:f4:5e:70:7e:a5:53:66:62:63:26:20:48:fc:e4:
         00:cf:ae:b1:9c:9d:7a:64:77:47:f5:6c:5e:c0:2a:ac:2f:5b:
         31:bf:f9:28:bd:02:20:07:3f:d3:24:05:c6:c1:fb:f1:e4:2c:
         10:73:ba:8c:bf:ad:f2:d2:f3:28:78:88:43:8f:75:13:f9:fe:
         91:40:70:10:d6:aa:f1:99:ca:6a:ae:a0:e2:19:37:4d:4c:6f:
         12:34:29:f1:8e:0a:36:a9:93:3a:bb:94:fa:50:4d:4e:27:6e:
         c7:f0:ba:d2:fe:89:8a:12:1c:1a:70:69:b7:ea:f8:6a:ad:19:
         14:68:65:ad:21:47:bd:ab:66:bb:69:b7:81:13:69:0f:eb:03:
         dd:27:58:6a:d2:17:d9:0d:ad:a3:c0:80:69:92:c2:ff:5a:4d:
         64:47:27:d7:3e:cc:bd:73:44:15:af:5a:7c:c5:c1:ff:bb:74:
         d1:82:11:e4:01:f1:e5:ac:11:00:69:3c:b4:d6:cb:e0:93:8f:
         9d:62:ba:10:6f:ba:93:44:fc:a3:3c:61:c1:45:dd:de:15:62:
         9e:79:28:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJFQTQxMTAvBgNVBAUTKDFEMjQyRTM3QjdBNzQ2QzM3RTQ1NDE0NTZBQjAwOThC
M0I1NzNDRkMwHhcNMjYwNTEzMDczMTQxWhcNMjYwNTIwMDczMTQxWjAYMRYwFAYD
VQQDEw02YTA0MjhkZS0xZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA40o12klxfRv05qv8WwalxvesSwasP3ijDdwXqO5foI4M4hnT/X3gvoAGVCb6
B605XNEznQOnJfAB5erQdNqgaAyc8vvgK2xlyl8pZsKZsTMVrHAcCc6NxUkkvI2q
IQHypulNeOwTrKlXC0eO3leLWjVYgbuL63//II1P1nUOJalwbYQ8sckSvRStGtCT
GwwUSsckymU5Iejae/hW3NSqw7TcZtOFcFdXJnRNULZlSnGeQ1Iup8DA7OWSoWtG
MeRn6f4gejsoR8rcbfcJbqrtW0SjdFzp4WLgv85Syf4ePuAgSvuH12wfvh4EqejJ
dXLaWLCCHhB76QL9AVDWxpNbGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCF5H+QW
omWEmqXdOHzQT4crQGKuMB8GA1UdIwQYMBaAFB0kLje3p0bDfkVBRWqwCYs7Vzz8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkVBNC8yNjREQ0YxQzYz
QUYxMUYwOEUwMDJCNENDNEY5QUUwMi9IU1F1TjdlblJzTi1SVUZGYXJBSml6dFhQ
UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hTUXVON2VuUnNOLVJVRkZhckFKaXp0WFBQdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkVBNC8yNjREQ0YxQzYzQUYxMUYwOEUwMDJCNENDNEY5QUUwMi9IU1F1TjdlblJz
Ti1SVUZGYXJBSml6dFhQUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo5r82Tf8pa3Hx50Ap2Dc1YS9DE7v0Y4nBV/XWCO+d/l6TKy8lxetp/RecH6l
U2ZiYyYgSPzkAM+usZydemR3R/VsXsAqrC9bMb/5KL0CIAc/0yQFxsH78eQsEHO6
jL+t8tLzKHiIQ491E/n+kUBwENaq8ZnKaq6g4hk3TUxvEjQp8Y4KNqmTOruU+lBN
Tidux/C60v6JihIcGnBpt+r4aq0ZFGhlrSFHvatmu2m3gRNpD+sD3SdYatIX2Q2t
o8CAaZLC/1pNZEcn1z7MvXNEFa9afMXB/7t00YIR5AHx5awRAGk8tNbL4JOPnWK6
EG+6k0T8ozxhwUXd3hVinnkoFg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:12:42 2026 by rpki-client