Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft
File:                     HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft (raw, json)
Hash identifier:          6bJfrk4eVTx9ihl2d7pQa5MkxIw97qkWx108zYoFL9w=
Subject key identifier:   01:4B:C9:8A:AC:82:C3:BE:4E:F3:67:04:AE:7D:70:B0:CC:D7:80:0C
Authority key identifier: 1D:C5:B4:A5:86:01:2F:6C:E5:E9:E0:27:8E:DF:62:88:BD:3F:56:CA
Certificate issuer:       /CN=A914B724/serialNumber=1DC5B4A586012F6CE5E9E0278EDF6288BD3F56CA
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcW0pYYBL2zl6eAnjt9iiL0_Vso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft
Manifest number:          0C
Signing time:             Mon 11 May 2026 09:19:11 +0000
Manifest this update:     Mon 11 May 2026 09:19:11 +0000
Manifest next update:     Mon 18 May 2026 09:19:11 +0000
Files and hashes:         1: HcW0pYYBL2zl6eAnjt9iiL0_Vso.crl (hash: aNtmyqHAciNDOXITggduuR4rW4V2H/m3FAfmLj6DMK0=)
                          2: C100F7163E2C11F1B54B2550B7833773.roa (hash: rUO3qsc/88dCf3N3rSuzcrdvkCR6cdFGRur986WAffw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.crl
                          rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcW0pYYBL2zl6eAnjt9iiL0_Vso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B724, serialNumber=1DC5B4A586012F6CE5E9E0278EDF6288BD3F56CA
        Validity
            Not Before: May 11 09:19:11 2026 GMT
            Not After : May 18 09:19:11 2026 GMT
        Subject: CN=6a019f0f-3a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:1e:92:9e:10:41:8c:e1:b6:32:76:48:10:
                    2e:4b:f9:d0:8e:92:50:46:66:27:a7:c9:9b:c1:38:
                    bc:68:b1:4e:f0:a0:91:80:3f:93:c2:25:4c:57:81:
                    64:cb:df:02:38:67:9a:45:a3:d5:ff:89:2c:fd:9e:
                    fd:5d:74:03:8b:34:19:42:ab:b4:c8:d7:54:73:19:
                    ba:a9:54:d7:d7:1b:ec:bf:c7:6d:92:41:f7:b4:73:
                    d3:0c:b4:44:ad:e3:8c:01:02:62:a2:65:f2:96:7f:
                    3d:ab:87:3d:28:90:bb:1d:5e:b9:cd:40:00:f8:5f:
                    2d:8d:91:53:f3:15:6b:45:59:a3:9b:3e:c6:be:0d:
                    10:65:06:67:62:9c:d5:04:24:8f:9d:d1:45:31:b6:
                    6d:9c:73:d2:3f:63:32:d8:43:18:d6:00:9b:aa:b7:
                    a7:73:92:c5:ae:5e:14:3f:9f:0b:c0:a2:7d:33:b5:
                    9e:31:00:ea:47:f3:58:bb:61:43:3e:4f:62:70:14:
                    7a:b3:8c:37:ea:4f:af:d9:46:40:04:1c:ad:77:b0:
                    48:ea:6c:cf:b7:53:96:7b:5f:df:3a:cf:94:53:e7:
                    4c:4f:e4:71:fa:dc:c5:44:7e:09:c2:4e:66:a7:fb:
                    e9:21:1a:cf:38:15:21:76:db:0e:15:c9:14:78:2f:
                    ca:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4B:C9:8A:AC:82:C3:BE:4E:F3:67:04:AE:7D:70:B0:CC:D7:80:0C
            X509v3 Authority Key Identifier:
                keyid:1D:C5:B4:A5:86:01:2F:6C:E5:E9:E0:27:8E:DF:62:88:BD:3F:56:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcW0pYYBL2zl6eAnjt9iiL0_Vso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2e:76:35:f2:1d:26:45:62:c5:73:49:e2:50:98:b6:7c:7b:
         2c:8f:49:1e:d8:20:50:65:28:51:5d:1a:4e:44:88:2b:59:56:
         10:f0:da:e5:21:47:c9:e7:d1:ed:06:cd:c6:2b:d2:0d:40:31:
         20:c9:e8:3a:cb:c2:fb:48:18:9b:70:62:25:5a:0a:af:5a:92:
         ec:09:71:48:28:de:07:fa:1c:5a:a4:55:03:a9:eb:1a:19:87:
         72:b0:a5:97:c8:c7:0f:99:6a:4a:92:95:55:6d:ed:3d:cb:11:
         c6:a5:10:81:a8:e2:e0:28:66:62:0e:37:26:86:44:3a:84:6c:
         63:1a:54:d9:17:bb:15:e5:fc:c8:0e:45:87:47:3b:2f:64:91:
         ec:62:87:7a:ff:f6:e2:67:82:f9:de:dd:1d:12:0d:03:10:28:
         46:3b:c5:45:18:d2:4e:c5:32:d6:41:4b:5e:f0:47:e8:9b:2f:
         79:d4:a3:1f:5d:e2:0b:4e:e6:e3:8a:5b:1b:31:ea:be:d4:51:
         3a:bd:36:a8:11:72:fd:37:a7:a9:08:68:b6:ac:c2:64:f2:7f:
         a0:f4:d2:56:6e:6e:7f:33:57:eb:31:9c:7d:bd:01:2f:37:56:
         1a:3b:73:dd:0e:da:f0:e1:1f:1b:8e:1b:a2:46:2e:e6:c2:e6:
         0d:b6:66:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:26 2026 by rpki-client