Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
File:                     h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json)
Hash identifier:          qKXxjtQoIEoArOZAz6UPP47MXwlpf3Nu8L8mX+k6szY=
Subject key identifier:   C5:EF:B1:00:B3:0C:5F:07:7D:6E:BC:6E:E3:3B:08:D9:E1:00:77:10
Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Certificate issuer:       /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Certificate serial:       0851
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
Manifest number:          0847
Signing time:             Tue 12 May 2026 20:58:04 +0000
Manifest this update:     Tue 12 May 2026 20:58:03 +0000
Manifest next update:     Tue 19 May 2026 20:58:03 +0000
Files and hashes:         1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: BBDYwEvXjiMh00u2Ta59YmIZHroxg4sCZXMECKsMqM0=)
                          2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: sOGIE1Y4pAVns9lfWvpaPD3KRpb6ovE8rozjjlTX5nw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
                          rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2129 (0x851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
        Validity
            Not Before: May 12 20:58:03 2026 GMT
            Not After : May 19 20:58:03 2026 GMT
        Subject: CN=6a03945c-726d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:01:da:2a:14:b5:a5:24:92:95:b8:40:5d:
                    ec:7b:43:ff:f1:7b:b4:b1:7a:3a:7c:9a:d5:43:49:
                    eb:62:5f:07:f9:61:6d:27:90:7e:4b:a2:59:3c:fc:
                    38:68:c4:20:87:3c:3d:4b:fb:49:d6:d7:89:db:f6:
                    b6:fc:7d:59:ef:27:2b:8e:b0:c2:9b:2f:b0:df:cc:
                    03:9a:59:a1:1f:58:b7:5f:6e:d7:e7:6f:8b:5c:db:
                    9c:9c:a6:fc:b8:5d:60:9d:1a:96:71:55:55:c4:6f:
                    dd:98:e5:dc:27:b6:98:c8:7e:b8:c0:9e:f0:95:e3:
                    7a:35:d9:2b:2e:ec:20:2d:47:e9:ec:be:62:0c:df:
                    3a:a0:e4:84:68:5b:33:e8:4a:6e:06:98:e2:ff:7a:
                    9f:e2:5c:90:4f:f0:fa:35:b2:f8:32:2f:d0:89:78:
                    bb:7f:40:6e:b9:d5:cb:23:07:03:78:2a:97:a2:d5:
                    79:ca:0a:43:9e:63:14:9a:84:e1:fe:3c:40:3d:24:
                    3c:7a:2f:80:bd:17:98:65:4f:bb:a1:f9:2b:c8:1b:
                    bf:4c:34:9a:8d:00:20:43:ed:f3:d1:83:e5:b9:9a:
                    f9:07:58:08:11:ab:8b:b6:25:5b:35:b0:b3:51:cf:
                    48:3b:55:93:b8:d2:b2:d4:e8:f2:07:3a:af:a2:17:
                    8b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EF:B1:00:B3:0C:5F:07:7D:6E:BC:6E:E3:3B:08:D9:E1:00:77:10
            X509v3 Authority Key Identifier:
                keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2c:4c:35:e2:0c:bd:d7:36:a4:c4:3b:4b:12:c1:72:7f:13:
         af:5c:15:b1:f5:e4:19:63:23:80:67:30:45:89:b1:5d:2f:c1:
         91:06:18:e2:16:de:eb:bc:2f:73:19:e7:7b:ec:b9:45:71:32:
         4b:e3:d5:40:bc:26:c4:29:ed:eb:94:93:28:5e:bc:95:80:e8:
         bd:83:ed:4f:2e:37:17:02:b7:a6:d9:62:0e:4f:b5:3d:ba:a1:
         07:c3:f7:af:81:34:0e:aa:c2:f3:a7:13:25:a8:44:8b:99:31:
         20:1f:b6:75:a8:5a:8e:26:66:e0:0a:b5:b1:64:35:91:84:c8:
         e1:b3:97:6b:6c:36:e0:d6:a4:09:f1:5f:ac:f2:e9:1a:2c:1b:
         34:c5:52:e7:97:b6:48:98:17:13:bb:5a:92:c8:33:bd:fb:de:
         d2:31:76:3e:43:7b:7e:b7:5c:cc:39:97:aa:ba:a3:eb:15:19:
         5e:66:db:b2:1a:89:a3:e6:a2:a1:77:04:d1:78:cd:13:65:9a:
         42:b2:73:ca:58:a7:d2:1e:9c:3b:f0:c6:2f:b5:5c:60:e6:7b:
         dd:40:cf:bd:1d:14:5c:12:39:29:b5:5f:c6:c2:af:90:e5:29:
         87:80:7f:20:dc:c3:b0:67:d9:de:4b:bf:87:0d:e8:e8:f5:59:
         80:e5:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:26 2026 by rpki-client