Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
File:                     2HXmPHNQjdifas3MBgFEoIwIZtw.mft (raw, json)
Hash identifier:          P7Sid2L2dYH2H7QJMXKBf8my/q2wihD+4N+qlGXZkWQ=
Subject key identifier:   34:28:54:F2:C2:27:DB:69:71:8D:D1:C6:ED:93:AC:56:F4:E2:71:24
Authority key identifier: D8:75:E6:3C:73:50:8D:D8:9F:6A:CD:CC:06:01:44:A0:8C:08:66:DC
Certificate issuer:       /CN=A914E950/serialNumber=D875E63C73508DD89F6ACDCC060144A08C0866DC
Certificate serial:       0478
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
Manifest number:          0471
Signing time:             Wed 13 May 2026 00:12:07 +0000
Manifest this update:     Wed 13 May 2026 00:12:07 +0000
Manifest next update:     Wed 20 May 2026 00:12:07 +0000
Files and hashes:         1: 2HXmPHNQjdifas3MBgFEoIwIZtw.crl (hash: VGyYhdCqkfTD30rjCEncgYbKCWv7YHWhZj0TURqCgfw=)
                          2: 6199B5668DE011ECB9F9C06EC4F9AE02.roa (hash: gXnStk1MwegllJpHCk0mKvppBMmur0BRxsppyW6UBsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.crl
                          rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144 (0x478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E950, serialNumber=D875E63C73508DD89F6ACDCC060144A08C0866DC
        Validity
            Not Before: May 13 00:12:07 2026 GMT
            Not After : May 20 00:12:07 2026 GMT
        Subject: CN=6a03c1d7-afba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:8d:fe:88:71:b4:58:8b:8b:e3:25:32:fa:
                    84:25:f3:89:63:4f:ae:ce:05:3e:b2:ba:e9:7f:1e:
                    4d:02:42:e8:b4:f8:4e:0d:73:c2:4f:46:e9:34:5a:
                    49:a7:c4:2c:a2:5a:96:94:5d:17:12:43:7b:7e:39:
                    11:f3:d6:1f:f2:29:0a:f0:56:44:09:80:b9:2f:9b:
                    da:e5:e8:f6:0b:4a:05:83:1b:75:62:c7:0f:ce:4a:
                    9a:7e:a8:71:88:55:86:e9:c1:ab:e3:1c:27:ef:00:
                    04:94:f2:d3:2d:04:be:26:3f:5d:c7:a9:c2:0e:d0:
                    02:53:40:a6:64:03:a8:fc:af:84:ec:37:a6:04:bc:
                    74:ef:49:90:6a:f6:0c:b1:32:28:b1:ad:38:46:fc:
                    06:af:ad:38:3d:1a:e9:98:6a:d5:0d:5f:47:86:e0:
                    d2:00:ee:bc:8b:45:17:32:e4:ca:8a:c1:fa:ce:04:
                    81:13:ad:40:0b:fe:d0:87:7f:37:fd:04:be:58:aa:
                    0d:6c:91:0a:cb:86:03:cd:f8:76:26:22:49:86:87:
                    2f:be:6a:b4:92:f9:87:4e:e5:c3:46:f3:54:94:b4:
                    46:82:d9:58:74:d8:ad:3f:26:4b:c5:38:33:29:9e:
                    00:5b:b5:d9:69:a3:39:a1:cb:bd:87:fe:c0:b7:01:
                    2c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:28:54:F2:C2:27:DB:69:71:8D:D1:C6:ED:93:AC:56:F4:E2:71:24
            X509v3 Authority Key Identifier:
                keyid:D8:75:E6:3C:73:50:8D:D8:9F:6A:CD:CC:06:01:44:A0:8C:08:66:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2HXmPHNQjdifas3MBgFEoIwIZtw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E950/CBF06F308DDC11ECA1400C69C4F9AE02/2HXmPHNQjdifas3MBgFEoIwIZtw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e1:5d:11:00:d1:b7:88:50:29:df:d1:08:2a:17:cd:b0:66:
         31:01:6f:7d:d7:9b:c2:55:0c:70:c2:52:15:75:44:72:dc:81:
         29:98:60:06:4e:bd:5c:22:60:3a:12:24:7a:ac:36:69:a0:37:
         d4:ef:96:ad:ad:cf:16:81:a7:48:02:57:43:3e:93:74:e8:4d:
         51:27:13:b4:ce:c7:01:4e:18:75:41:b1:15:f8:cb:1c:94:15:
         8e:6b:e1:b7:19:da:83:33:81:22:8d:be:fa:22:92:7c:60:d2:
         29:95:d5:df:c5:46:c0:9e:eb:aa:32:8a:7f:3a:1c:62:13:34:
         6f:bd:89:8e:2b:36:36:89:98:d6:f3:da:ee:84:25:f9:49:28:
         e5:53:30:52:0e:7a:38:2d:af:2b:29:32:3f:7f:6d:3c:ae:af:
         0b:a7:43:64:02:30:9a:84:ea:40:d6:30:62:32:74:0e:a1:90:
         0a:cd:54:b8:d8:5a:9f:d2:cd:70:74:c4:e6:fd:33:30:b2:d5:
         bd:7a:83:13:cb:4c:49:99:b1:f8:2b:56:04:ee:8b:f5:5f:3b:
         a8:1d:ac:ce:89:65:5a:0a:43:aa:99:30:1a:11:2a:fb:97:20:
         aa:29:85:aa:b2:ae:b1:23:e1:0f:d8:64:b0:8a:81:cf:10:a9:
         f7:53:40:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:10 2026 by rpki-client