Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
File:                     HIAVCsljCYTTjMb1nD7MdRsl8-c.mft (raw, json)
Hash identifier:          OSq40j4UIdzjtdfYlLdYOvVzYt39HYWAx+TfmMnzA4g=
Subject key identifier:   A9:66:81:5E:6E:DE:A3:ED:4F:70:56:03:DE:28:C8:A6:0C:6A:BB:23
Authority key identifier: 1C:80:15:0A:C9:63:09:84:D3:8C:C6:F5:9C:3E:CC:75:1B:25:F3:E7
Certificate issuer:       /CN=A915A549/serialNumber=1C80150AC9630984D38CC6F59C3ECC751B25F3E7
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
Manifest number:          E2
Signing time:             Wed 25 Mar 2026 05:45:04 +0000
Manifest this update:     Wed 25 Mar 2026 05:45:04 +0000
Manifest next update:     Wed 01 Apr 2026 05:45:04 +0000
Files and hashes:         1: HIAVCsljCYTTjMb1nD7MdRsl8-c.crl (hash: F1Egeq5/s2hYA9z2c1C3rnNFpHXkEuG0+FVlNKpt8b4=)
                          2: E9B51C0AD24411EFBD747915C4F9AE02.roa (hash: ma+s/ETPoidzPcRx4zeuIQVqkKNO6cxR91hC1+uy1fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.crl
                          rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A549, serialNumber=1C80150AC9630984D38CC6F59C3ECC751B25F3E7
        Validity
            Not Before: Mar 25 05:45:04 2026 GMT
            Not After : Apr  1 05:45:04 2026 GMT
        Subject: CN=69c37660-6a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:a2:6b:c4:12:7d:c5:e6:09:14:ac:df:65:
                    17:74:05:cc:9c:67:73:e1:82:12:a1:13:42:d9:10:
                    34:ea:dd:c8:cf:fb:b0:bb:6f:67:cf:4e:84:4e:19:
                    2d:c5:eb:84:13:ed:84:86:9d:4e:69:5d:e4:48:e0:
                    13:ee:fc:66:3e:fb:b8:32:c4:8b:10:a4:e0:5c:54:
                    c2:87:90:1f:a2:9a:01:70:88:4d:e3:a2:e1:6d:98:
                    30:1e:76:84:1b:7c:2d:b0:ff:59:c0:50:c0:b3:f4:
                    26:4c:78:a9:80:47:fc:f4:1a:5a:98:74:66:8b:dc:
                    bd:0e:89:7d:04:d0:73:01:5b:64:8f:85:fc:3d:8d:
                    9a:1b:e8:98:ce:13:dd:64:2b:a3:28:b3:99:48:99:
                    fa:82:1d:8c:43:4a:15:cf:0e:24:08:89:2a:54:b2:
                    20:c9:f3:29:bb:fe:cb:89:e2:f8:16:6b:ba:19:92:
                    6f:c5:02:c5:9a:8e:76:c6:d2:56:0e:68:ee:b0:db:
                    1c:1d:69:29:22:ed:21:bb:07:7f:ce:7a:d5:2c:22:
                    6c:39:1e:11:90:dd:04:2d:be:d3:17:7b:58:76:25:
                    1b:11:bb:ee:bf:22:4d:53:c5:38:c9:d1:40:b4:68:
                    9e:b2:5f:01:1f:6b:86:c6:e3:5e:4c:6c:31:95:16:
                    4a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:66:81:5E:6E:DE:A3:ED:4F:70:56:03:DE:28:C8:A6:0C:6A:BB:23
            X509v3 Authority Key Identifier:
                keyid:1C:80:15:0A:C9:63:09:84:D3:8C:C6:F5:9C:3E:CC:75:1B:25:F3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:86:cd:81:48:ee:e2:68:91:5f:71:09:75:42:42:00:47:f3:
         95:00:6f:2b:2e:42:ab:7c:bf:92:5a:c8:45:d8:53:72:94:9e:
         77:27:6c:c1:4c:a3:4d:e1:b4:29:b3:2d:4d:1e:66:53:db:3a:
         77:0c:4b:d4:c8:e9:ee:66:3e:eb:5b:c1:6b:1b:7d:9b:b1:7a:
         ff:b6:e5:95:a3:c9:ad:48:a9:89:22:07:0a:4a:df:b4:ab:c1:
         e5:62:8e:7f:20:60:83:04:2f:00:b2:93:0c:d5:8f:6a:9f:1a:
         59:48:1b:2a:97:d2:66:57:f0:97:8a:1f:36:95:ee:f6:2b:c9:
         29:b7:a5:61:a7:9a:b3:60:7a:a5:88:47:8a:05:eb:ec:3d:bf:
         5d:f3:14:a6:36:49:72:08:f1:c4:2d:e2:3a:f8:a1:8c:f5:f9:
         e4:32:a5:ab:4f:f4:98:2b:b1:ae:1d:a5:fd:a0:26:df:a2:18:
         d4:06:11:80:ca:29:d3:f9:e2:32:a3:a4:08:dc:e7:b0:9a:9d:
         42:1a:2c:b7:09:fd:86:e3:0c:dd:45:76:1c:26:83:71:c1:9c:
         87:a9:1d:68:a6:54:37:cc:9a:ae:52:b5:57:9b:25:0a:4e:39:
         4c:99:29:00:ab:71:bb:48:37:9d:1b:ec:71:f2:26:3d:45:c8:
         46:98:0c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:00 2026 by rpki-client