Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
File:                     hNqJJ83vUDOW9ScgGU65MSCdPzo.mft (raw, json)
Hash identifier:          YxAhOHPTMszuYNyCJRTBMvaBR3knugxGbzAnWb6h3SY=
Subject key identifier:   11:65:40:AE:19:84:AE:0F:B1:1A:DB:5E:09:DC:81:6F:04:EE:8C:55
Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A
Certificate issuer:       /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
Certificate serial:       03CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
Manifest number:          03B9
Signing time:             Wed 13 May 2026 00:48:10 +0000
Manifest this update:     Wed 13 May 2026 00:48:10 +0000
Manifest next update:     Wed 20 May 2026 00:48:10 +0000
Files and hashes:         1: hNqJJ83vUDOW9ScgGU65MSCdPzo.crl (hash: AFzZ9JnN5BnY9Z1vbOFse+g/MRq/j2z4YmAgYPCKURY=)
                          2: 6910E952A86A11EF89DA976DC4F9AE02.roa (hash: VgHpUmv5XapUWkoHMwq6CHIEaAxNeoc/taSmWAxGkC4=)
                          3: 3EABAF20D8E311EC8F274181C4F9AE02.roa (hash: PpySkmXHDFAMdn8q7qJMbkbAjwFyZ6Dte8VkGbnBdUI=)
                          4: 00F0B7EEA87411EF88F5C638C4F9AE02.roa (hash: elymg/oKLo36bQB76f3/BjLy1dUOOeqORBslgCNGm4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl
                          rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F051, serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
        Validity
            Not Before: May 13 00:48:10 2026 GMT
            Not After : May 20 00:48:10 2026 GMT
        Subject: CN=6a03ca4a-6836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:8f:8f:f8:44:29:21:9b:12:91:7b:3e:19:
                    38:6a:07:87:b1:74:d1:0f:e0:99:1e:86:c9:de:f0:
                    23:4f:8c:c5:00:64:b1:ef:2b:7c:2d:3a:ac:0f:c7:
                    8c:dc:db:b0:b5:54:23:cb:fb:f6:c7:7b:4f:07:4e:
                    8c:b9:a6:ef:9f:7c:2e:60:83:f6:84:49:2d:0c:c3:
                    c1:b6:18:81:6f:40:6a:9b:66:38:65:34:38:39:4f:
                    b1:07:9c:32:21:f9:7d:8f:74:c2:d6:e8:5b:0e:6b:
                    cf:b6:04:f3:4e:3e:69:e5:12:0b:11:59:cb:1a:b9:
                    73:a2:4e:e8:bd:46:d7:c4:63:26:6b:e8:30:03:00:
                    23:c5:85:35:7c:03:63:24:85:56:2c:cc:95:dc:e2:
                    89:b9:09:a7:b8:83:67:32:c1:5c:5b:73:96:55:aa:
                    58:52:69:f1:e2:9d:6d:6f:7d:cd:5f:89:70:13:43:
                    62:19:0b:21:82:ec:a3:23:d5:46:79:23:99:5d:dd:
                    1c:86:77:a9:a0:1f:29:65:2e:09:31:bd:4a:84:0a:
                    3b:26:65:eb:23:ec:45:77:9f:aa:df:5f:25:86:db:
                    42:51:d3:ce:39:ac:cf:94:67:c7:b5:3b:4b:93:9d:
                    86:a5:47:c1:bc:aa:4f:ef:c3:54:67:11:40:77:ce:
                    df:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:65:40:AE:19:84:AE:0F:B1:1A:DB:5E:09:DC:81:6F:04:EE:8C:55
            X509v3 Authority Key Identifier:
                keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:1b:67:d7:d3:36:7b:6f:52:8d:75:8b:59:63:40:72:ac:3e:
         58:a8:75:14:a0:da:81:d8:8e:41:ce:89:3f:1d:a1:6d:82:f9:
         e2:8a:ca:16:49:18:59:d9:ec:8a:95:03:2a:08:44:c3:e2:05:
         b1:8e:29:f6:0c:73:a8:55:5c:39:b9:ae:95:00:f4:cc:aa:6d:
         52:0e:70:7b:00:64:4f:cd:4c:c1:17:bc:12:20:72:61:b4:9f:
         bd:af:69:4c:b0:45:b2:94:4f:46:f0:15:15:c3:16:12:6b:04:
         c3:f7:a9:5c:01:fc:42:bf:48:39:f2:3a:84:1d:ef:87:77:86:
         7e:73:cc:6e:d6:9c:db:30:35:86:48:d4:10:47:66:f6:00:97:
         a1:0d:b2:c4:bb:cc:35:d3:9f:c1:cb:de:65:a6:8b:e0:16:f7:
         b4:ba:ec:37:53:67:ef:aa:0d:65:4b:12:89:59:fb:13:64:a6:
         59:f0:60:ab:70:f0:7f:92:dc:fd:d6:14:2f:cc:d9:24:b9:a2:
         1f:d9:a5:0c:a4:13:5c:48:64:f8:55:89:50:91:e6:16:92:b8:
         97:0a:bf:7a:61:8a:49:d6:5f:f4:93:d7:a6:7f:af:0f:0c:5e:
         05:46:72:2c:47:a6:62:ff:48:6a:c9:a3:16:5f:b9:c1:93:4f:
         2a:3e:c9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:51 2026 by rpki-client