Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
File:                     MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json)
Hash identifier:          pHa/uIdZQED9umcpcx1L6awsgZQlMbYJFouKBZK6sBI=
Subject key identifier:   23:28:A7:23:81:41:F4:D0:A3:08:64:0F:62:F1:CF:1A:EF:1B:66:DD
Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71
Certificate issuer:       /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
Manifest number:          01D6
Signing time:             Wed 25 Mar 2026 02:53:41 +0000
Manifest this update:     Wed 25 Mar 2026 02:53:41 +0000
Manifest next update:     Wed 01 Apr 2026 02:53:41 +0000
Files and hashes:         1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: yhrGFm6ovBZLbnOZ5yuf2O/CCaTglZ1UDyd4bqZoY4M=)
                          2: 80A66D902A6411F09ACA5C61C4F9AE02.roa (hash: 19CRriFHUu9Og+pLKFNKi+nzmbjd/BqY5BWoDtCmKYc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl
                          rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180127, serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171
        Validity
            Not Before: Mar 25 02:53:41 2026 GMT
            Not After : Apr  1 02:53:41 2026 GMT
        Subject: CN=69c34e35-b783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:30:66:da:79:d5:09:98:d4:dd:88:9f:33:9f:
                    bd:c1:d0:25:b2:ba:39:10:ef:aa:3b:91:0c:30:98:
                    4c:c9:16:f1:db:9d:c8:ae:05:a4:e1:e9:84:b9:38:
                    69:de:ed:d8:75:49:41:bd:a2:2d:c3:74:52:7e:96:
                    b6:8a:ac:cc:0e:64:23:ae:26:28:cd:06:8c:e9:21:
                    12:42:3b:3d:6a:e6:d9:8a:33:2c:15:2c:45:40:38:
                    20:af:20:75:a8:3e:50:53:0d:0a:e7:86:1b:21:34:
                    a6:8c:9d:7b:ee:69:46:cb:2e:cf:63:c1:4f:3a:3a:
                    99:fe:d2:1f:19:fb:6c:ad:f5:20:78:81:f7:9f:84:
                    05:55:d3:9f:f6:d4:52:13:8d:fd:35:b1:26:e6:49:
                    a1:dd:65:88:d6:2b:ea:da:a8:9f:43:1b:62:1b:33:
                    33:6a:dc:6e:dd:3a:0d:49:69:51:50:a4:2d:26:24:
                    22:c9:3e:85:e9:35:e7:db:c4:d3:c3:06:6e:98:b2:
                    8e:ce:6f:1e:59:0f:a5:67:49:13:b6:49:08:06:e7:
                    94:70:b8:1d:81:e0:e8:1a:a6:b6:1a:11:20:b9:70:
                    af:18:f1:53:69:44:f4:50:b7:d4:17:d8:81:86:86:
                    73:d6:57:4a:de:2a:2d:ac:27:ab:de:7d:86:df:d7:
                    93:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:28:A7:23:81:41:F4:D0:A3:08:64:0F:62:F1:CF:1A:EF:1B:66:DD
            X509v3 Authority Key Identifier:
                keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:79:3b:65:6e:ea:1f:d4:5f:74:77:31:7e:7d:d7:1f:ad:be:
         38:af:58:b6:3e:e0:79:5a:2f:fc:bc:bf:bc:e7:2e:c0:f2:b0:
         ad:06:90:87:39:02:61:83:44:b4:54:27:97:9f:e2:5e:db:05:
         80:4a:12:90:72:47:1d:28:80:c8:63:9d:f5:bb:1d:88:b2:dc:
         8d:56:4c:bf:ac:87:d6:6b:1e:0b:72:fb:21:ce:25:ee:3a:26:
         24:3c:28:21:5e:ea:b1:94:8a:90:d3:93:62:18:f1:4c:f5:60:
         56:23:38:95:c4:13:08:0f:e1:7d:d9:65:85:18:dd:45:26:e0:
         e3:ff:4a:c2:43:96:f2:f5:53:96:df:72:15:a1:f6:34:8f:e5:
         86:07:de:1e:dc:fe:ec:17:7d:86:83:66:0d:7b:ba:45:b6:13:
         f4:d5:29:f2:5d:44:34:96:a6:26:c7:59:db:8b:26:32:33:43:
         08:77:3d:2a:b5:48:a8:af:a4:2b:b0:1e:58:73:a8:47:83:e2:
         bb:4a:63:3c:e0:c9:d9:4b:42:d5:36:fd:46:f4:2b:44:f7:74:
         72:e8:76:6f:4f:cc:84:35:0d:8a:66:54:77:3f:8c:96:42:43:
         fd:50:c1:16:1b:ec:79:51:7e:0e:07:53:78:8b:f5:50:89:5f:
         9e:72:a9:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxMjcxMTAvBgNVBAUTKDMyMTVDNTUxNkFGQjU0RDhFNjEyRDFFQzNENTE4MkQz
MjFFNTMxNzEwHhcNMjYwMzI1MDI1MzQxWhcNMjYwNDAxMDI1MzQxWjAYMRYwFAYD
VQQDEw02OWMzNGUzNS1iNzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjTBm2nnVCZjU3YifM5+9wdAlsro5EO+qO5EMMJhMyRbx253IrgWk4emEuThp
3u3YdUlBvaItw3RSfpa2iqzMDmQjriYozQaM6SESQjs9aubZijMsFSxFQDggryB1
qD5QUw0K54YbITSmjJ177mlGyy7PY8FPOjqZ/tIfGftsrfUgeIH3n4QFVdOf9tRS
E439NbEm5kmh3WWI1ivq2qifQxtiGzMzatxu3ToNSWlRUKQtJiQiyT6F6TXn28TT
wwZumLKOzm8eWQ+lZ0kTtkkIBueUcLgdgeDoGqa2GhEguXCvGPFTaUT0ULfUF9iB
hoZz1ldK3iotrCer3n2G39eTuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCMopyOB
QfTQowhkD2LxzxrvG2bdMB8GA1UdIwQYMBaAFDIVxVFq+1TY5hLR7D1RgtMh5TFx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDEyNy8xNkFGMUQyMDVC
N0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZOam1FdEhzUFZHQzB5SGxN
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01oWEZVV3I3Vk5qbUV0SHNQVkdDMHlIbE1YRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDEyNy8xNkFGMUQyMDVCN0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZO
am1FdEhzUFZHQzB5SGxNWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXXk7ZW7qH9RfdHcxfn3XH62+OK9Ytj7geVov/Ly/vOcuwPKwrQaQhzkCYYNE
tFQnl5/iXtsFgEoSkHJHHSiAyGOd9bsdiLLcjVZMv6yH1mseC3L7Ic4l7jomJDwo
IV7qsZSKkNOTYhjxTPVgViM4lcQTCA/hfdllhRjdRSbg4/9KwkOW8vVTlt9yFaH2
NI/lhgfeHtz+7Bd9hoNmDXu6RbYT9NUp8l1ENJamJsdZ24smMjNDCHc9KrVIqK+k
K7AeWHOoR4Piu0pjPODJ2UtC1Tb9RvQrRPd0cuh2b0/MhDUNimZUdz+MlkJD/VDB
FhvseVF+DgdTeIv1UIlfnnKpyA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:44 2026 by rpki-client