Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
File:                     hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft (raw, json)
Hash identifier:          ftx6pvxiqBiXvjuD6aAUcM9UGuKLWhy4M21c5EcLea4=
Subject key identifier:   F1:1B:43:93:65:32:9A:40:C2:3F:BE:4F:BB:D7:1E:37:B7:9A:5C:E3
Authority key identifier: 84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A
Certificate issuer:       /CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
Certificate serial:       0B3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
Manifest number:          0B31
Signing time:             Tue 12 May 2026 19:19:06 +0000
Manifest this update:     Tue 12 May 2026 19:19:06 +0000
Manifest next update:     Tue 19 May 2026 19:19:06 +0000
Files and hashes:         1: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl (hash: 7lR8uMlIAl6jOy/peDMCgv+/SGrsuxiTnfdFoflKp7g=)
                          2: BF77D1785DCB11EA880A7643C4F9AE02.roa (hash: A0fYtG6N2BexE9W0qntrNVFN6Gcpgpfkbf4hLPy3YFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl
                          rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2878 (0xb3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EC78, serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
        Validity
            Not Before: May 12 19:19:06 2026 GMT
            Not After : May 19 19:19:06 2026 GMT
        Subject: CN=6a037d2a-a9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:b4:66:a8:44:43:bf:51:e4:de:ff:63:1d:
                    c6:af:5a:08:cb:b5:bc:c8:ba:24:34:a4:d7:a5:02:
                    11:cd:d8:84:ff:71:ad:d5:00:87:a2:bc:90:73:e1:
                    af:02:f3:01:30:b6:b2:f4:85:dd:65:89:37:32:68:
                    ce:92:73:63:17:62:7f:fa:05:1b:d5:64:0c:91:09:
                    8f:63:eb:fe:6e:f6:b4:3a:47:02:18:c0:f9:6d:44:
                    1b:01:03:b8:46:13:ef:18:3d:51:a9:ce:73:29:88:
                    0b:8b:4d:3e:88:c1:20:6d:13:eb:9c:7a:9d:8d:09:
                    b5:03:c9:e3:29:90:20:3a:5d:4a:3b:e1:ec:68:5b:
                    59:93:13:2d:96:af:f5:fa:d0:0f:98:44:02:21:71:
                    18:ad:d2:bd:3c:58:bc:a4:52:49:c2:04:6c:9a:77:
                    ea:c0:5a:2e:ec:9a:f7:63:a9:d2:0e:94:be:9f:d4:
                    b2:30:aa:17:ef:4e:03:1d:b8:2a:8a:16:bf:3e:fb:
                    bc:7f:f3:5e:57:b8:d5:62:aa:98:7a:91:7d:92:52:
                    15:2d:5d:6c:66:31:5b:ac:b6:5f:1a:52:1d:ed:df:
                    02:2e:bc:03:1a:b9:01:aa:eb:74:b1:69:63:fb:e2:
                    75:54:60:23:2e:fa:fb:47:ee:19:70:ee:f6:0b:f3:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1B:43:93:65:32:9A:40:C2:3F:BE:4F:BB:D7:1E:37:B7:9A:5C:E3
            X509v3 Authority Key Identifier:
                keyid:84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:1d:0b:74:ca:61:e6:4f:2e:6e:d0:42:51:d9:e9:b4:ef:8d:
         c9:fd:31:b7:8d:66:53:63:43:86:4d:ad:cf:64:5d:36:63:7a:
         bc:75:19:0b:4b:af:ec:d6:0c:e8:6c:c5:1c:30:c7:24:2e:22:
         6f:9a:d3:fe:0e:c6:8d:41:a6:55:fd:9c:61:a5:4e:46:91:48:
         8f:fe:a6:be:37:4b:50:3a:48:14:29:eb:58:b8:74:2a:35:33:
         85:0c:c6:d2:23:01:73:ba:0c:ba:e5:b8:00:1d:53:60:18:56:
         38:8d:2b:f1:4a:26:86:47:61:c9:b2:1a:f8:a7:ff:a4:83:05:
         b3:1d:96:9e:a5:d6:90:9d:12:95:6e:4c:5b:66:68:83:f6:55:
         48:6f:4d:68:a6:a5:0c:d9:a8:f6:d9:7e:5b:19:25:e7:04:bd:
         7f:a6:3b:2f:99:1e:e9:20:84:e5:8d:60:85:dc:3e:1f:81:f5:
         d1:14:1f:25:0d:38:a7:a3:8b:3e:3d:a6:c2:19:d6:44:35:e9:
         6b:54:e3:f2:77:8e:64:67:e2:2d:76:3b:bf:6d:1c:80:47:67:
         83:b4:69:d6:5d:33:37:6f:ba:cf:a6:30:ca:e8:38:cc:26:11:
         f1:7d:0f:06:89:0b:6f:70:d5:51:9b:cc:72:4a:dd:57:a3:73:
         98:3a:68:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:19:49 2026 by rpki-client