Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
File:                     HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json)
Hash identifier:          azgYw34r3Psln3qZVJGGtDi4rdXqTpdtZuSk7BPYbZ0=
Subject key identifier:   41:3F:78:6B:85:E1:83:75:88:0F:EB:5C:4A:24:3F:91:2D:D1:73:93
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Certificate issuer:       /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial:       0A0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
Manifest number:          09EB
Signing time:             Tue 24 Mar 2026 19:39:53 +0000
Manifest this update:     Tue 24 Mar 2026 19:39:52 +0000
Manifest next update:     Tue 31 Mar 2026 19:39:52 +0000
Files and hashes:         1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: O9f15IVFtbgiwD1l/yNhemvBQjFxvyzL8jg1YQvxfUE=)
                          2: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: PEyE0w8+UrcKJlHY3jaK16cYhVK4lg74ijcsWV2DoxU=)
                          3: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: WcxNaiIGqzItQBb7CYbwvBMMYMGcLD8tEl0Q7aIbezo=)
                          4: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: f4XaB+bRmsoNFuDMRRMiph6D0qfKs6SQvSg9M2XJC3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
                          rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2573 (0xa0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
        Validity
            Not Before: Mar 24 19:39:52 2026 GMT
            Not After : Mar 31 19:39:52 2026 GMT
        Subject: CN=69c2e889-7713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:76:94:6f:20:45:8f:b1:82:16:11:3c:8e:f1:
                    55:dd:6c:bf:5e:92:03:77:ff:5c:51:af:7a:06:a4:
                    ff:63:84:5a:a9:5f:30:65:61:17:49:9f:51:c2:3c:
                    d7:9a:f3:e8:eb:4b:87:06:f8:35:d5:98:42:70:b7:
                    9a:0c:4d:4f:4e:c8:73:bd:bd:c9:67:a9:5b:99:e7:
                    e8:aa:d2:6d:29:63:47:b7:b8:26:cb:84:01:2d:16:
                    e1:87:6f:f2:ec:23:9b:8e:9f:17:2f:5b:ea:8b:f7:
                    b3:f3:84:dc:67:44:5e:03:fb:82:04:38:19:f0:45:
                    84:cc:a6:ac:07:d5:e1:1c:47:22:f0:39:d4:b7:61:
                    9d:a8:cc:27:5e:3b:d5:db:c7:1b:62:d8:e6:44:00:
                    4d:e3:85:9b:28:db:b9:21:3f:1a:76:3c:25:c3:2e:
                    51:4a:90:53:07:6e:21:f4:6b:3f:76:22:63:35:e1:
                    3a:e7:87:da:93:8a:b9:59:f8:c6:08:64:60:a0:d8:
                    87:14:6c:e5:4f:0d:1a:37:5a:8f:35:46:d6:75:08:
                    36:61:2a:ed:62:a0:74:c8:3d:ae:38:05:aa:ea:af:
                    e8:87:59:4f:c7:9e:3a:23:dc:9e:42:63:57:9b:da:
                    7f:3e:50:63:fe:bb:39:30:1c:06:31:19:aa:4c:0e:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3F:78:6B:85:E1:83:75:88:0F:EB:5C:4A:24:3F:91:2D:D1:73:93
            X509v3 Authority Key Identifier:
                keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b8:78:b5:6d:6f:8d:8e:10:bf:ef:f1:a7:a1:1d:d4:db:ae:
         3f:f3:ba:cd:9e:b6:53:15:19:85:da:f0:e9:5e:8f:7b:1b:ab:
         d0:ae:42:be:68:9f:eb:4e:7a:75:08:e9:de:48:bf:3c:50:62:
         86:2f:4b:4b:7f:50:a7:2c:3e:7e:6b:65:42:2e:1c:d5:0d:00:
         4d:06:25:bf:ff:ab:a8:19:08:f1:7a:d0:b2:28:6c:69:bb:e6:
         7f:d4:02:63:7b:b2:57:fc:3a:0a:af:3b:69:1a:9f:42:4e:ac:
         f9:a8:51:4f:1c:26:1d:e3:23:1f:66:b4:62:90:f2:c4:83:5d:
         28:f2:a2:59:68:b9:41:65:ce:a0:84:3a:68:6a:7a:3c:0d:f7:
         f0:75:dc:8e:53:3e:09:99:5b:7a:a5:08:1c:b6:b3:83:a5:19:
         cd:82:78:09:2b:ca:ae:a9:03:b6:db:df:85:e6:32:49:19:7b:
         14:12:59:4b:93:b1:6f:68:f3:11:61:fc:55:a3:be:9d:3a:0f:
         66:93:ca:26:c1:ab:fb:bb:78:28:98:22:50:9d:15:54:1e:3e:
         9d:42:66:98:ac:8f:73:af:50:c6:23:83:ae:90:2a:bd:33:cc:
         9b:54:97:d6:2d:30:94:e7:c9:9f:73:89:eb:41:db:e3:95:46:
         a1:d4:50:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:46 2026 by rpki-client