Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft
File:                     cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft (raw, json)
Hash identifier:          xCMxhyLYFLuyIzqCZNIqMOa6rhnX61tfGOorWZI5+/E=
Subject key identifier:   F2:DA:C3:4D:D5:66:8D:10:90:31:2C:65:CB:F3:59:5B:B7:45:CF:01
Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87
Certificate issuer:       /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087
Certificate serial:       111F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft
Manifest number:          1115
Signing time:             Tue 12 May 2026 17:16:56 +0000
Manifest this update:     Tue 12 May 2026 17:16:55 +0000
Manifest next update:     Tue 19 May 2026 17:16:55 +0000
Files and hashes:         1: cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl (hash: gRdOUvyZCUmKtU8ZhXFtup6TxNRcxKpi15tZBypEwr0=)
                          2: 74087358355111E99EC82E0AC4F9AE02.roa (hash: 24e0wUeqirfw8YK8UbxY/Mf86F6th/m2omMNiomkb4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl
                          rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4383 (0x111f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D49F, serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087
        Validity
            Not Before: May 12 17:16:55 2026 GMT
            Not After : May 19 17:16:55 2026 GMT
        Subject: CN=6a036088-a26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:ad:2d:b5:2f:13:16:50:ae:0a:d9:f3:2e:
                    3a:19:29:58:53:52:ed:2a:26:45:e2:54:c4:33:ba:
                    47:fe:0d:31:5b:5c:b6:0a:4e:2f:01:88:d1:a3:f5:
                    12:40:09:35:54:fc:f3:06:4e:6c:8b:03:16:a0:4e:
                    c4:e7:b8:5f:b2:e3:04:52:8d:90:eb:5b:db:1d:bd:
                    15:0b:1b:75:6c:7a:5b:b6:df:d5:5c:5c:53:c5:ee:
                    30:a1:f5:2d:02:45:a5:1b:67:ae:9a:f0:e0:fa:12:
                    36:3a:f6:31:a2:3f:4a:f7:bd:7f:c9:b2:0f:88:21:
                    12:51:70:e6:15:72:bd:15:0c:b7:e8:0f:6b:50:52:
                    27:e0:79:9b:96:9b:9c:a6:11:6f:19:9d:cf:ec:98:
                    0a:98:20:29:e5:45:f7:2a:1f:57:b7:79:87:6d:b2:
                    20:8a:03:a0:6e:1a:8f:f0:d4:bf:79:19:d2:4a:23:
                    9b:9e:22:0b:d1:d4:14:78:0a:44:68:6f:4b:20:ac:
                    9f:7f:11:f7:51:bc:a6:06:f7:49:10:bb:7f:30:7c:
                    6e:3b:04:4a:c2:9e:ed:ae:0c:f3:bd:e4:27:f1:0e:
                    24:d9:ea:64:66:12:37:e7:9f:fd:33:e3:a3:d9:e9:
                    66:c3:31:28:6c:d8:ab:f7:84:c6:7a:85:a1:ac:f3:
                    2f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DA:C3:4D:D5:66:8D:10:90:31:2C:65:CB:F3:59:5B:B7:45:CF:01
            X509v3 Authority Key Identifier:
                keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7c:11:9d:de:ff:b3:39:07:2f:fd:b4:72:a2:c6:ef:8d:f3:
         63:f4:e2:6f:9f:17:51:b5:94:4c:ce:74:69:5f:7e:9f:98:d9:
         f7:fe:5c:b2:20:65:36:b0:39:b6:06:0a:c9:89:c5:a6:e9:7d:
         a0:2b:98:3f:41:16:97:18:cd:83:39:b7:33:d5:98:2f:97:85:
         ee:46:87:41:b0:bd:18:1f:f8:ee:58:df:ca:89:00:96:74:cd:
         fa:02:9c:88:58:f1:97:b6:6c:f5:4c:49:1a:20:a1:be:44:37:
         18:6f:0c:e5:80:9f:27:74:69:f1:65:73:05:d0:aa:fc:7c:35:
         f6:96:c0:5f:e5:dd:d8:d9:dd:73:2f:a3:24:6b:44:96:73:67:
         f7:fe:fd:99:51:38:cd:4b:fc:fd:14:5f:2c:fb:e0:72:b9:89:
         e8:9f:89:b3:90:6b:6c:09:55:1c:e5:9c:01:8f:f4:0c:91:fc:
         7d:8e:32:62:b3:01:a8:33:51:d0:79:00:81:9e:8f:77:b3:b6:
         fe:fe:27:d3:e8:cb:42:69:50:48:1c:61:82:2a:8c:b2:13:83:
         80:69:1e:69:08:35:bc:a8:b6:46:db:94:9c:e3:58:4a:ed:ff:
         c1:93:15:a6:de:13:70:54:be:0e:20:26:22:29:b9:b6:26:66:
         0e:bb:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:57:48 2026 by rpki-client