Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft
File:                     hnoHFJZqnX2LIC37HeIhPALANic.mft (raw, json)
Hash identifier:          +jqpnnXmbVGy4C3BF1qnCQGeA1ZWC0zim+9t540/LEw=
Subject key identifier:   88:F7:8A:DE:EB:69:94:91:BD:B2:BD:9D:2E:75:76:F4:14:5A:A2:06
Authority key identifier: 86:7A:07:14:96:6A:9D:7D:8B:20:2D:FB:1D:E2:21:3C:02:C0:36:27
Certificate issuer:       /CN=A919FD74/serialNumber=867A0714966A9D7D8B202DFB1DE2213C02C03627
Certificate serial:       0C99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft
Manifest number:          0C8D
Signing time:             Tue 12 May 2026 18:37:20 +0000
Manifest this update:     Tue 12 May 2026 18:37:20 +0000
Manifest next update:     Tue 19 May 2026 18:37:20 +0000
Files and hashes:         1: hnoHFJZqnX2LIC37HeIhPALANic.crl (hash: zmG2w7Jl6wOHnBUq9sStYVB0kAO6JfMO5Iuyu4oogp8=)
                          2: D1DB990C1A3811EAB6F9C83DC4F9AE02.roa (hash: 7Dz9hu6gjsKF7rOCaXHWUeixpnR4qVyHb9xN6ykXLfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.crl
                          rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3225 (0xc99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FD74, serialNumber=867A0714966A9D7D8B202DFB1DE2213C02C03627
        Validity
            Not Before: May 12 18:37:20 2026 GMT
            Not After : May 19 18:37:20 2026 GMT
        Subject: CN=6a037360-62fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:25:7c:84:74:d3:b0:a5:fe:60:d8:90:6f:
                    d4:3a:ad:1c:45:db:7f:f6:5d:e8:aa:0e:45:e3:2c:
                    69:df:2c:ba:50:40:a9:8a:4e:a2:19:dc:83:56:07:
                    95:f6:ab:f6:53:14:7e:82:82:ed:6e:ef:36:53:97:
                    a2:ff:4f:d0:41:00:21:9b:ce:af:d1:cc:87:b6:4f:
                    cd:19:5e:04:a4:25:aa:ee:1e:ca:6c:5d:23:44:03:
                    9a:4d:b1:ea:dc:f4:d8:cd:53:cc:f7:d7:f9:06:4e:
                    dd:d6:aa:f0:d0:f6:09:18:04:7b:61:91:d5:74:37:
                    8f:b3:e8:d9:cf:ce:7d:e0:68:83:55:3c:73:56:1e:
                    f6:78:7f:89:22:a7:5c:e0:e3:54:1a:e3:f8:cd:87:
                    8e:00:ae:e7:59:cf:cc:e2:f0:03:f0:02:a8:21:54:
                    97:c0:2e:54:e3:de:a0:4f:e5:a4:e6:5f:2e:10:cd:
                    fb:08:e3:47:da:28:ec:ce:a7:cf:e9:64:7e:83:c3:
                    d1:46:72:31:cb:60:06:14:72:4a:96:f0:db:e9:40:
                    47:ba:fb:39:10:09:f7:69:e2:4c:a5:97:72:86:20:
                    2b:ce:8d:fd:fb:ed:44:47:1b:f2:45:7f:af:cf:ff:
                    be:bb:ef:ee:37:4a:1d:71:26:94:bb:ef:8a:a7:91:
                    86:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F7:8A:DE:EB:69:94:91:BD:B2:BD:9D:2E:75:76:F4:14:5A:A2:06
            X509v3 Authority Key Identifier:
                keyid:86:7A:07:14:96:6A:9D:7D:8B:20:2D:FB:1D:E2:21:3C:02:C0:36:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:45:8d:22:10:06:c6:ae:ff:ed:1e:1c:70:f4:b5:48:7a:98:
         96:33:1f:52:ac:88:1f:ac:a2:11:e3:b2:f4:ca:7a:ea:36:b2:
         2c:54:a0:71:79:0e:db:f3:91:d5:99:12:0b:33:5f:b9:24:13:
         33:16:64:83:0d:81:34:d7:5a:ab:31:58:c6:30:54:41:ee:94:
         ef:87:54:47:47:ae:03:0a:57:10:74:78:84:86:cd:fe:a3:2b:
         8d:ac:c2:35:c4:32:c2:d5:e1:1d:15:6a:a3:3d:fe:15:05:b2:
         c3:ab:3c:ff:48:a9:73:15:39:d2:a9:b9:03:82:e7:6d:4f:f2:
         5b:44:b0:c4:45:20:a7:e0:3f:a1:65:79:a2:20:7e:e0:22:60:
         27:61:73:ba:da:83:8e:ba:9b:98:21:28:9f:51:0d:88:e1:12:
         d1:87:38:ea:d8:3c:e1:3a:63:20:15:0c:90:d4:6c:cc:c7:46:
         d0:e8:0d:35:aa:9d:cf:d2:88:4c:0d:39:c4:3e:14:e6:ab:f4:
         a0:c6:72:1d:a6:19:1f:a4:09:ad:75:63:39:ad:ec:97:3a:49:
         f2:ed:db:eb:b2:af:e2:34:2f:62:dc:c6:a3:08:91:b9:63:5d:
         94:d8:39:a5:5f:80:77:e9:e1:61:f6:b2:88:83:9f:5c:6b:83:
         8e:01:e6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:25 2026 by rpki-client