Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
File:                     s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json)
Hash identifier:          Hb+fJAFTNvCw11PzeX/dhIbfndC4EDId+pOm+Bq2XIQ=
Subject key identifier:   39:06:E6:A6:67:82:7D:9E:33:2A:C0:A8:F5:3A:5F:6A:43:9B:16:16
Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC
Certificate issuer:       /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
Manifest number:          E8
Signing time:             Wed 25 Mar 2026 05:38:57 +0000
Manifest this update:     Wed 25 Mar 2026 05:38:56 +0000
Manifest next update:     Wed 01 Apr 2026 05:38:56 +0000
Files and hashes:         1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: fEQacUVwgfJHskHmCgQG8mqi9K5OW5KroY6f3RbPjr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl
                          rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
        Validity
            Not Before: Mar 25 05:38:56 2026 GMT
            Not After : Apr  1 05:38:56 2026 GMT
        Subject: CN=69c374f0-db27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:b5:8a:ae:2d:b5:9c:d3:c9:5d:b5:68:64:
                    d7:5b:30:e6:48:71:8d:17:f3:48:d7:b7:d7:98:77:
                    6a:28:5d:9f:b5:fd:f5:eb:1a:24:85:a8:51:61:a6:
                    00:1f:c5:53:06:cc:85:5f:c0:e9:b5:a3:89:84:8b:
                    2d:cb:49:09:f7:ed:73:a6:37:b7:70:5b:84:a6:51:
                    26:a7:25:3e:07:b5:82:bd:a0:75:75:6b:d3:2e:5f:
                    db:a1:e2:dc:af:45:85:91:f1:4c:9e:6b:37:38:70:
                    a2:e1:2e:c8:a8:93:c5:05:68:93:69:33:ce:74:b7:
                    21:c1:1c:b4:f7:47:d3:f8:bb:6f:aa:a3:e0:25:dc:
                    13:40:8f:18:94:76:36:ab:79:48:b8:d1:4a:9b:c6:
                    79:b8:fa:40:92:6f:55:06:7d:7c:ae:6b:2d:de:7f:
                    ad:f9:ea:80:89:fb:9f:e3:4d:95:e8:93:bc:8f:93:
                    55:91:ac:48:00:d3:82:a4:ba:98:c8:ae:4f:f3:8d:
                    0e:3b:ea:56:e6:b6:23:fa:ce:ea:e7:bd:fc:12:75:
                    1c:e6:5a:e8:f9:3e:70:e2:23:3c:88:8d:f2:3a:97:
                    8d:83:9b:8b:af:6d:ea:e8:46:60:66:96:77:c8:0f:
                    55:e0:49:c2:ff:aa:83:fa:fb:25:bc:f7:6f:bb:9d:
                    51:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:06:E6:A6:67:82:7D:9E:33:2A:C0:A8:F5:3A:5F:6A:43:9B:16:16
            X509v3 Authority Key Identifier:
                keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:ea:2a:34:36:42:db:87:8f:8e:aa:c5:2a:70:95:40:17:7e:
         9c:0e:4a:94:f0:b3:07:2c:10:e0:d1:48:cd:9d:77:c9:61:c1:
         23:5f:86:0b:92:f9:c5:1e:18:40:ca:aa:a9:ea:f6:bb:90:6d:
         67:58:f5:a2:10:82:dd:47:cb:6a:d6:0c:49:cc:50:c0:d3:0f:
         c0:f5:78:08:5a:79:bd:dc:96:37:1d:b4:59:f3:e2:b7:c2:38:
         0c:14:72:cf:a4:91:69:bd:f9:b1:e0:90:13:aa:34:f8:a6:f9:
         40:43:62:eb:ae:32:b8:0d:32:1c:63:78:f9:b3:cb:4d:0c:90:
         94:35:73:4d:5b:6c:10:72:44:68:df:63:ea:8c:12:ae:39:e5:
         0f:b2:98:b1:2d:41:1a:99:2d:30:57:76:ee:6e:f9:43:63:ee:
         08:91:f3:da:86:04:d2:ee:8d:29:f6:96:87:98:98:7d:e2:0f:
         5e:70:0a:1d:f5:b3:8d:34:7e:61:21:ba:51:1b:43:d1:07:4f:
         0a:99:52:bd:e9:d3:48:58:c4:30:04:15:8e:e7:27:b0:1c:f6:
         82:08:d8:ce:86:a1:c3:42:75:98:ea:73:b2:19:34:e5:81:ac:
         d2:64:e0:66:ad:85:b3:46:3f:d8:4c:d6:7e:bd:1a:6b:f9:b0:
         24:69:35:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:46:16 2026 by rpki-client