Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
File:                     h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft (raw, json)
Hash identifier:          E/A/2/hpdqWKq1qhgWYDhcHF13Y/h4RZ9B8lq66u4MY=
Subject key identifier:   B2:73:25:DE:1C:DD:74:14:BD:C3:37:8F:FD:83:AE:38:80:EA:79:EE
Authority key identifier: 87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34
Certificate issuer:       /CN=A91D226F/serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234
Certificate serial:       0253
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
Manifest number:          0240
Signing time:             Mon 11 May 2026 02:40:57 +0000
Manifest this update:     Mon 11 May 2026 02:40:56 +0000
Manifest next update:     Mon 18 May 2026 02:40:56 +0000
Files and hashes:         1: h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl (hash: KrWYyD/TrSiXEKO98D7+Ex5SB1rJAkqgQH7B7NfMwe8=)
                          2: 3C4FDE3C0FCA11F18E293E94403D8C67.roa (hash: WfW3TvX//PVo0P/ZBW64rIIqCW2R7aTX6JlE3iuszp0=)
                          3: 3681B720B2D611EF9B481340C4F9AE02.roa (hash: 7FkfyTgMYCNyYJWlTpM6j8Of7FP+cV14dFT59AfozbY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D226F, serialNumber=87F0596871B515BBB3D2982DC6FB9C12DEF4C234
        Validity
            Not Before: May 11 02:40:56 2026 GMT
            Not After : May 18 02:40:56 2026 GMT
        Subject: CN=6a0141b8-7f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:a0:9c:ef:f7:10:40:bd:f0:34:c1:47:d5:
                    35:76:ea:14:a5:90:a5:c6:e1:18:6f:a8:d2:8e:83:
                    6f:ad:81:0c:2a:6b:9c:99:b8:3e:4f:33:bc:ba:8a:
                    58:8e:a1:7c:a9:90:2c:5c:a2:33:89:c0:e6:4a:96:
                    67:08:fb:da:46:82:1f:d8:9d:4a:06:60:74:14:fa:
                    24:e4:60:ef:7c:5e:7d:c0:3a:4e:30:e0:96:8f:bc:
                    d4:7d:80:2e:5a:27:fc:1b:20:fa:ba:92:53:c4:10:
                    8f:60:14:8b:2a:32:61:35:f4:8c:ad:78:96:a1:3f:
                    0f:6b:fe:f7:8d:94:fc:d3:58:5b:7b:ae:ca:d8:4d:
                    29:8e:92:c8:34:e5:fe:4a:ac:9f:6b:cb:f6:53:76:
                    d1:a0:dd:3b:ee:5c:94:23:45:9c:f2:39:c7:91:c4:
                    fb:70:fe:74:85:0a:18:1b:aa:01:0a:ab:02:fc:bc:
                    c8:90:02:55:ee:76:af:8b:53:51:5b:7f:67:6b:b3:
                    c9:29:a4:0d:41:d2:bb:5a:85:c2:a1:55:44:09:46:
                    d9:40:f2:77:3c:87:5c:dd:5a:ae:db:ed:2e:85:61:
                    78:2d:4a:96:0a:b6:e6:11:c3:e2:a5:3e:f8:4c:0f:
                    ea:a9:32:31:30:64:c6:aa:6e:9a:c7:82:b0:92:da:
                    bf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:73:25:DE:1C:DD:74:14:BD:C3:37:8F:FD:83:AE:38:80:EA:79:EE
            X509v3 Authority Key Identifier:
                keyid:87:F0:59:68:71:B5:15:BB:B3:D2:98:2D:C6:FB:9C:12:DE:F4:C2:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_BZaHG1Fbuz0pgtxvucEt70wjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D226F/D5C56E28FAD411ED80EED05FC4F9AE02/h_BZaHG1Fbuz0pgtxvucEt70wjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a1:68:71:f8:93:84:93:ad:d0:e3:23:ac:ff:f9:01:66:b6:
         4f:b5:2a:f0:85:72:72:22:76:44:b5:9a:89:08:42:69:b3:8b:
         27:57:69:a0:f3:ad:eb:cb:5a:62:80:78:cf:41:65:a4:91:6e:
         98:c3:b3:c8:be:38:3f:60:cc:0a:1c:c7:a9:c8:fa:d6:ed:79:
         83:36:d0:71:f8:69:82:84:4e:e5:52:59:bf:2a:c1:ad:d4:51:
         e8:13:80:2d:11:e6:28:e9:d4:87:4e:0a:91:46:0b:4a:6a:50:
         d7:50:90:d1:e3:43:d5:74:ee:18:e5:b6:79:b9:e1:c0:c6:72:
         0a:ba:0f:93:a2:d4:6d:53:0c:71:7a:31:be:d5:b7:0f:38:3b:
         57:df:7c:f0:8e:a5:7f:f7:19:0c:35:a5:ca:df:88:dd:0f:a0:
         52:e2:96:d1:17:85:90:d5:e8:27:a3:05:04:8f:b4:ee:5a:bb:
         c1:fa:ff:63:6c:7c:e7:65:e9:fe:77:0c:ff:93:3b:8b:47:07:
         4d:28:b8:93:95:5c:43:d5:5e:a5:2c:f6:86:42:f7:67:37:6f:
         9c:14:c1:cb:7f:f7:d1:e2:c5:c2:d2:cb:ec:be:b9:11:6e:c3:
         ca:eb:fc:56:51:4a:34:5a:b2:29:48:4d:bd:92:87:68:8f:e9:
         f2:d0:ce:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDIyNkYxMTAvBgNVBAUTKDg3RjA1OTY4NzFCNTE1QkJCM0QyOTgyREM2RkI5QzEy
REVGNEMyMzQwHhcNMjYwNTExMDI0MDU2WhcNMjYwNTE4MDI0MDU2WjAYMRYwFAYD
VQQDEw02YTAxNDFiOC03ZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl+ugnO/3EEC98DTBR9U1duoUpZClxuEYb6jSjoNvrYEMKmucmbg+TzO8uopY
jqF8qZAsXKIzicDmSpZnCPvaRoIf2J1KBmB0FPok5GDvfF59wDpOMOCWj7zUfYAu
Wif8GyD6upJTxBCPYBSLKjJhNfSMrXiWoT8Pa/73jZT801hbe67K2E0pjpLINOX+
Sqyfa8v2U3bRoN077lyUI0Wc8jnHkcT7cP50hQoYG6oBCqsC/LzIkAJV7navi1NR
W39na7PJKaQNQdK7WoXCoVVECUbZQPJ3PIdc3Vqu2+0uhWF4LUqWCrbmEcPipT74
TA/qqTIxMGTGqm6ax4Kwktq/dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJzJd4c
3XQUvcM3j/2DrjiA6nnuMB8GA1UdIwQYMBaAFIfwWWhxtRW7s9KYLcb7nBLe9MI0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI2Ri9ENUM1NkUyOEZB
RDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZidXowcGd0eHZ1Y0V0NzB3
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hfQlphSEcxRmJ1ejBwZ3R4dnVjRXQ3MHdqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjI2Ri9ENUM1NkUyOEZBRDQxMUVEODBFRUQwNUZDNEY5QUUwMi9oX0JaYUhHMUZi
dXowcGd0eHZ1Y0V0NzB3alEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnaFocfiThJOt0OMjrP/5AWa2T7Uq8IVyciJ2RLWaiQhCabOLJ1dpoPOt68ta
YoB4z0FlpJFumMOzyL44P2DMChzHqcj61u15gzbQcfhpgoRO5VJZvyrBrdRR6BOA
LRHmKOnUh04KkUYLSmpQ11CQ0eND1XTuGOW2ebnhwMZyCroPk6LUbVMMcXoxvtW3
Dzg7V9988I6lf/cZDDWlyt+I3Q+gUuKW0ReFkNXoJ6MFBI+07lq7wfr/Y2x852Xp
/ncM/5M7i0cHTSi4k5VcQ9VepSz2hkL3ZzdvnBTBy3/30eLFwtLL7L65EW7Dyuv8
VlFKNFqyKUhNvZKHaI/p8tDOQQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:30:42 2026 by rpki-client