Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
File:                     hHdPRraSCgXa3UJHe6qzbucka5Q.mft (raw, json)
Hash identifier:          3GhmTB8jOnnZM0PQ84FjF0LUUfGXBeYOEWpC0KY9QoY=
Subject key identifier:   07:26:93:0C:0B:2C:9A:2E:04:59:F1:8B:03:9E:6C:EE:52:43:70:4F
Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
Certificate issuer:       /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
Certificate serial:       0DCD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
Manifest number:          0DC2
Signing time:             Tue 12 May 2026 17:55:53 +0000
Manifest this update:     Tue 12 May 2026 17:55:52 +0000
Manifest next update:     Tue 19 May 2026 17:55:52 +0000
Files and hashes:         1: hHdPRraSCgXa3UJHe6qzbucka5Q.crl (hash: C8fzdt2gdUjIaw5RF9M4ldqPZ9/GnZnzaR/ujZF/4MU=)
                          2: E727A05600FD11EB9286115AC4F9AE02.roa (hash: osTG3y7Aw7NEIaD/HGEqWnzu7+4Rus4i5AaVvHjByPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl
                          rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3533 (0xdcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9162, serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
        Validity
            Not Before: May 12 17:55:52 2026 GMT
            Not After : May 19 17:55:52 2026 GMT
        Subject: CN=6a0369a9-d8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:58:ed:3c:94:0f:df:74:c8:da:26:b3:98:a6:
                    1c:2c:36:87:ca:a4:36:92:e3:ae:94:f6:bf:35:d8:
                    3e:7c:1c:17:ce:9f:5c:92:ef:56:d4:ad:aa:06:1e:
                    6b:91:cd:0c:57:68:02:67:1d:c9:b0:f6:d9:09:f5:
                    55:e3:3d:38:92:7b:22:77:a9:ff:9b:5d:99:8c:e3:
                    7f:32:24:06:3f:72:ff:a2:e0:4c:09:b5:08:4c:bf:
                    eb:57:ac:55:b9:c9:29:90:e8:ca:b7:9b:1b:f8:79:
                    96:6b:0b:e2:f6:8a:f3:23:e3:bf:2d:1f:10:f7:58:
                    b6:c2:8c:51:9c:59:fb:68:e3:da:7f:6e:3d:b6:25:
                    d4:fc:59:10:5a:ad:c1:61:8e:92:c0:47:80:68:b3:
                    02:43:78:7c:58:22:fc:a8:76:4b:69:f3:92:1a:64:
                    10:2d:ba:05:3a:6d:78:27:e1:d5:5c:eb:7c:4c:90:
                    8a:91:39:15:93:ca:f8:1d:e0:cb:5c:96:4a:24:b5:
                    d8:22:bd:c4:08:58:40:95:71:4c:3a:67:e9:b9:cc:
                    0e:fa:e6:8c:4e:0e:86:d1:aa:ab:eb:16:59:02:1e:
                    4f:9c:ad:80:9d:df:1c:6a:02:aa:ee:b6:c7:5b:92:
                    6e:59:2a:25:70:be:73:91:b3:64:25:88:34:e2:47:
                    29:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:26:93:0C:0B:2C:9A:2E:04:59:F1:8B:03:9E:6C:EE:52:43:70:4F
            X509v3 Authority Key Identifier:
                keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:1d:a8:4a:cd:b2:61:3e:a5:67:c8:a0:4f:15:7f:f4:f3:
         c8:e4:a3:33:d1:f9:36:aa:5f:1c:f2:b7:11:cc:31:ae:27:77:
         64:21:81:05:75:6c:54:04:94:12:af:ca:03:2c:72:fe:d7:ea:
         09:96:7d:77:14:39:8f:c4:72:d8:a1:85:89:0f:64:dc:32:28:
         d2:fb:8c:31:ae:20:be:c5:27:3f:86:a4:28:8b:db:58:44:57:
         a2:8d:76:82:8e:2b:2f:ec:70:1b:34:7e:3b:fd:4e:ea:f0:27:
         9f:e4:38:39:11:37:0e:43:49:63:75:ee:13:93:d6:da:d7:0e:
         bb:ee:8e:2c:ad:38:aa:c4:49:a3:0d:3c:8d:df:3a:3b:ea:ac:
         2e:35:35:8a:23:3c:5e:4d:6f:ea:ee:24:d8:6e:4b:14:df:e1:
         68:c1:30:fb:f1:af:d3:c1:d9:df:5e:2d:cb:ed:2c:75:a6:26:
         11:11:91:5a:04:2c:15:49:10:a9:a8:c5:d5:54:de:f9:0f:03:
         49:7f:57:1d:bc:27:88:9a:ba:d8:92:60:46:bd:7b:54:18:4f:
         8e:50:5d:ce:d2:8a:24:6f:77:f8:ec:5e:6a:75:04:fb:d7:53:
         10:45:a6:64:61:23:b8:4d:32:a5:c8:20:9d:00:33:35:be:92:
         46:1d:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:30 2026 by rpki-client