Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
File:                     hETqrJKViOiWt8WR9g40MEKw37w.mft (raw, json)
Hash identifier:          EeQ90dMK+kF2t3p7OI9r9efJnwp/6ztWkaOFahIOFj0=
Subject key identifier:   6F:6B:D0:56:F2:23:CA:FC:F8:07:59:C2:6A:78:D0:62:B3:03:35:10
Authority key identifier: 84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC
Certificate issuer:       /CN=A9114431/serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
Certificate serial:       0453
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
Manifest number:          044B
Signing time:             Fri 17 Apr 2026 00:08:38 +0000
Manifest this update:     Fri 17 Apr 2026 00:08:37 +0000
Manifest next update:     Fri 24 Apr 2026 00:08:37 +0000
Files and hashes:         1: hETqrJKViOiWt8WR9g40MEKw37w.crl (hash: la3k3a/dtCV/IaZir0PSYtqFykJmEdOhBm/8h0cbVQM=)
                          2: C8899170FB7211F08F8762E74F6F56BC.roa (hash: ctiS/J2TVY8JJKVzXFhRdcRDN1f1H0n8TDJvzQMZJ5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl
                          rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114431, serialNumber=8444EAAC929588E896B7C591F60E343042B0DFBC
        Validity
            Not Before: Apr 17 00:08:37 2026 GMT
            Not After : Apr 24 00:08:37 2026 GMT
        Subject: CN=69e17a06-8910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:cd:b6:a5:99:e6:a7:ec:ed:14:9e:81:a1:
                    bd:8b:c8:ac:ce:00:e2:3b:40:ab:e4:cf:9b:38:c3:
                    a1:05:07:37:35:e8:11:7c:17:c6:be:1d:6d:1a:c3:
                    e0:0e:24:0f:fb:b4:17:8b:1e:78:39:eb:89:64:23:
                    85:cc:2d:32:20:fa:14:7c:69:01:1e:16:97:ac:21:
                    88:19:fc:06:4d:5d:a0:ea:53:ed:d1:04:a6:de:92:
                    20:aa:85:72:39:dc:a8:5b:95:a7:c7:e0:06:e6:6b:
                    4f:02:54:a4:d9:cf:73:72:86:ed:0d:a1:e3:64:9d:
                    b2:4b:b0:e7:ea:cb:71:b2:97:e0:14:ca:5e:cf:5b:
                    31:bd:c9:52:dc:eb:9c:d8:ff:98:7c:09:ce:b3:ae:
                    ea:92:0b:24:55:f2:34:78:39:09:cb:37:da:63:04:
                    c0:ee:d8:e7:27:17:d4:5c:f2:81:e4:9b:dc:0b:81:
                    f3:e6:7d:bf:f0:a2:05:b9:fd:66:55:93:46:76:43:
                    a6:90:4a:ca:3a:87:b5:3b:2b:fa:ef:9f:4d:9f:09:
                    b3:44:15:3b:1a:ec:3b:7d:df:80:fa:d1:ae:53:96:
                    c6:51:45:c5:f8:a8:99:a2:9d:f9:04:80:58:e9:41:
                    41:dc:41:12:00:71:89:50:0d:3f:54:1b:ba:76:11:
                    58:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6B:D0:56:F2:23:CA:FC:F8:07:59:C2:6A:78:D0:62:B3:03:35:10
            X509v3 Authority Key Identifier:
                keyid:84:44:EA:AC:92:95:88:E8:96:B7:C5:91:F6:0E:34:30:42:B0:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hETqrJKViOiWt8WR9g40MEKw37w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114431/12247E249A5811EC8582F31AC4F9AE02/hETqrJKViOiWt8WR9g40MEKw37w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:bf:e5:fc:6c:d8:0f:0f:1f:8e:f1:05:bf:a5:bf:14:04:
         27:92:c6:86:f6:c4:8e:0d:4c:9b:bb:29:9a:32:17:bc:45:09:
         72:48:26:11:6b:e8:7d:7b:95:e7:4e:8e:31:e1:89:8e:3a:e1:
         03:52:7b:18:35:6c:c4:e2:f6:05:98:5a:f3:e8:2d:0b:e7:f5:
         5e:d4:a6:8d:19:ce:fe:ca:9c:c7:38:92:28:d8:76:b0:6b:6b:
         00:41:91:4a:e9:02:a2:15:d6:e1:7d:55:3a:e6:7b:8d:0e:c0:
         18:45:91:e7:53:de:62:f7:32:41:7e:da:59:7b:58:3b:63:5d:
         3b:cb:f4:70:ff:3b:0a:32:99:b2:dd:21:03:db:32:6f:f0:d6:
         59:03:db:a8:d4:91:ca:85:1e:8c:e2:01:4c:71:f1:ff:dc:7d:
         a4:64:2e:b1:68:4b:7c:f3:10:ff:dd:cb:c9:98:a0:43:ef:10:
         5b:c6:46:ee:9d:40:01:14:26:5b:b4:ff:d9:d5:23:71:a0:fd:
         e9:bd:21:7e:d2:ac:3e:c6:26:a4:ca:97:66:71:ae:61:05:a2:
         d5:56:0a:8b:83:fe:94:3e:f5:97:d9:79:24:bf:2b:26:3b:1c:
         33:41:b3:f7:3a:3f:0a:80:23:99:4d:a7:ba:80:64:63:fb:b0:
         fe:ab:6d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:50:30 2026 by rpki-client