Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
File:                     h7LA6ClUHS71JmOF6zlGuNUpBgg.mft (raw, json)
Hash identifier:          PjE0erRKypn9Vnmb7oIUr96Y7NxrIHIBFwJjWnGUAIo=
Subject key identifier:   B1:02:4E:A6:A7:3E:75:73:5C:25:0F:35:32:6F:36:BE:34:CC:73:F3
Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08
Certificate issuer:       /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
Certificate serial:       08E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
Manifest number:          08BD
Signing time:             Mon 02 Mar 2026 00:46:13 +0000
Manifest this update:     Mon 02 Mar 2026 00:46:12 +0000
Manifest next update:     Mon 09 Mar 2026 00:46:12 +0000
Files and hashes:         1: h7LA6ClUHS71JmOF6zlGuNUpBgg.crl (hash: 2MBX59Che86gwZaCagp1qDQEPHCjP5FGTTAmNWMfRfA=)
                          2: 3619A9DA67B411F097A2770AC4F9AE02.roa (hash: Ksazfrc5OUb/nHj9nFm4bn/1eleiaahIlrj8EXouk8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl
                          rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:46:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2278 (0x8e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5B0, serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
        Validity
            Not Before: Mar  2 00:46:12 2026 GMT
            Not After : Mar  9 00:46:12 2026 GMT
        Subject: CN=69a4ddd5-36a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:9a:9b:3f:ff:a3:e7:71:ab:79:0d:fa:0f:
                    4e:57:2d:d1:1d:2b:b7:35:cb:60:66:1a:2a:b9:eb:
                    5a:be:ac:90:52:d7:5b:4d:bd:83:c8:7d:f6:a5:11:
                    8e:a2:68:3d:1c:c3:99:13:a6:2c:cc:50:b8:1e:42:
                    36:1c:a3:29:b5:f3:41:9a:d7:b9:7f:83:c7:42:83:
                    9c:0f:e0:b6:ee:be:93:ae:5a:87:7b:cf:ac:24:30:
                    e0:48:18:fc:ca:bd:13:11:a8:d5:ec:2a:10:60:ab:
                    c5:b4:1d:cc:56:a2:85:95:69:46:db:48:d1:73:16:
                    74:f0:9d:01:d1:ed:88:27:db:c1:83:0c:03:c5:24:
                    d3:6e:91:7a:92:e8:ca:3b:e7:c4:d3:f0:60:26:8e:
                    55:d9:10:13:ec:4d:f8:45:93:75:8c:bd:a4:e8:44:
                    93:c6:8e:92:57:35:5b:1d:46:56:98:57:c4:85:94:
                    4f:78:16:e7:be:b9:3f:ec:5e:81:ba:84:9b:91:db:
                    8c:9e:d8:41:71:03:cb:1f:c3:86:65:a7:f1:83:e6:
                    5e:23:dc:b4:2c:db:bc:71:c6:15:6d:03:f1:cd:47:
                    11:75:11:20:f1:4a:8b:45:11:8e:d0:fa:c9:54:5c:
                    ce:fa:8f:c1:83:6b:6b:68:a7:a2:c0:17:48:08:0e:
                    de:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:02:4E:A6:A7:3E:75:73:5C:25:0F:35:32:6F:36:BE:34:CC:73:F3
            X509v3 Authority Key Identifier:
                keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:99:79:91:aa:63:9b:f7:10:cc:28:a0:6a:74:5d:ee:cc:31:
         5c:20:7d:61:a2:c8:d7:06:9b:90:bd:29:79:41:d9:70:40:34:
         e6:e0:32:fd:06:d4:16:68:65:9f:c4:9f:29:c4:22:0e:3e:5a:
         33:9b:cd:af:37:62:18:33:02:46:88:6e:dd:38:a8:36:48:a2:
         de:eb:2d:a9:7e:bc:33:42:e1:78:7d:5f:46:8b:7d:43:8c:aa:
         e2:b7:05:85:f7:9d:14:fd:41:77:c0:d7:8d:52:5e:62:80:2c:
         5e:6e:51:aa:e7:f8:57:16:90:86:cf:49:5d:07:2e:bf:80:d3:
         49:e1:98:81:ca:e1:0b:64:ee:86:c4:6d:b1:53:6c:70:5e:88:
         18:2f:49:8d:85:cd:03:3a:0d:2c:6e:69:88:f3:3e:de:e2:8d:
         13:02:ad:d9:ad:90:ad:32:64:ba:4f:54:01:a5:a1:1e:51:3d:
         eb:e4:c4:51:d4:27:64:d5:f2:68:c0:45:cf:8a:6e:7a:93:b7:
         fd:c2:07:c1:a2:db:eb:5b:28:63:5c:50:b9:91:5d:7c:6f:8c:
         c2:3f:df:43:76:f6:1c:fc:b6:5b:56:d8:c9:f4:84:0d:59:21:
         7a:58:5c:72:ae:7f:e2:42:55:cf:6d:d2:a7:f0:d4:1e:f1:69:
         02:76:47:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:28 2026 by rpki-client