Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
File:                     hNKQTEi_9V2argiHuCwzDxubKaw.mft (raw, json)
Hash identifier:          kfF9eGTLlbJo97DDjcNc4+Hu6wn/RhfretvPSfuUlcw=
Subject key identifier:   23:FC:C3:D7:8B:C8:21:85:4D:E7:0E:45:70:E9:4F:BB:6F:66:84:F2
Authority key identifier: 84:D2:90:4C:48:BF:F5:5D:9A:AE:08:87:B8:2C:33:0F:1B:9B:29:AC
Certificate issuer:       /CN=A913A0F3/serialNumber=84D2904C48BFF55D9AAE0887B82C330F1B9B29AC
Certificate serial:       1716
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
Manifest number:          170A
Signing time:             Mon 02 Mar 2026 16:40:03 +0000
Manifest this update:     Mon 02 Mar 2026 16:40:03 +0000
Manifest next update:     Mon 09 Mar 2026 16:40:03 +0000
Files and hashes:         1: hNKQTEi_9V2argiHuCwzDxubKaw.crl (hash: vHIGaTpOvukzXnZONgM2OBVGocdIHq6h5dImLPxk3UI=)
                          2: 0682A6A03DC411EBBFE0EA13C4F9AE02.roa (hash: efogen/tC+/AdiBRhX2upxGF7tJEq1IHdI05AOF10sQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.crl
                          rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5910 (0x1716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A0F3, serialNumber=84D2904C48BFF55D9AAE0887B82C330F1B9B29AC
        Validity
            Not Before: Mar  2 16:40:03 2026 GMT
            Not After : Mar  9 16:40:03 2026 GMT
        Subject: CN=69a5bd63-1d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:fa:d8:34:6d:f5:94:e4:b1:fd:1c:11:83:
                    5f:3f:b0:c6:d3:1d:42:bc:99:6f:08:35:b6:fd:0e:
                    21:4f:b5:77:f0:4d:11:8b:61:69:58:2b:25:2e:e6:
                    d6:82:36:4a:89:a8:95:f4:d1:4b:c5:b0:ed:73:c1:
                    d3:a3:c1:69:a6:9a:35:d8:a2:c3:59:af:25:d1:73:
                    1e:38:33:f8:58:8a:b6:ad:36:10:da:d8:a9:17:91:
                    d6:39:cb:08:14:7b:f8:10:ba:99:16:4e:c3:06:37:
                    83:89:2a:01:94:f1:e3:35:00:c7:8b:dc:26:50:47:
                    94:8d:48:fe:1c:ad:93:1d:c5:91:dc:49:f8:65:24:
                    be:e4:ce:55:73:ec:0d:8c:5e:77:07:15:56:6d:ef:
                    9e:cd:f5:10:0c:53:d6:5b:62:2c:07:6f:b6:e0:6f:
                    9c:47:4a:94:72:42:23:7c:96:34:a2:51:83:03:88:
                    b9:42:08:e0:b8:1f:dd:4a:69:6d:e9:77:29:2e:80:
                    f0:5a:29:67:73:40:73:09:64:ef:cb:4c:19:96:a0:
                    d5:7f:a3:52:f3:ab:06:08:25:83:b9:38:fd:22:3e:
                    4e:d7:86:d9:e4:ad:08:59:d6:10:05:69:a0:44:ed:
                    9b:83:d8:bb:f8:72:fc:91:f2:3d:05:99:ed:f8:bc:
                    03:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FC:C3:D7:8B:C8:21:85:4D:E7:0E:45:70:E9:4F:BB:6F:66:84:F2
            X509v3 Authority Key Identifier:
                keyid:84:D2:90:4C:48:BF:F5:5D:9A:AE:08:87:B8:2C:33:0F:1B:9B:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5e:88:dd:67:83:d2:2b:48:ea:0c:df:38:0f:bb:6e:84:00:
         db:f5:9f:1a:33:06:10:f7:49:a9:92:ea:71:c5:4f:af:a0:bb:
         71:62:ee:54:6b:49:51:da:7c:92:37:b2:63:f0:a4:74:59:bc:
         64:3f:e5:f1:90:ac:cb:c1:a8:1e:35:62:3d:b6:bf:33:08:0c:
         dd:ad:97:60:13:e4:c3:d6:99:71:99:c1:03:91:b6:6f:09:db:
         a4:8d:78:ec:d7:71:00:ca:28:44:5e:c4:8f:c5:64:25:ef:2f:
         4e:f2:cb:0d:89:29:ef:47:c6:cb:40:4b:ca:4f:c4:fe:04:74:
         e2:a4:b7:08:c2:88:09:6d:bd:9f:8b:11:70:ce:0d:ad:dd:3f:
         fc:9a:87:c8:89:3a:d0:fd:e6:2f:fe:ac:38:93:81:0c:97:6e:
         d3:b4:0b:4a:43:2e:f3:0a:88:b9:fb:17:49:00:18:bb:c8:78:
         a2:ba:4d:b2:22:e1:4a:3a:dd:96:10:57:8f:16:f7:ff:49:8d:
         29:ec:da:eb:a0:3b:c9:e2:51:9b:3c:f5:49:96:b3:16:4e:00:
         99:9a:95:31:f4:c3:69:2e:30:1e:8d:70:83:e4:9a:cf:2f:28:
         a3:32:a4:c4:4b:f6:ca:09:b0:56:ab:90:8a:90:68:79:2e:de:
         22:e4:ec:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:33 2026 by rpki-client