Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
File:                     9cHnH7saQdeYC-JY2XxIc5qvgso.mft (raw, json)
Hash identifier:          dwSmjulRlVNYwgeU2RW8YQX8kphUAXeOPCgtAhGZ6Rs=
Subject key identifier:   4B:72:F4:E3:2B:BE:E9:AF:DD:C7:F6:65:93:7D:A4:03:8F:8B:7C:0F
Authority key identifier: F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA
Certificate issuer:       /CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA
Certificate serial:       0510
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
Manifest number:          0507
Signing time:             Thu 16 Apr 2026 23:33:52 +0000
Manifest this update:     Thu 16 Apr 2026 23:33:52 +0000
Manifest next update:     Thu 23 Apr 2026 23:33:52 +0000
Files and hashes:         1: 9cHnH7saQdeYC-JY2XxIc5qvgso.crl (hash: UlF9ae8amJ5dHIX9AzFNMKPfHIAf1oePqTRZovfYQqo=)
                          2: 3D546FCE4F0711EC960AFD0CC4F9AE02.roa (hash: wQRuE7hZR60ASbUdyxn7Q1yzJfs0TbeVvhz27sSwJvs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl
                          rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296 (0x510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D16D, serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA
        Validity
            Not Before: Apr 16 23:33:52 2026 GMT
            Not After : Apr 23 23:33:52 2026 GMT
        Subject: CN=69e171e0-b645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:28:41:91:03:98:d5:54:4d:86:cc:f6:77:
                    65:e1:a0:5a:08:05:95:cc:d0:1b:fd:fc:aa:e0:8a:
                    2d:ff:f4:27:bb:20:b9:93:b5:c3:f6:8f:bc:54:56:
                    e5:8b:e7:3c:17:79:8e:ee:bc:7c:73:15:4f:46:55:
                    9c:0e:f4:68:2c:71:4e:35:39:39:9a:a4:af:9f:25:
                    1d:82:ba:ab:6b:6e:fb:69:bb:59:c4:e1:69:dd:dc:
                    25:8e:bf:21:e9:dd:de:7b:b4:61:10:04:83:78:1a:
                    90:78:5c:ba:1a:f6:6d:8b:87:63:e5:10:b7:eb:d6:
                    44:00:d6:76:14:04:17:74:4c:06:66:67:60:2a:74:
                    38:be:e5:72:a2:2b:37:6c:43:96:88:63:9d:81:53:
                    b7:9b:b9:98:85:8d:de:a1:5b:f7:1d:d0:7c:ad:65:
                    6a:eb:45:2e:91:e5:6d:09:cc:17:39:8b:4e:1f:d2:
                    b0:55:ae:64:00:09:7d:ec:e9:bd:c5:13:26:d5:fd:
                    68:5b:b0:4c:15:78:e9:fe:93:15:52:05:1f:af:db:
                    ba:af:56:28:cf:f6:16:80:f9:d7:fd:be:2a:db:73:
                    74:3b:61:96:3e:ec:82:a0:d2:6b:ce:e8:31:24:99:
                    7e:62:8b:66:a0:34:be:4c:cd:88:f7:49:97:b2:57:
                    0f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:72:F4:E3:2B:BE:E9:AF:DD:C7:F6:65:93:7D:A4:03:8F:8B:7C:0F
            X509v3 Authority Key Identifier:
                keyid:F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6b:09:82:de:ca:27:e1:65:a1:84:3d:f4:1a:6e:e4:4c:35:
         9a:a8:70:f2:52:82:dd:fd:27:07:e2:66:7b:b4:06:86:0a:f2:
         f5:7b:1a:c7:67:b5:be:cb:b5:ab:0e:a4:61:e6:57:e6:77:56:
         16:56:6f:b8:bb:a7:9a:a0:24:e9:fe:5d:df:63:1d:b4:e2:c7:
         61:e0:f0:ea:e6:0d:8d:74:3c:45:f2:13:85:4e:6f:93:e8:a3:
         f6:4e:59:84:06:92:1a:71:84:26:a2:83:a0:ca:f6:39:ce:a9:
         8c:8d:e1:66:87:71:3b:45:80:a4:90:33:b5:2b:ba:83:62:aa:
         ce:f7:95:25:67:f8:d5:0c:9e:6a:f0:24:f9:7a:f5:bc:a9:89:
         14:94:d9:4c:04:47:43:f8:a1:c0:8c:67:c2:8f:ad:cd:64:14:
         cb:23:3d:9f:ed:ee:ff:72:69:9a:e3:fa:6c:d0:f2:81:13:6b:
         ac:8d:1e:e1:50:17:d5:41:65:63:79:05:aa:32:5d:32:65:64:
         17:fd:ba:08:58:95:e9:9f:46:43:b5:cd:3a:76:3c:7b:bf:64:
         78:ed:9e:38:3b:d0:fa:52:4c:e4:7b:d9:0b:c1:ff:84:ba:9f:
         8c:52:55:94:91:39:12:7c:8a:3c:8f:1d:a2:90:28:b5:7e:4a:
         c9:c3:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:25 2026 by rpki-client