Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft
File:                     HKNtz8PAQzP4g7g18sjd0CXVQQY.mft (raw, json)
Hash identifier:          oxkzCmLJJDSDWBcHaJJw6G3m01L/xXWisfwf4R7lVJQ=
Subject key identifier:   26:5C:0A:09:7A:0B:7B:1A:15:E1:F6:1E:25:19:B6:E0:B1:1A:B7:73
Authority key identifier: 1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06
Certificate issuer:       /CN=A9142F59/serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft
Manifest number:          97
Signing time:             Fri 17 Apr 2026 07:15:17 +0000
Manifest this update:     Fri 17 Apr 2026 07:15:17 +0000
Manifest next update:     Fri 24 Apr 2026 07:15:17 +0000
Files and hashes:         1: HKNtz8PAQzP4g7g18sjd0CXVQQY.crl (hash: YMHQg1M0aFpQYNWGCUgMl7xkQbwpzJ2iknuV7rYqXuM=)
                          2: C7A29726A65311F091E2CF10C4F9AE02.roa (hash: RXr/2IJ/9MWQk0OdqW4xmP/C7ZFOJQkVQv3V5AO424U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl
                          rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142F59, serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106
        Validity
            Not Before: Apr 17 07:15:17 2026 GMT
            Not After : Apr 24 07:15:17 2026 GMT
        Subject: CN=69e1de05-4887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:61:fa:bf:95:ab:67:77:d2:f8:4a:59:2e:45:
                    e7:04:2d:e4:88:74:3b:b9:1e:db:ac:36:c9:3f:6c:
                    5d:f6:a8:e0:66:a4:7b:b0:a6:78:43:f6:27:44:a8:
                    b0:72:8d:5f:cf:93:ba:1d:8c:5d:41:b3:f6:92:6b:
                    1d:cc:1a:df:1d:1b:cb:16:57:50:20:0d:fd:51:92:
                    e0:e5:98:53:85:e3:5e:d2:13:79:0c:a0:cf:fc:42:
                    74:e7:c7:82:05:be:3a:a4:48:e7:7b:55:77:ee:e5:
                    ef:5b:9b:a1:bf:2b:58:64:8c:90:1b:15:94:18:e6:
                    a7:b6:9c:5f:07:69:b0:d9:8f:3a:02:3a:b0:e9:57:
                    a1:7e:58:de:cb:c8:6b:6a:92:e8:48:9e:43:00:dc:
                    8f:2b:e1:53:1a:92:f9:7c:34:b5:66:c1:48:73:74:
                    8d:7b:c7:42:00:ae:be:5f:ac:6b:2e:99:d1:85:0e:
                    5f:b7:af:ee:31:dd:02:f6:ab:ba:8f:48:72:7d:df:
                    8c:ef:cf:19:1f:99:29:b7:58:5a:88:e4:11:b5:1a:
                    a9:d8:87:42:00:cc:0c:d9:fc:56:50:56:a8:11:75:
                    64:bc:1e:71:1a:5c:ee:e5:6f:a5:0e:2b:20:2f:36:
                    46:8b:23:11:9f:8c:69:b2:88:13:ed:93:d7:7b:50:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5C:0A:09:7A:0B:7B:1A:15:E1:F6:1E:25:19:B6:E0:B1:1A:B7:73
            X509v3 Authority Key Identifier:
                keyid:1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fe:ed:8a:95:7a:3f:f4:04:67:35:4d:93:b3:9f:e0:2e:33:
         29:18:36:1c:cb:c3:fd:68:95:00:69:93:8c:55:7d:d7:fc:8d:
         df:e2:b0:3f:fd:49:d8:82:8f:18:93:74:3d:0b:37:f3:75:b7:
         9a:94:14:54:4a:a3:48:66:d4:1b:18:6f:74:76:d9:5f:91:b4:
         f5:f8:87:20:b1:a2:ff:71:31:b1:07:f2:37:d4:e4:6a:39:b4:
         c5:cc:51:1e:f8:c2:b3:39:83:ef:7f:99:24:4a:ca:36:66:93:
         46:10:ca:76:56:3e:9d:41:c0:69:0b:7a:80:0b:c5:30:6c:8b:
         c5:eb:cb:1f:d9:d9:a9:e0:d4:da:61:d8:70:d6:ab:b8:26:9d:
         5e:a7:8f:f2:1e:6c:59:2c:b4:f1:bc:7f:80:d0:f5:00:5c:5f:
         f5:5f:29:85:b4:44:73:d9:8e:62:f8:5f:09:9a:b2:f4:5b:b0:
         4c:9b:93:36:16:79:e4:29:ae:91:e9:6a:d4:70:16:1a:49:da:
         fc:b5:10:2e:bf:e1:ec:84:64:38:b2:17:84:a5:8f:d0:15:95:
         29:6e:8a:e7:b5:4f:dc:1a:86:69:c4:db:5e:60:31:23:ca:26:
         32:73:be:85:a7:83:90:bb:fb:7c:4e:c1:57:69:a2:bc:33:30:
         f1:38:f2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:57:14 2026 by rpki-client