Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
File:                     ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json)
Hash identifier:          PxfHYD0nMLuCkkpfSGFPDgXmptTmmM2ms3MOOuhH+pQ=
Subject key identifier:   12:78:AE:6E:DA:C6:14:1F:17:C9:D0:F8:56:58:99:A1:BF:95:A2:38
Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C
Certificate issuer:       /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
Manifest number:          B6
Signing time:             Thu 16 Apr 2026 19:44:21 +0000
Manifest this update:     Thu 16 Apr 2026 19:44:20 +0000
Manifest next update:     Thu 23 Apr 2026 19:44:20 +0000
Files and hashes:         1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: RLk1B+3bxCtUxee7UKqe510Ah4GogggapJ9cIwXbsx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl
                          rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C
        Validity
            Not Before: Apr 16 19:44:20 2026 GMT
            Not After : Apr 23 19:44:20 2026 GMT
        Subject: CN=69e13c15-70d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:11:a4:05:ce:a4:62:28:70:15:63:2e:07:1e:
                    91:83:f2:a2:0e:63:19:51:a8:0c:9c:26:8e:18:3a:
                    ec:5f:4a:44:2d:0b:ec:38:6b:a3:84:af:73:3e:1b:
                    ce:da:6b:e3:61:e8:46:e5:e6:ad:34:a6:f2:cb:c8:
                    02:0c:e3:a5:26:f9:50:36:e0:d8:d1:d6:29:b6:46:
                    f6:eb:e9:a8:f0:98:87:12:fb:d4:12:dd:95:b8:39:
                    85:ed:dc:99:67:a5:95:9e:e8:ec:3b:37:48:a4:b4:
                    6c:9b:11:05:c7:5a:bd:14:6d:2d:20:b4:d5:09:2b:
                    2b:2a:50:66:fc:0c:7b:36:bd:fe:d8:fd:89:0d:92:
                    02:96:62:a8:28:8e:d6:16:b7:f1:20:b3:3a:3b:b5:
                    64:c4:aa:ee:9f:1f:4a:9d:54:3a:34:46:d1:c1:76:
                    28:a2:ac:f3:76:42:2e:c2:9d:93:52:b7:1b:a3:b7:
                    37:6f:8d:ad:8c:55:9b:00:10:c7:9e:8a:96:2b:b5:
                    7c:06:16:e4:23:8c:bc:6a:46:d2:0d:4e:d9:ea:d5:
                    a9:d6:d4:0a:bb:6e:0d:83:ea:00:5d:49:6d:4b:72:
                    f3:2b:25:99:1d:bc:5c:4c:a9:6d:fc:6a:3f:39:e0:
                    75:be:df:ac:92:a6:d2:58:ea:1f:f8:ec:cd:cf:2c:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:78:AE:6E:DA:C6:14:1F:17:C9:D0:F8:56:58:99:A1:BF:95:A2:38
            X509v3 Authority Key Identifier:
                keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:04:71:20:67:ae:61:92:4e:c2:c4:30:16:c2:50:08:8d:1e:
         00:89:26:17:e6:35:42:12:49:2f:17:88:6b:1f:ee:83:d4:eb:
         f7:71:3b:98:06:a0:7d:eb:76:52:44:57:14:de:ef:07:26:8f:
         bf:a2:bd:25:14:27:3a:43:6e:3a:8a:31:21:fa:d3:7e:bc:53:
         5a:16:8f:d3:0a:77:ba:bc:24:63:0e:f8:9d:e6:25:78:b0:0d:
         6b:06:09:93:ae:6c:db:1a:e8:8c:a5:d5:e5:95:84:df:99:78:
         df:e6:a2:8b:92:fc:10:33:a2:6c:74:1d:53:bc:e7:63:a8:57:
         67:a6:95:50:89:1a:bf:d5:3c:30:82:be:82:c6:fb:fc:14:f2:
         0b:3a:79:d1:1e:b4:88:d5:94:7c:75:08:5f:85:03:9a:f7:b0:
         f8:46:29:33:16:c8:ba:aa:5e:4c:54:a9:cc:79:b3:cc:6d:45:
         9c:32:99:7b:29:e5:cd:b2:98:e1:b9:8f:db:13:1e:de:83:e3:
         2f:8b:0d:e9:91:f9:b5:c9:2e:d0:67:29:c5:4b:cc:03:1f:0a:
         60:48:c2:a4:db:9b:25:55:22:26:23:4b:de:74:76:9f:e5:dc:
         3b:ca:2a:ad:ae:3d:67:42:f9:f8:c3:bc:97:71:e9:c2:f1:ca:
         fd:26:bd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:13:37 2026 by rpki-client