Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
File:                     hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json)
Hash identifier:          CQTI09jp/y0Msw88CGvYUnz1B7eVrbI5u3FuYiFTwro=
Subject key identifier:   1B:58:A0:50:09:17:71:9A:29:96:5B:06:DB:61:A2:F1:76:49:75:89
Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
Certificate issuer:       /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Certificate serial:       015F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
Manifest number:          0143
Signing time:             Sun 01 Mar 2026 06:37:43 +0000
Manifest this update:     Sun 01 Mar 2026 06:37:42 +0000
Manifest next update:     Sun 08 Mar 2026 06:37:42 +0000
Files and hashes:         1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: Iuwj7lBPawn2zfWn+hJ3Uwfj3NFw5eXgJszfuUhciLE=)
                          2: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: RrYkG8pDF5vbjVAvZp/A25BQbDhS8Q7IHXBpjDj5Bzw=)
                          3: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: xQbbLUx7h7kk+H0WrJFv17LPnpfULHNjuw2xaAYsdzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
                          rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
        Validity
            Not Before: Mar  1 06:37:42 2026 GMT
            Not After : Mar  8 06:37:42 2026 GMT
        Subject: CN=69a3deb7-ed3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:16:43:aa:5e:62:ed:9e:8b:d1:b7:64:d8:
                    48:5a:17:90:ac:a3:ec:25:e4:5c:89:01:bb:70:94:
                    0e:83:f9:43:fd:eb:11:1c:08:0a:ae:b0:93:2b:5c:
                    29:59:10:62:32:f2:1e:18:35:e2:6e:a4:00:42:6f:
                    1a:07:97:ef:19:c3:ad:ab:b7:8f:18:07:b6:5a:7f:
                    89:7b:f7:58:51:37:2e:4e:f4:6e:21:b6:c3:d1:37:
                    0a:e3:d2:52:c9:fc:53:fb:3b:f8:f2:98:77:d6:b9:
                    39:30:8b:46:a3:00:82:b8:1a:11:db:ce:b4:02:a0:
                    83:bc:19:ca:86:1d:9e:97:a5:05:6c:15:80:22:12:
                    a7:83:85:cf:d3:f0:8d:b2:76:70:8d:29:10:cd:e8:
                    43:d1:ac:15:f6:37:98:b5:09:a3:42:74:ff:b6:e2:
                    96:b1:46:0d:8d:7e:69:38:95:c8:db:ed:53:73:21:
                    72:fa:db:a9:55:14:ec:57:82:41:62:40:33:91:75:
                    f1:49:9f:5f:2a:db:dd:d6:cc:9b:c5:6b:f2:40:3c:
                    cd:b3:b6:1e:78:99:80:eb:ae:2a:1c:3c:a5:6b:76:
                    e4:84:7e:cc:93:90:f9:fe:31:1a:2c:3f:5f:6b:f7:
                    e9:64:18:5d:5d:36:68:77:97:f1:ac:2a:76:c2:16:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:58:A0:50:09:17:71:9A:29:96:5B:06:DB:61:A2:F1:76:49:75:89
            X509v3 Authority Key Identifier:
                keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:19:89:1b:0e:08:d8:c7:00:28:d0:20:77:5d:5b:69:48:28:
         41:5b:54:c5:67:d7:74:ff:2c:c4:3c:2f:47:eb:3c:56:4d:9c:
         29:df:f6:b8:f2:2f:22:ba:7b:1a:29:2a:96:fe:ea:00:5a:a1:
         45:54:68:42:93:6b:bd:c3:5a:44:6b:b6:d4:54:c8:cf:12:18:
         88:99:b1:8a:06:e7:6a:6e:2b:7c:b7:7e:e1:38:18:ee:a9:34:
         79:8a:16:1f:78:df:9e:28:6b:ac:81:1d:cb:e8:d4:39:fc:03:
         8a:2a:54:ed:c2:f9:42:1f:b0:5f:65:59:7a:79:25:06:04:c1:
         f8:6d:97:13:65:28:99:b1:bc:cd:b7:cf:9a:ec:d2:6e:a7:81:
         01:23:62:37:0c:f1:54:64:c6:c6:92:2b:2c:c8:d3:ba:1f:e4:
         32:a0:e5:7d:f7:f7:a3:84:cc:31:b3:f3:f5:86:36:d8:8a:f5:
         79:b9:39:f4:1b:df:43:e6:76:1c:c7:a3:7e:04:37:da:56:c1:
         50:e5:f6:42:b4:81:bb:07:42:46:c7:b2:c9:1b:3d:10:68:66:
         87:37:22:60:ef:4a:46:86:e5:87:1a:88:4d:dc:3b:93:9b:b3:
         40:88:fa:9d:49:24:c6:86:22:ad:f3:16:b4:5b:df:71:27:22:
         d6:48:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:47 2026 by rpki-client