Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
File:                     hitzuc41BLC6JB0U_awOxLTkrcI.mft (raw, json)
Hash identifier:          0bHN0QLqPnLPkV3Ybvs2Qs6A2B5Ecr82jHo1eM23UFs=
Subject key identifier:   40:67:BB:17:F9:D1:2B:88:57:E6:D9:6B:93:F6:69:E7:AD:F9:5C:AE
Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
Certificate issuer:       /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Certificate serial:       09DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
Manifest number:          09C6
Signing time:             Mon 02 Mar 2026 01:26:15 +0000
Manifest this update:     Mon 02 Mar 2026 01:26:15 +0000
Manifest next update:     Mon 09 Mar 2026 01:26:15 +0000
Files and hashes:         1: hitzuc41BLC6JB0U_awOxLTkrcI.crl (hash: uaPhjGr1HwN6DhVjboKbjPf3QbjCGiQfLWoqqj/3NXs=)
                          2: 70FED13CCEF611ED9DDE0A39C4F9AE02.roa (hash: 6M5Mg9C116unCx1h9rVUgS55hFW2He6mLEZ0NRGWeB0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
                          rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2523 (0x9db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
        Validity
            Not Before: Mar  2 01:26:15 2026 GMT
            Not After : Mar  9 01:26:15 2026 GMT
        Subject: CN=69a4e737-4414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:53:2b:57:93:63:eb:1f:94:ce:f4:47:71:41:
                    c2:6f:b2:39:ae:12:b3:7c:c8:01:b4:28:88:c5:09:
                    07:2c:96:e8:30:54:a3:9a:f3:d8:dc:f1:45:a0:58:
                    7d:af:ba:b3:27:86:33:57:f1:85:ef:67:22:a0:d3:
                    fe:25:99:3f:24:f8:55:fa:7b:13:55:1d:c6:55:05:
                    35:dc:cd:00:14:b8:06:a4:c8:ac:32:ee:e5:e5:34:
                    c0:fc:84:73:fe:3e:f9:3c:3a:55:46:4d:c4:83:e6:
                    4c:a2:9c:80:e8:09:9f:8e:03:ab:11:89:8c:13:29:
                    aa:6b:9e:b2:77:14:52:b9:6b:10:7a:80:48:ec:f1:
                    2f:a2:81:c4:6a:7a:d6:16:3a:81:19:d4:b2:af:e4:
                    41:92:95:30:39:2e:32:c7:f5:42:7c:e9:f5:41:cf:
                    7e:e2:0a:c7:af:ae:3c:d6:51:b5:83:c6:44:f8:e4:
                    18:fa:85:1a:4c:9a:d1:9a:0c:19:8f:be:5c:ee:33:
                    75:7d:b4:d4:e7:f0:8b:90:59:17:96:63:c0:d7:e9:
                    4b:97:a4:4d:00:4a:08:f1:7b:cc:f5:10:82:09:d7:
                    e0:99:14:56:aa:47:3b:6f:8d:74:13:d8:9c:54:fd:
                    fe:e1:2e:67:f6:f8:f3:55:b8:f7:b2:f6:87:e8:0d:
                    19:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:67:BB:17:F9:D1:2B:88:57:E6:D9:6B:93:F6:69:E7:AD:F9:5C:AE
            X509v3 Authority Key Identifier:
                keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:0d:83:fb:1b:f5:11:95:18:73:47:e2:68:2e:ab:db:b4:62:
         54:14:6a:4e:11:b7:31:6b:98:d3:db:1a:67:81:79:36:d2:64:
         72:7a:dc:86:9b:2b:3d:90:e8:16:b9:aa:55:4b:1f:14:77:f6:
         57:3b:72:d9:ad:6e:f4:17:84:0c:2c:cb:44:42:e8:0d:7b:16:
         4d:3c:aa:13:3d:7e:cd:da:29:77:b7:ec:c8:20:10:d7:9a:f1:
         00:4d:93:ee:81:91:50:61:ad:28:83:c9:2b:f1:17:42:41:e2:
         df:f7:fc:c9:09:2e:56:ca:47:46:39:8f:d8:ef:07:e4:a0:2c:
         e8:58:91:0d:74:4c:72:4b:bc:8b:91:1b:20:16:33:a0:b2:ca:
         c5:da:84:87:85:d3:4e:5d:17:19:6f:ca:54:5b:fa:a0:62:09:
         1d:d5:ee:2e:4c:84:57:9f:03:5f:a0:4d:88:4e:26:f8:3a:b7:
         a9:65:08:97:27:ed:47:a5:d0:e4:b4:4e:be:e7:4e:b9:b8:43:
         71:2e:ab:d4:a4:f7:13:49:29:2b:8a:5f:e9:2c:06:87:9f:8a:
         7b:7a:75:92:9f:0e:3d:ee:16:72:b8:98:00:40:a1:05:2b:f7:
         8d:ad:1b:e7:0e:22:a6:a9:cb:de:53:72:0c:4b:0e:b2:74:1a:
         cb:f7:0b:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUNDRUExMTAvBgNVBAUTKDg2MkI3M0I5Q0UzNTA0QjBCQTI0MUQxNEZEQUMwRUM0
QjRFNEFEQzIwHhcNMjYwMzAyMDEyNjE1WhcNMjYwMzA5MDEyNjE1WjAYMRYwFAYD
VQQDEw02OWE0ZTczNy00NDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnlMrV5Nj6x+UzvRHcUHCb7I5rhKzfMgBtCiIxQkHLJboMFSjmvPY3PFFoFh9
r7qzJ4YzV/GF72cioNP+JZk/JPhV+nsTVR3GVQU13M0AFLgGpMisMu7l5TTA/IRz
/j75PDpVRk3Eg+ZMopyA6AmfjgOrEYmMEymqa56ydxRSuWsQeoBI7PEvooHEanrW
FjqBGdSyr+RBkpUwOS4yx/VCfOn1Qc9+4grHr6481lG1g8ZE+OQY+oUaTJrRmgwZ
j75c7jN1fbTU5/CLkFkXlmPA1+lLl6RNAEoI8XvM9RCCCdfgmRRWqkc7b410E9ic
VP3+4S5n9vjzVbj3svaH6A0ZIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBnuxf5
0SuIV+bZa5P2aeet+VyuMB8GA1UdIwQYMBaAFIYrc7nONQSwuiQdFP2sDsS05K3C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0NFQS80MDZFRjE3OEEw
QzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJMQzZKQjBVX2F3T3hMVGty
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hpdHp1YzQxQkxDNkpCMFVfYXdPeExUa3JjSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Q0NFQS80MDZFRjE3OEEwQzMxMUVBODc2NDIzNkZDNEY5QUUwMi9oaXR6dWM0MUJM
QzZKQjBVX2F3T3hMVGtyY0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIg2D+xv1EZUYc0fiaC6r27RiVBRqThG3MWuY09saZ4F5NtJkcnrchpsrPZDo
FrmqVUsfFHf2Vzty2a1u9BeEDCzLRELoDXsWTTyqEz1+zdopd7fsyCAQ15rxAE2T
7oGRUGGtKIPJK/EXQkHi3/f8yQkuVspHRjmP2O8H5KAs6FiRDXRMcku8i5EbIBYz
oLLKxdqEh4XTTl0XGW/KVFv6oGIJHdXuLkyEV58DX6BNiE4m+Dq3qWUIlyftR6XQ
5LROvudOubhDcS6r1KT3E0kpK4pf6SwGh5+Ke3p1kp8OPe4WcriYAEChBSv3ja0b
5w4ipqnL3lNyDEsOsnQay/cLZg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:52 2026 by rpki-client