Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
File:                     hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json)
Hash identifier:          0DXuhPXYuf7q+R1BeqYOkJTdzwBxaV9ZGgDSwkV/Ovw=
Subject key identifier:   C0:68:C5:F3:D0:FF:FD:BE:AD:A8:4A:E9:6D:57:50:F9:E1:30:E0:FB
Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
Certificate issuer:       /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Certificate serial:       0340
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
Manifest number:          0338
Signing time:             Sat 13 Jun 2026 01:04:26 +0000
Manifest this update:     Sat 13 Jun 2026 01:04:25 +0000
Manifest next update:     Sat 20 Jun 2026 01:04:25 +0000
Files and hashes:         1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: RKJ0bRlDCRIrYl4d1940i1YYUF2hkz15vQnCVeodAiw=)
                          2: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: dd0CGQKg2qsZFHW0r2NsR/ySJbalRdUFAJqYcFNJaEc=)
                          3: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: U0yLO5Ev3zOcE/jWxDek+PewuFrsGyucjJ2jYS/L358=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
                          rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832 (0x340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
        Validity
            Not Before: Jun 13 01:04:25 2026 GMT
            Not After : Jun 20 01:04:25 2026 GMT
        Subject: CN=6a2cac99-11a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d5:d9:62:5e:76:53:ac:df:30:97:4e:37:67:
                    d1:d0:98:b3:c2:81:e7:31:2d:45:03:13:8d:e0:6c:
                    16:ec:30:4f:ad:02:3c:e7:43:56:3e:5c:cf:ed:e6:
                    df:5d:d2:79:83:29:54:ad:79:6d:5b:41:41:00:65:
                    3e:34:36:c9:3e:e6:ec:93:7a:03:44:80:cf:2d:5f:
                    f4:90:a1:4e:31:e2:10:7b:e9:e8:87:05:45:9f:57:
                    4c:1f:64:da:67:ee:7b:a4:d5:0a:c3:11:9d:86:f6:
                    d2:6f:3b:31:fc:2a:e0:06:b7:a7:13:16:40:92:ef:
                    42:d4:92:47:d2:2e:49:d3:f6:bc:35:33:71:bf:fe:
                    40:1d:5c:46:06:fb:e4:5e:33:71:74:d2:0f:68:ad:
                    07:a5:81:cc:20:5f:1e:4b:8f:ff:19:28:98:38:93:
                    60:a5:f1:81:5b:c2:af:ca:1b:e3:16:08:2b:98:c3:
                    e6:b6:7b:ae:0e:56:94:bb:75:fa:ce:09:e8:79:98:
                    94:f2:43:7f:18:e4:9b:0e:67:8d:ff:a9:7d:51:bf:
                    c0:43:f9:42:72:bb:92:45:38:a9:d0:b9:2f:0e:f6:
                    e7:9d:dd:f6:dd:cb:c5:ad:4f:c2:97:02:82:3d:b2:
                    b2:e3:99:01:0c:46:8d:73:2b:26:e9:fd:4f:39:13:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:68:C5:F3:D0:FF:FD:BE:AD:A8:4A:E9:6D:57:50:F9:E1:30:E0:FB
            X509v3 Authority Key Identifier:
                keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e3:68:5b:7e:fa:dd:76:c8:f4:8d:da:d2:0d:79:25:5f:d9:
         4a:50:19:1f:b7:37:54:dc:76:3a:1b:01:fb:60:c6:97:1b:24:
         ef:15:db:a3:ae:8b:be:cf:d1:69:f6:a5:a4:af:7f:ec:99:ec:
         a8:f7:71:6a:3b:38:3d:23:76:f8:0d:af:90:2a:d5:51:63:64:
         e8:cd:0e:34:83:10:71:89:d7:9b:f0:8c:66:89:67:c1:81:bc:
         ce:be:0c:f9:00:cf:ad:43:a2:8a:10:c6:d4:d7:fb:ba:74:fa:
         27:fe:df:e6:bf:ad:60:d9:45:3a:7f:4c:db:5d:74:f5:6f:64:
         fa:4b:fd:86:9e:de:39:27:b5:57:cd:43:0f:22:2d:00:54:15:
         a3:39:ac:1d:32:94:67:b1:7f:34:45:48:70:92:65:d2:58:87:
         70:30:c8:89:6e:8d:40:14:2f:79:15:07:f5:d5:bf:80:79:3f:
         16:58:b9:a9:64:e4:90:f7:c6:a3:c8:30:80:f5:37:b0:dc:d2:
         7b:7a:ed:af:6a:08:47:a2:92:49:1a:71:28:58:e9:18:dd:5b:
         5a:55:a6:8d:fb:ba:bb:35:fc:dd:9c:da:34:fd:5b:9a:18:99:
         cc:19:3d:7e:11:53:7a:f6:69:68:1f:e0:77:f5:7f:40:df:52:
         dc:8b:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:58:13 2026 by rpki-client