Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
File:                     hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json)
Hash identifier:          WSsep2vR6A1Nx79pFc/br8TqUcpF5SGDi/dnRiP8yPk=
Subject key identifier:   DB:E6:BB:60:F8:40:AA:F6:CA:6E:79:E2:43:8C:C4:94:E2:73:4E:B7
Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Certificate issuer:       /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
Manifest number:          59
Signing time:             Sun 01 Mar 2026 09:32:29 +0000
Manifest this update:     Sun 01 Mar 2026 09:32:28 +0000
Manifest next update:     Sun 08 Mar 2026 09:32:28 +0000
Files and hashes:         1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: rKBTbhum+gDyrgcy9LaCTw+6Ix9BEAr7kupEf+L4pMo=)
                          2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: eUjuNmjZ0Na+qc9wZXSBULUYBZ3ury7Q2KFbmM47hEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
                          rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
        Validity
            Not Before: Mar  1 09:32:28 2026 GMT
            Not After : Mar  8 09:32:28 2026 GMT
        Subject: CN=69a407ad-60ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ae:46:07:1a:c3:e5:d2:ba:d8:e7:6e:fc:48:
                    de:fd:28:28:1f:dd:88:ba:1e:80:99:2b:9a:8a:57:
                    e0:ba:62:3d:76:60:ed:04:d4:b7:a1:69:19:e3:65:
                    e8:d2:27:74:45:71:dd:c7:7b:c9:96:63:df:0e:7c:
                    5a:87:a1:4d:56:91:7b:36:8d:3d:b2:69:55:2a:ec:
                    97:60:67:80:e3:bf:50:ee:df:ab:ba:0b:98:c3:f4:
                    a1:9e:f5:e2:59:96:4a:ba:5a:d7:9c:22:d3:09:85:
                    23:70:57:77:46:14:e3:c1:f1:ca:a5:17:36:40:02:
                    f3:ff:df:20:06:65:cd:e3:5e:d3:fb:7c:34:3e:39:
                    89:aa:4c:43:46:4c:4b:fe:23:2a:2b:a7:72:6c:30:
                    99:ad:71:67:53:bc:63:b9:16:0c:53:cd:35:ef:2a:
                    a6:8c:64:87:58:bf:47:11:30:b8:04:97:93:c0:98:
                    f1:7b:ed:cd:84:13:c9:6e:22:6e:c8:24:b6:43:e4:
                    b6:63:06:29:69:c9:7f:e9:5d:08:47:54:f0:89:10:
                    2b:11:64:60:1f:1e:33:86:4d:6c:80:7c:fb:eb:cd:
                    2f:87:6c:cb:ee:5e:7e:26:a5:66:42:5e:d3:5a:7c:
                    22:bc:2e:b0:c0:04:93:da:08:9d:32:84:2c:33:e7:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E6:BB:60:F8:40:AA:F6:CA:6E:79:E2:43:8C:C4:94:E2:73:4E:B7
            X509v3 Authority Key Identifier:
                keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d3:d4:ed:c6:2b:a0:bc:b7:05:37:33:12:93:03:d3:63:53:
         56:f3:ad:47:cf:cf:0b:0e:56:bc:28:14:21:e7:17:66:2f:fe:
         6b:fb:94:4f:fc:7f:1a:10:4c:bf:58:80:9d:c5:3e:7c:c0:aa:
         1d:88:2d:e0:ca:44:0c:c1:00:f3:93:34:41:4f:dc:5f:2e:17:
         ab:7d:e3:23:e5:4e:49:34:98:15:8b:f5:d1:db:bc:f5:73:c8:
         b3:45:1d:54:0e:65:35:94:8d:2d:4f:1c:07:49:13:0e:ac:7a:
         75:63:23:02:0b:d0:d1:0f:34:87:0b:a0:68:f2:76:81:f6:89:
         c3:e4:99:47:04:9d:d5:92:4f:d0:0a:8e:8f:09:33:ed:82:c1:
         8e:17:c7:49:da:17:f1:31:6a:37:c3:6a:48:32:64:1c:24:10:
         4f:47:1a:b8:e2:b3:e9:52:fd:1c:e3:61:03:85:c1:5f:02:95:
         79:7d:5d:a0:3e:36:e5:1e:1f:0a:e2:27:94:89:9d:91:e3:e4:
         1b:ca:67:95:b9:07:2e:dc:10:85:53:c6:1f:5e:77:ac:64:c6:
         d0:9b:46:a9:fb:10:b2:86:3d:87:b5:23:66:d0:ec:4f:25:3f:
         e6:99:de:36:e4:41:48:15:8e:93:bf:e1:70:66:97:4b:d0:56:
         c9:21:b4:8e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
Q0RBQzExMC8GA1UEBRMoODQ3RjJFMTJFQUI1MDZBNTAxMDk5NDQyMDdCMUQ3MDI2
Njc3RjA5QjAeFw0yNjAzMDEwOTMyMjhaFw0yNjAzMDgwOTMyMjhaMBgxFjAUBgNV
BAMTDTY5YTQwN2FkLTYwY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCYrkYHGsPl0rrY5278SN79KCgf3Yi6HoCZK5qKV+C6Yj12YO0E1LehaRnjZejS
J3RFcd3He8mWY98OfFqHoU1WkXs2jT2yaVUq7JdgZ4Djv1Du36u6C5jD9KGe9eJZ
lkq6WtecItMJhSNwV3dGFOPB8cqlFzZAAvP/3yAGZc3jXtP7fDQ+OYmqTENGTEv+
Iyorp3JsMJmtcWdTvGO5FgxTzTXvKqaMZIdYv0cRMLgEl5PAmPF77c2EE8luIm7I
JLZD5LZjBilpyX/pXQhHVPCJECsRZGAfHjOGTWyAfPvrzS+HbMvuXn4mpWZCXtNa
fCK8LrDABJPaCJ0yhCwz5+HTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2+a7YPhA
qvbKbnniQ4zElOJzTrcwHwYDVR0jBBgwFoAUhH8uEuq1BqUBCZRCB7HXAmZ38Jsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzcyNjBGQzBDOEYz
OTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFVQkNaUkNCN0hYQW1aMzhK
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvaEg4dUV1cTFCcVVCQ1pSQ0I3SFhBbVozOEpzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD
REFDLzcyNjBGQzBDOEYzOTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFV
QkNaUkNCN0hYQW1aMzhKcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBg09TtxiugvLcFNzMSkwPTY1NW861Hz88LDla8KBQh5xdmL/5r+5RP/H8aEEy/
WICdxT58wKodiC3gykQMwQDzkzRBT9xfLherfeMj5U5JNJgVi/XR27z1c8izRR1U
DmU1lI0tTxwHSRMOrHp1YyMCC9DRDzSHC6Bo8naB9onD5JlHBJ3Vkk/QCo6PCTPt
gsGOF8dJ2hfxMWo3w2pIMmQcJBBPRxq44rPpUv0c42EDhcFfApV5fV2gPjblHh8K
4ieUiZ2R4+QbymeVuQcu3BCFU8YfXnesZMbQm0ap+xCyhj2HtSNm0OxPJT/mmd42
5EFIFY6Tv+FwZpdL0FbJIbSO
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:42 2026 by rpki-client