Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
File:                     rHwA15xPocI9OeJl5UPWJa-xcZE.mft (raw, json)
Hash identifier:          EajEeVqJ0SbeAF74lpl87o8xY1gHv0rwZIO35me7HWE=
Subject key identifier:   78:DA:2B:F5:B3:24:93:05:F0:C5:49:FF:99:AD:72:A6:50:52:48:CC
Authority key identifier: AC:7C:00:D7:9C:4F:A1:C2:3D:39:E2:65:E5:43:D6:25:AF:B1:71:91
Certificate issuer:       /CN=A917C876/serialNumber=AC7C00D79C4FA1C23D39E265E543D625AFB17191
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
Manifest number:          08
Signing time:             Sun 01 Mar 2026 10:41:50 +0000
Manifest this update:     Sun 01 Mar 2026 10:41:50 +0000
Manifest next update:     Sun 08 Mar 2026 10:41:50 +0000
Files and hashes:         1: rHwA15xPocI9OeJl5UPWJa-xcZE.crl (hash: RMutv01lrwNjm/7mb6hnut4tTAnQBmBrqVx696kA5gM=)
                          2: AA5A77DE109211F1ADAE0457353D8C67.roa (hash: jc5OClYgMksYJNVDPr4GTz5NxRC+DAHLWpkP7eRJs/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.crl
                          rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C876, serialNumber=AC7C00D79C4FA1C23D39E265E543D625AFB17191
        Validity
            Not Before: Mar  1 10:41:50 2026 GMT
            Not After : Mar  8 10:41:50 2026 GMT
        Subject: CN=69a417ee-155a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:37:2f:11:a4:5a:c8:49:e6:79:ac:cb:22:
                    b9:fa:0c:b2:a9:24:c8:0b:76:23:6a:80:47:34:d4:
                    8f:18:69:68:b7:81:8c:01:ba:bc:37:89:da:0f:fd:
                    46:83:49:f1:38:08:c0:2b:55:2e:7f:ee:2d:22:ad:
                    5e:8e:ac:cf:13:09:34:3f:c9:26:bb:2e:67:ee:b0:
                    d8:92:ba:31:73:01:15:60:07:11:bb:9b:16:9c:1e:
                    79:62:b0:2c:83:53:0e:6c:b8:6b:1d:66:46:eb:a0:
                    22:37:d7:0f:99:73:a8:1d:6d:ea:cc:a5:e0:d4:34:
                    61:e8:ba:53:c6:74:59:c7:1d:cd:d0:cc:2e:1a:99:
                    44:6d:e7:da:c2:7f:4b:ce:72:75:55:64:9e:06:9f:
                    47:f5:f3:77:27:9a:4d:fc:06:97:fe:78:dc:3e:57:
                    8d:58:35:90:03:1c:38:46:8b:21:59:a4:60:3b:dc:
                    ab:67:37:ec:fd:f3:21:3b:6d:19:70:bc:70:a4:ba:
                    f1:33:28:25:12:e2:59:db:e4:96:30:fd:5a:dc:5c:
                    f4:38:4c:e5:59:2a:65:0b:b8:f6:45:4f:b2:e9:7d:
                    6b:53:90:73:ce:5a:b6:7b:38:ba:bf:8d:79:0f:52:
                    21:6b:b9:18:fc:65:e0:dc:d5:53:58:57:b6:80:ba:
                    d8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DA:2B:F5:B3:24:93:05:F0:C5:49:FF:99:AD:72:A6:50:52:48:CC
            X509v3 Authority Key Identifier:
                keyid:AC:7C:00:D7:9C:4F:A1:C2:3D:39:E2:65:E5:43:D6:25:AF:B1:71:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHwA15xPocI9OeJl5UPWJa-xcZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C876/E4C0C416109011F180BBBFFF333D8C67/rHwA15xPocI9OeJl5UPWJa-xcZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:79:31:97:dd:92:ad:da:df:6f:64:4b:60:4b:7c:b1:72:09:
         7e:fd:95:e7:ed:46:45:bb:6b:37:78:0c:4e:a7:9f:76:fd:01:
         4a:3b:e0:9b:6f:f8:01:6c:f5:9b:5f:76:10:9c:6e:bb:01:ac:
         e4:5b:1f:d7:fb:ce:b3:56:57:5d:fa:62:2a:31:80:a3:ff:4e:
         1c:d4:2a:f0:46:10:be:2d:2c:37:83:88:05:e7:c2:59:a5:a0:
         1a:b4:a6:60:dd:01:36:f2:88:c1:3d:14:48:53:19:44:e5:f9:
         a2:b5:28:63:de:07:11:32:5a:21:39:be:ad:62:62:4f:1c:a7:
         aa:7e:24:af:55:43:7b:7f:8e:ed:d1:c5:d4:c5:74:f0:6b:4c:
         f6:26:72:1a:cc:9e:e9:cd:2e:e8:64:2c:20:a9:b4:b4:46:cf:
         40:3e:33:f1:d9:6b:27:df:46:70:41:ec:5e:5a:d6:02:e2:d9:
         81:0f:1e:e8:de:31:1c:17:a4:12:c5:de:d9:08:79:2a:63:be:
         bd:64:e6:77:d6:1f:45:e3:d3:bf:66:18:50:40:d0:df:c8:24:
         af:18:2b:a0:2b:0a:77:a8:c9:c7:31:5a:a7:ea:d4:43:68:dc:
         a8:36:25:5e:99:df:ea:d1:48:ff:8a:b1:fd:d4:c4:1e:16:a4:
         49:c9:d3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:47:02 2026 by rpki-client