Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
File:                     HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft (raw, json)
Hash identifier:          T1zJEldudol05Li94x26D70JuPTxyIxGod4joSkftgo=
Subject key identifier:   59:02:C1:CB:89:6D:0D:5D:58:06:17:EA:8F:B6:31:94:A7:AB:EA:44
Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9
Certificate issuer:       /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9
Certificate serial:       1723
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
Manifest number:          1716
Signing time:             Mon 02 Mar 2026 00:07:53 +0000
Manifest this update:     Mon 02 Mar 2026 00:07:52 +0000
Manifest next update:     Mon 09 Mar 2026 00:07:52 +0000
Files and hashes:         1: HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl (hash: Ao2u8LVRNjim/WphYpJTXCQ2V1/tz0bvoYMM2uoOxnw=)
                          2: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (hash: UFlhmCCynZhl65w2GzVnawinh1Lr9CWnAf/vy/WIFtA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl
                          rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5923 (0x1723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918742C, serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9
        Validity
            Not Before: Mar  2 00:07:52 2026 GMT
            Not After : Mar  9 00:07:52 2026 GMT
        Subject: CN=69a4d4d9-dffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:51:0e:91:34:1d:90:4a:bc:54:f9:cd:84:
                    30:13:bb:f7:4a:36:f0:b5:08:e6:cb:69:1c:ed:a7:
                    3b:0f:ba:50:d4:cf:b0:87:7b:d4:f8:cc:e4:bb:db:
                    62:1a:bd:00:96:ee:58:5a:0e:98:df:5d:c5:82:2d:
                    5d:cc:37:a1:aa:86:e8:79:60:bd:ed:8b:0c:74:0d:
                    97:2a:97:8d:e1:a2:a6:80:6f:49:85:3f:ff:f3:fa:
                    01:eb:2d:09:ab:dd:70:10:28:c9:ae:57:f3:6a:16:
                    35:f0:42:52:87:8d:55:20:3a:92:8a:bf:a6:04:4c:
                    a3:9d:ca:c0:0e:f4:54:5c:d8:37:55:70:85:8d:69:
                    10:19:5c:4c:a6:45:a3:2d:75:8c:53:5a:c2:04:8a:
                    ba:9f:12:1e:69:e4:c6:8c:4e:25:44:18:f3:70:72:
                    e0:5e:b0:39:1d:b3:59:23:ff:ea:da:f7:3d:07:a4:
                    85:18:29:b8:2d:64:31:00:b7:52:14:27:05:0e:95:
                    d2:47:90:3c:7b:3f:0c:2f:1c:57:46:aa:54:de:7b:
                    79:75:28:85:88:f9:08:79:38:17:7f:f6:45:79:3c:
                    bc:45:25:ae:f4:80:2f:3e:3c:52:ad:e9:af:e8:06:
                    ed:bd:30:6d:60:4b:35:94:c5:3c:ed:9d:10:b8:d6:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:02:C1:CB:89:6D:0D:5D:58:06:17:EA:8F:B6:31:94:A7:AB:EA:44
            X509v3 Authority Key Identifier:
                keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:02:b1:d2:3f:70:f6:38:62:29:72:92:69:8f:be:14:d6:18:
         71:20:08:c0:8b:9d:e4:b0:2c:4e:81:c5:18:a9:31:ef:2b:7a:
         46:91:33:6a:86:7c:14:dd:6d:c1:1b:b4:bc:ba:40:c0:68:ea:
         75:0f:1b:2b:3f:2b:6a:f1:01:c4:35:e1:71:fa:0a:04:e8:b0:
         bd:77:0d:e3:38:57:e5:12:cf:ae:a6:f1:69:4b:7c:2d:ac:69:
         f7:05:fd:82:b1:23:d5:63:7a:fd:a1:7d:5b:9d:eb:40:cc:f8:
         80:1c:39:de:9a:4e:b8:e0:b5:25:ad:8b:f3:15:d9:1f:ed:cb:
         8f:0e:e6:94:56:c7:10:ab:62:5b:33:08:1b:28:a2:4f:ae:e5:
         61:21:14:fb:d4:2b:68:aa:62:5f:2f:29:13:00:dc:e8:45:18:
         6a:fa:74:fc:24:de:07:36:a8:85:f9:e5:10:ec:c0:04:b8:8a:
         9b:fa:22:6e:d2:ff:bf:24:b0:1e:40:90:be:c1:c8:a0:a2:43:
         ec:2c:ff:23:08:b1:a0:18:4f:06:89:39:29:99:6c:95:a2:64:
         b7:6f:38:0b:f6:52:2a:26:78:0c:29:88:ab:b3:49:44:12:53:
         07:30:f6:00:39:be:85:e2:89:8b:f3:22:4c:8d:32:23:37:f1:
         5a:04:35:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:16 2026 by rpki-client