Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
File:                     125huZ91Pv73mH9LNKitMyl4A6w.mft (raw, json)
Hash identifier:          HqNwnq7jUzHO74BXnv/HZvn6xChaiIjRlF1NWWUBq0w=
Subject key identifier:   A3:90:D5:C5:28:C5:7D:CA:E0:56:48:EF:7D:61:EA:14:E8:5A:F4:D8
Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC
Certificate issuer:       /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC
Certificate serial:       05B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
Manifest number:          05AC
Signing time:             Sat 18 Apr 2026 23:04:40 +0000
Manifest this update:     Sat 18 Apr 2026 23:04:40 +0000
Manifest next update:     Sat 25 Apr 2026 23:04:40 +0000
Files and hashes:         1: 125huZ91Pv73mH9LNKitMyl4A6w.crl (hash: Xrl7AkthQpJoy8Bh0Ln9yWotvmU1V8p0BZN/WyCQA/c=)
                          2: 381AA9660EE711EC850D193BC4F9AE02.roa (hash: CcimU5bAMxt6xcfnTJqAhexXFkbfOFwQL0JFGN/P7Es=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl
                          rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 23:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1463 (0x5b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187C44, serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC
        Validity
            Not Before: Apr 18 23:04:40 2026 GMT
            Not After : Apr 25 23:04:40 2026 GMT
        Subject: CN=69e40e08-908b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:f9:33:61:e6:f0:66:d6:d2:d0:a2:5e:d8:
                    f0:26:5a:82:23:73:2c:f1:46:c6:2f:c2:7c:f6:e3:
                    ba:6b:4d:9c:14:16:1e:b5:55:d0:3e:07:18:85:12:
                    98:9c:0f:33:c5:eb:26:54:96:f7:ea:4a:b7:21:26:
                    d4:27:06:e1:b1:0e:a5:0d:d5:a0:55:e0:44:eb:eb:
                    d9:81:ea:af:63:b2:7e:19:e3:f7:96:a0:04:be:5b:
                    83:4a:2a:02:3b:d6:80:2d:e0:90:01:3f:f5:28:38:
                    33:26:ee:0b:79:cc:c7:9b:db:4b:9d:f8:e0:d4:10:
                    07:59:0e:74:a6:f8:df:9c:58:cf:51:7c:56:b2:26:
                    00:38:8c:6a:6c:74:59:7b:d4:b5:67:e6:c5:ea:5d:
                    3a:34:ec:7e:d3:d7:90:13:4e:60:51:9e:73:b4:7a:
                    a3:37:73:2f:95:3c:8a:5b:6c:47:81:3f:7c:b1:b0:
                    62:fc:f5:d0:93:aa:66:0a:f8:c5:93:c8:1d:fe:ed:
                    41:45:6c:a0:ff:bc:6c:f3:ee:5a:25:a2:ac:40:1d:
                    19:56:51:19:b4:88:7d:50:3e:24:fa:04:82:16:a4:
                    af:31:3e:48:a3:77:1d:1a:5c:f8:75:10:bc:fe:1f:
                    e1:14:a5:7c:11:51:49:e9:78:b4:a8:b4:9b:3c:8d:
                    6a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:90:D5:C5:28:C5:7D:CA:E0:56:48:EF:7D:61:EA:14:E8:5A:F4:D8
            X509v3 Authority Key Identifier:
                keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:f6:e1:54:6a:63:de:0d:7b:1a:88:37:5e:00:09:68:4d:77:
         ec:42:42:60:c7:f1:0a:34:af:5a:26:01:69:49:47:24:51:c3:
         82:38:bc:0f:25:f7:b2:5f:44:35:b1:10:22:a8:1c:17:a6:13:
         f8:93:a2:d3:0d:8c:69:1f:d2:5f:8a:0f:40:bd:54:a3:e8:81:
         19:37:82:38:6e:03:e1:ea:4b:35:37:30:bc:31:9b:56:8d:2d:
         f0:55:0d:29:3c:31:b8:64:76:81:f5:c5:95:5d:50:27:13:1e:
         f0:ac:40:1f:20:90:5d:17:17:b7:33:8d:6a:2c:0f:5f:dd:40:
         21:2b:ca:3d:ed:16:bc:67:43:96:30:7a:fa:13:57:b2:66:ce:
         39:52:d8:a7:c0:42:08:d9:d5:fd:4e:80:63:4b:f9:d1:29:31:
         27:d4:a5:f9:06:61:4d:46:bf:6d:41:c2:4b:63:d5:76:ba:6c:
         8a:4c:8a:0a:ab:d7:12:c0:e1:c6:3b:8d:3a:8f:43:8c:79:7e:
         cb:fb:21:f3:1f:a4:26:f5:16:e5:bb:75:4c:a7:d0:74:cc:df:
         c5:ec:92:52:6b:c1:42:cf:9f:88:31:fa:c2:59:50:32:10:99:
         6f:60:a1:5f:e6:4e:93:59:6c:2f:97:0b:5d:76:34:d3:55:b7:
         3a:b6:f5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:24 2026 by rpki-client