Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
File:                     qHH05sNy2xC2TfOZX6FR77OfmYs.mft (raw, json)
Hash identifier:          /hDNUAcyAZ+CKgxGd6Lm6Sl/lWW64QzUc+asPzHvxTc=
Subject key identifier:   D6:31:70:39:BC:99:42:2F:70:5F:04:A3:F5:94:0C:28:19:07:6F:3E
Authority key identifier: A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B
Certificate issuer:       /CN=A9195F49/serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B
Certificate serial:       04DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
Manifest number:          04D2
Signing time:             Thu 16 Apr 2026 23:46:59 +0000
Manifest this update:     Thu 16 Apr 2026 23:46:58 +0000
Manifest next update:     Thu 23 Apr 2026 23:46:58 +0000
Files and hashes:         1: qHH05sNy2xC2TfOZX6FR77OfmYs.crl (hash: no3QvqYxwCdXGjaA1lD9y3z4iTTwgom1EROrCIFzHu0=)
                          2: 5FC75DCC66A511EC9C199341C4F9AE02.roa (hash: 7aFNsUg1I4C5V9F/LA66NxWgGO8Ce4SasYs9BxONMfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl
                          rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195F49, serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B
        Validity
            Not Before: Apr 16 23:46:58 2026 GMT
            Not After : Apr 23 23:46:58 2026 GMT
        Subject: CN=69e174f2-94c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:12:d7:12:7e:73:1c:c9:b1:09:a3:95:3d:c7:
                    1e:81:e0:b1:03:e2:02:d2:2b:0c:2b:07:24:72:d9:
                    f3:23:e5:36:c5:b3:f0:01:a6:26:a3:73:b4:3f:cf:
                    f9:61:42:a8:a3:e7:e2:09:e9:57:5c:91:8a:93:8d:
                    88:83:70:09:f5:0a:54:1e:f7:5e:05:4a:15:e1:23:
                    94:63:68:76:48:62:f0:23:44:27:9f:68:1c:98:00:
                    fe:59:a0:4a:88:02:1c:9b:22:1f:f2:2d:32:45:d4:
                    63:dd:4f:4c:59:be:2f:9c:7e:85:6a:4c:7e:0a:00:
                    1e:4b:ba:b5:80:33:12:24:0c:5f:7f:1b:be:cb:92:
                    cb:d6:b9:5a:b4:a7:80:a8:ef:96:be:c5:14:86:55:
                    ef:7c:bd:f6:8d:d0:9b:94:d3:d9:89:4b:4a:42:3c:
                    0d:bd:87:e2:e4:00:05:73:a4:c3:47:c1:5c:d2:d2:
                    5b:a1:90:0a:af:84:da:a9:92:c9:36:2e:ac:bc:6c:
                    29:53:d9:6d:43:64:07:fe:67:2a:6d:05:dd:e8:63:
                    82:7d:bc:9d:2c:62:93:d7:03:39:05:38:bb:1e:02:
                    be:17:6e:0d:1c:f1:87:20:14:83:9a:d0:d2:6b:59:
                    8f:18:25:8e:cf:cc:5c:7b:bf:90:ca:42:bc:22:59:
                    34:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:31:70:39:BC:99:42:2F:70:5F:04:A3:F5:94:0C:28:19:07:6F:3E
            X509v3 Authority Key Identifier:
                keyid:A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d9:84:a3:0f:e2:22:f3:1a:de:46:2e:98:68:48:ab:7b:cf:
         3a:3a:d0:77:c1:0e:0d:0d:b3:ab:bc:be:f1:ae:35:9f:63:16:
         ec:dc:dd:f5:ab:a1:71:7d:0a:39:36:07:91:45:02:65:69:49:
         07:8b:d7:68:5d:3b:9f:ad:cb:13:29:ac:40:bf:29:e3:e5:17:
         de:9a:ff:b5:83:5e:a6:0c:86:50:e6:4d:ec:53:c9:88:1e:11:
         30:e0:9a:6d:f4:7c:26:56:a5:cc:d1:61:d0:c5:66:05:1d:f2:
         b1:4b:4a:1c:14:e7:a7:fa:51:06:c7:a4:9e:df:fa:1d:64:ab:
         c4:67:d7:00:df:c2:18:ee:b2:bc:fc:9b:e7:39:b1:5b:64:b5:
         c6:7a:b6:5b:36:9c:65:49:05:0e:52:8e:c4:9a:de:6e:7b:d0:
         f5:15:82:25:3e:7c:3d:8b:61:b1:52:f9:69:50:3f:26:f1:39:
         43:7d:64:ec:95:42:8b:5d:47:ce:c5:d8:65:02:c2:85:5a:56:
         ea:42:82:46:f8:be:f0:cc:3b:34:e7:8e:d1:3c:62:d8:6a:95:
         17:d9:9d:52:5d:d8:0e:59:7c:75:9d:8b:71:19:ff:cb:08:84:
         d6:c5:11:89:3f:48:e7:b1:75:ea:bb:52:0f:22:c4:42:bc:7c:
         60:b8:22:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:54:28 2026 by rpki-client