Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
File:                     h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json)
Hash identifier:          HS1a85JEKD6zXbzXDV14nH2plGSslYnsKVOEModzzMw=
Subject key identifier:   95:D7:FA:1E:4D:9F:5E:26:93:EC:88:54:76:7F:19:8C:BE:57:3B:93
Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
Certificate issuer:       /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Certificate serial:       01B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
Manifest number:          0197
Signing time:             Fri 17 Apr 2026 04:15:05 +0000
Manifest this update:     Fri 17 Apr 2026 04:15:05 +0000
Manifest next update:     Fri 24 Apr 2026 04:15:05 +0000
Files and hashes:         1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: fqPww3JQPuhwUkKMhNzw4C7XWdgx14Y4XSHv+DY7Si4=)
                          2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: ZuKywPCk/DkKyCpqoZBfyKV9L6QxTxAVdxmCPTDjvq8=)
                          3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: PS353luWU5EZRXf1V5KYpvKbmWd2t8tkTqJLhBlN/tY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl
                          rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
        Validity
            Not Before: Apr 17 04:15:05 2026 GMT
            Not After : Apr 24 04:15:05 2026 GMT
        Subject: CN=69e1b3c9-717f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:90:1e:08:c0:f0:f5:cb:97:3a:1c:1e:33:22:
                    46:0f:4d:4c:69:49:21:dd:a5:e4:e7:76:b2:a3:9d:
                    b3:ca:05:a3:7f:e9:b4:13:1b:8b:96:a0:f9:b0:fe:
                    19:2a:c5:42:54:38:c4:9a:be:7b:1d:b6:73:05:2f:
                    be:f5:3c:fe:32:c5:97:5e:df:52:ac:94:7e:dd:9f:
                    26:b5:ed:82:cd:70:15:97:05:c2:70:18:81:2f:6d:
                    3a:4d:28:71:75:b2:fa:1c:84:f5:82:5c:d7:6e:4e:
                    c6:f1:1b:db:4d:b1:0c:f6:d7:55:d9:b8:94:2a:07:
                    35:0f:30:36:91:c0:6d:f4:e2:00:a7:39:47:10:ee:
                    42:d7:7c:ff:d7:d4:9f:bc:14:0d:39:05:3d:6d:f8:
                    04:b9:f4:ad:7f:b2:3b:71:56:4f:69:57:cf:2d:e6:
                    13:43:58:c5:2e:48:94:2f:9c:57:a3:b3:b6:e8:bd:
                    6f:45:43:a2:d3:0c:e6:00:ac:f6:75:b5:b8:d2:ff:
                    03:cf:da:50:86:2f:7a:42:f8:70:15:66:cf:b5:06:
                    a9:99:1f:36:26:51:a5:91:f7:8a:11:b4:23:fa:77:
                    3f:98:1a:00:f3:fa:3b:d9:0d:81:21:15:74:bf:24:
                    2b:6d:7e:01:1a:9c:9a:98:a2:01:37:9d:1c:e9:c4:
                    7d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D7:FA:1E:4D:9F:5E:26:93:EC:88:54:76:7F:19:8C:BE:57:3B:93
            X509v3 Authority Key Identifier:
                keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:90:73:a0:93:c9:6f:03:d3:70:b8:28:c0:04:97:e4:c4:d5:
         20:87:90:64:e4:4d:ed:b2:b9:5f:a6:0d:9c:ab:b4:71:6d:82:
         d6:8b:e4:18:fc:2c:4e:e4:ed:70:7b:bb:90:0c:2a:80:16:f5:
         2f:ac:9b:6c:6c:23:99:dd:c4:b1:e2:33:82:92:4b:b4:0e:d2:
         68:cc:6c:eb:78:72:4e:69:73:0f:37:f5:4e:67:b4:d0:5b:5c:
         bf:8c:94:74:61:88:83:00:2c:dd:54:d3:55:d5:ee:d2:85:ca:
         40:a0:8e:7f:e3:a4:27:ea:4d:e7:61:a6:42:7f:d5:22:d2:9e:
         24:1f:e8:b8:73:ea:02:ba:74:dd:49:f9:c2:68:79:3c:3c:1c:
         41:47:5e:96:0f:74:16:d2:dc:6e:ab:39:c8:99:5d:4c:41:ce:
         8d:a4:ff:15:5d:c4:33:6a:18:3d:1e:c7:e2:76:d4:4d:ec:5c:
         ea:57:d3:6d:f6:19:cc:42:35:95:fe:99:f7:95:c3:bb:4a:f2:
         d9:45:13:fc:43:44:89:34:75:a9:cb:8d:c2:ca:3d:d6:e2:46:
         27:7a:77:5a:89:59:3b:72:c1:c2:30:00:63:2e:23:37:1d:69:
         7f:44:06:9a:01:bc:f2:0d:9d:38:0a:9d:f4:ce:da:62:cc:27:
         5a:be:3b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:04:11 2026 by rpki-client