Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
File:                     H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json)
Hash identifier:          vuNwx2YU6KP0kydc8eluHYn+gaPaEHsNF9jv7eSLh6s=
Subject key identifier:   92:20:C6:83:AC:89:42:07:8A:23:BD:0F:D2:07:8A:74:4F:5F:EC:B1
Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14
Certificate issuer:       /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14
Certificate serial:       0283
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
Manifest number:          027C
Signing time:             Sun 19 Apr 2026 01:42:17 +0000
Manifest this update:     Sun 19 Apr 2026 01:42:16 +0000
Manifest next update:     Sun 26 Apr 2026 01:42:16 +0000
Files and hashes:         1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: 4CkQ+d8v3FOtVdH5kDbxW1nlER/KkIW8/uzlvY3uptE=)
                          2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: dEReDEDJySfii8pKlYcee3L1HbPziwJ3gRBbj65y4hk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 01:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3ED8, serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14
        Validity
            Not Before: Apr 19 01:42:16 2026 GMT
            Not After : Apr 26 01:42:16 2026 GMT
        Subject: CN=69e432f8-8895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:6e:49:1f:75:89:6c:f3:44:8b:99:3e:d9:
                    f5:ff:67:4f:66:48:5a:31:04:fd:20:b3:b5:58:50:
                    c6:8e:48:4f:aa:8d:46:45:3d:99:99:32:95:d4:ef:
                    c4:51:37:a1:6d:3e:c6:49:0d:29:a0:44:28:e2:ba:
                    af:db:61:2a:77:01:c0:dc:0b:0c:4a:c9:e0:da:a5:
                    ec:29:d3:93:2d:8a:a5:fd:4d:26:d6:9b:c6:e9:d1:
                    72:38:fc:33:48:89:da:2e:d0:03:bd:66:61:5e:3e:
                    ec:6d:bc:72:05:28:6c:16:42:e7:89:8e:5e:d3:4f:
                    d7:31:cf:a8:2e:ac:33:8f:de:a4:26:90:2f:17:f3:
                    24:99:c8:70:75:6f:f5:e5:46:5d:54:8e:16:75:54:
                    a4:b4:eb:bc:99:9b:2b:d4:f8:2e:59:44:a8:d2:b9:
                    a9:ab:43:ee:b7:0b:f9:66:87:62:25:25:73:d1:ed:
                    63:e4:28:f3:01:6e:ae:b4:09:ae:47:b8:c2:21:3a:
                    39:64:1a:3f:79:cb:11:73:03:6b:e1:b5:e9:0a:91:
                    c0:2e:2a:ff:75:18:14:83:5d:33:e7:35:f2:36:bd:
                    3d:c1:da:37:4c:31:0e:c0:20:38:54:45:5f:a7:2c:
                    77:8e:ea:7a:66:8c:bd:b8:7c:37:d5:71:52:77:25:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:20:C6:83:AC:89:42:07:8A:23:BD:0F:D2:07:8A:74:4F:5F:EC:B1
            X509v3 Authority Key Identifier:
                keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:bd:34:d1:91:09:c0:be:5d:d5:c7:bf:09:ae:58:c6:57:87:
         fb:fb:a2:17:52:c3:7d:42:f7:bc:0d:29:3f:79:c3:b0:c5:2e:
         56:7d:3a:21:a6:67:be:0d:90:32:ca:1c:a9:35:b1:00:8c:87:
         a8:82:48:66:43:60:60:03:f3:b8:4c:a1:51:38:d0:e5:95:e9:
         a6:a7:4a:6c:20:f7:c1:d9:e2:dd:ec:d4:1f:d7:e7:51:69:57:
         bb:95:53:ac:fa:66:a8:17:e2:f9:cf:80:e7:65:6a:9b:d2:12:
         fb:6b:74:d5:b9:48:ce:05:d6:25:b6:26:a6:3b:65:bb:07:42:
         ed:13:e0:2e:a4:7c:91:63:84:19:0d:fd:b3:02:8d:3e:ae:a2:
         de:37:9d:9e:a9:c3:a8:9a:da:77:33:c2:bf:c7:69:05:7b:c3:
         83:76:eb:5f:d0:73:7e:b8:c3:c4:b3:3d:21:86:98:56:7f:cd:
         6d:0d:dc:9e:1c:0b:c3:65:0d:5c:8c:4e:0b:a5:f8:9c:73:87:
         6b:9d:23:a4:18:12:8c:9a:4c:5d:f5:60:75:70:05:45:8f:af:
         d0:57:71:65:4f:ea:7a:b2:71:0b:91:ae:08:8b:cc:7f:0b:44:
         9d:d7:7d:e6:33:1e:d6:d5:5c:be:be:00:48:bb:ab:52:51:b5:
         b9:12:43:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:30 2026 by rpki-client