Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
File:                     HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json)
Hash identifier:          romV1KdF5HsXErsYUAKznttBDLKQVcIRV9N0jmvmn2k=
Subject key identifier:   06:09:D2:A4:94:42:38:5F:A3:CD:3F:15:12:BE:8C:81:83:57:D9:D5
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Certificate issuer:       /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial:       096C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
Manifest number:          0942
Signing time:             Thu 16 Apr 2026 20:04:51 +0000
Manifest this update:     Thu 16 Apr 2026 20:04:50 +0000
Manifest next update:     Thu 23 Apr 2026 20:04:50 +0000
Files and hashes:         1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: O2ys/g9dMtvORd72TCSgRw9O4XvIZjPqpfuR73ZHz4g=)
                          2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: UJmyzSzozDENX7jF+64gEj4E6QBieKxXCaJ+JGRYbs0=)
                          3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: rixxFEhhporEowEcKJ0zMfY5DGdFHoWYuPowdcyFr5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
                          rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2412 (0x96c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
        Validity
            Not Before: Apr 16 20:04:50 2026 GMT
            Not After : Apr 23 20:04:50 2026 GMT
        Subject: CN=69e140e3-a010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:48:6c:bc:a7:a7:ab:5e:3e:54:83:07:9d:77:
                    8f:55:bb:ee:3a:72:8c:33:6a:21:a5:8b:e2:9c:f8:
                    b1:56:cc:19:0e:e9:c1:e6:57:c5:c4:88:cb:ad:3a:
                    6f:a7:09:60:b5:53:80:a3:80:d0:26:cb:21:20:e5:
                    b4:e5:59:4c:34:f2:62:53:42:3c:be:3a:88:0d:cf:
                    40:56:14:b3:97:29:e3:c4:c0:67:0d:86:4e:41:59:
                    e6:dc:65:48:b6:1c:a2:c4:a2:e4:e3:05:ad:b0:e2:
                    f0:7f:07:98:34:fa:fb:39:12:a4:f3:d2:1b:4c:48:
                    e5:6d:73:21:36:9b:5f:1b:b8:4e:6f:f1:70:1f:08:
                    7e:5c:bd:3e:47:e0:f1:25:72:8a:77:81:1b:3e:95:
                    81:05:ff:3b:40:6d:aa:fa:c9:e8:f6:11:1b:d1:0d:
                    01:a6:c5:ce:74:d5:a6:77:a1:aa:6c:7b:aa:f6:25:
                    ce:47:07:f8:a1:11:c4:75:cc:87:6a:06:c3:0a:f5:
                    28:e7:b9:af:f0:5c:16:ae:a9:98:5e:7b:b4:2a:1e:
                    08:e3:9e:d1:17:67:9b:0a:6c:2c:96:72:6b:85:4d:
                    bd:4d:fd:f2:b3:05:9b:b8:14:03:14:6e:88:b4:7a:
                    63:3b:0b:74:e7:49:ca:26:a0:b8:35:54:32:42:49:
                    e7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:09:D2:A4:94:42:38:5F:A3:CD:3F:15:12:BE:8C:81:83:57:D9:D5
            X509v3 Authority Key Identifier:
                keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ae:00:b7:24:65:e1:cb:05:02:3d:13:be:11:94:15:b7:d2:
         ee:40:c9:2f:04:36:72:67:65:74:5c:34:5e:e9:b4:c0:a0:26:
         d8:62:87:00:d9:0c:7b:30:f4:10:2e:1f:16:8a:ef:4c:c2:a9:
         a9:98:fb:36:54:54:6b:eb:64:ec:8f:37:1f:f2:48:12:aa:d1:
         70:04:16:b2:af:99:08:7d:d9:49:26:6d:2a:ab:e1:dc:67:c2:
         04:36:b6:5e:98:d8:4a:9d:84:ed:73:be:b4:dc:63:ef:c0:aa:
         ab:b3:b3:55:01:3c:d3:a9:06:b6:1f:35:23:f3:02:bf:e5:06:
         2d:29:1f:ee:5d:c3:a0:97:85:40:15:1c:51:d9:71:6e:83:b2:
         d4:67:99:a2:e1:0b:c7:21:37:13:b4:86:91:d2:64:d9:61:bb:
         55:69:e9:fb:b6:b2:d0:52:b0:14:97:75:9d:27:02:a0:01:07:
         fb:c7:54:d5:f8:ff:87:31:9c:44:1d:33:46:0d:10:c3:2b:d4:
         73:c9:a9:0f:6d:36:29:16:98:c5:60:17:fe:ee:27:5d:c1:ec:
         ee:62:fc:ab:e2:c2:64:f0:90:d3:2f:a1:67:c9:5b:a3:51:63:
         07:fc:69:29:bf:6b:d8:8c:5e:46:c0:ec:a8:77:d8:f4:c0:fc:
         a1:69:cc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:14 2026 by rpki-client