Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
File:                     hhe5_iqn_uIl8uDS3IdkCYE33m0.mft (raw, json)
Hash identifier:          1aYSkBDOBUflWp4FfX8Xuy9kwreYio65pOYaoGvQ5iI=
Subject key identifier:   46:28:2F:FF:4F:49:33:BC:9A:90:9C:52:2C:F7:4F:F0:DF:42:40:15
Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D
Certificate issuer:       /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D
Certificate serial:       0ABF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
Manifest number:          0AB5
Signing time:             Wed 22 Jul 2026 19:51:32 +0000
Manifest this update:     Wed 22 Jul 2026 19:51:31 +0000
Manifest next update:     Wed 29 Jul 2026 19:51:31 +0000
Files and hashes:         1: hhe5_iqn_uIl8uDS3IdkCYE33m0.crl (hash: CSceuL/xpguT6p4mJDuWRvPD7pzacYE1hXAr43vCaZ0=)
                          2: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (hash: IQxEBmP4et/Kr7uKG8HCuWwAUdMBf+1SeFtUWAGK3LQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl
                          rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2751 (0xabf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D
        Validity
            Not Before: Jul 22 19:51:31 2026 GMT
            Not After : Jul 29 19:51:31 2026 GMT
        Subject: CN=6a611f44-00e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:70:f5:f7:ab:84:78:67:06:c5:11:c2:1e:
                    56:0d:c4:20:37:5a:d4:dd:0a:1d:d3:9b:ec:7a:d7:
                    2a:6b:32:f0:de:c5:89:01:75:db:61:51:24:a6:eb:
                    65:b4:a5:af:68:10:a6:80:1a:d6:1f:e8:8a:67:53:
                    6d:7a:79:69:3e:e9:f4:59:88:10:27:47:ac:22:ad:
                    19:94:8a:48:6e:c9:cd:e1:c5:b2:8e:42:13:7e:e0:
                    fa:5c:b4:e0:e0:d7:7d:08:a7:02:0d:20:4e:07:05:
                    39:dd:a7:d3:89:85:54:4d:3a:6d:c6:07:4c:18:fc:
                    f1:2a:a3:0f:b8:78:a8:2f:12:9b:67:86:ca:65:58:
                    35:35:e6:5e:fb:f0:d8:66:0e:59:ce:d6:4e:b8:2e:
                    f8:d6:99:fa:5f:e4:46:d6:1e:85:56:1b:c8:40:79:
                    d0:2b:c1:38:1a:12:8b:01:da:6b:43:e9:90:2f:c0:
                    bf:7f:1f:c5:4d:98:e8:39:ee:35:49:40:61:fd:df:
                    53:99:4a:68:7b:46:db:63:3e:ce:29:77:a0:e5:85:
                    3a:74:0f:9f:d3:67:f6:25:3a:97:73:cb:8c:4e:c9:
                    e7:99:85:1d:3e:07:4d:c0:08:3c:95:1d:ef:46:ed:
                    d3:48:12:78:11:0b:64:3a:9e:1e:cd:76:7b:24:fb:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:28:2F:FF:4F:49:33:BC:9A:90:9C:52:2C:F7:4F:F0:DF:42:40:15
            X509v3 Authority Key Identifier:
                keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:98:a0:b4:7a:e8:47:b1:5b:d6:50:d4:5c:52:b3:fb:81:de:
         6d:11:22:d9:c2:bd:66:29:af:c7:34:9d:26:e2:4c:ef:1d:0a:
         50:59:67:ca:5a:ea:3e:dd:ab:67:44:86:94:53:21:07:a1:de:
         aa:30:a3:46:eb:0d:dc:57:c2:b3:fd:36:8e:55:10:d5:2f:77:
         6d:3f:35:03:02:ef:20:75:29:1d:d1:de:01:e5:7b:23:1b:ef:
         5b:33:c1:65:cc:39:d1:13:01:ff:6b:10:a0:36:58:82:0e:cd:
         6d:f2:91:8c:74:29:fe:4e:45:dc:da:b3:53:8a:5b:17:05:a4:
         df:47:98:c8:e1:84:8b:cd:73:f1:67:7b:34:72:86:f6:e5:ba:
         2c:93:7d:5d:21:b8:3b:40:c0:90:56:c1:21:81:e2:8c:53:77:
         66:2a:99:ae:91:79:32:c3:10:ca:03:27:c7:23:54:01:e2:13:
         5e:2b:5a:32:c1:24:66:3b:be:ce:d5:89:9c:74:16:9e:40:25:
         4a:94:fa:14:86:ff:3f:59:66:e7:f2:b3:24:e8:b1:67:a4:7d:
         86:b2:a3:6e:f5:5b:dc:04:c2:8b:ac:43:20:bc:17:ff:5b:dc:
         ba:fd:62:54:16:7d:94:70:ea:c3:c1:d3:61:a5:ca:d0:ca:74:
         7f:09:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:07 2026 by rpki-client