Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
File:                     HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft (raw, json)
Hash identifier:          a4Z/l13jRtStuDeplylw/3YeoQG2uTRC49KxClANJW4=
Subject key identifier:   6E:C6:EB:C8:3B:64:50:A9:F5:1F:83:1F:8B:02:E1:68:C6:14:25:6F
Authority key identifier: 1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F
Certificate issuer:       /CN=A911BD6E/serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
Manifest number:          58
Signing time:             Wed 13 May 2026 08:28:58 +0000
Manifest this update:     Wed 13 May 2026 08:28:57 +0000
Manifest next update:     Wed 20 May 2026 08:28:57 +0000
Files and hashes:         1: HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl (hash: BLIGyJsNtxMZD8CbDhkcA5oh7PWTOYVonOV5CSUaRck=)
                          2: C6369A92E29211F086FBD344456F56BC.roa (hash: /hMoFkZDEyrOtFoyUNiUcHKPDtAIaxeqfmQ19EP0GNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl
                          rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD6E, serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
        Validity
            Not Before: May 13 08:28:57 2026 GMT
            Not After : May 20 08:28:57 2026 GMT
        Subject: CN=6a04364a-7406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:49:92:f9:e4:a8:80:5a:70:42:bc:5f:b5:
                    9f:12:8c:2c:65:28:e3:46:bf:31:76:9d:1b:e8:7f:
                    d4:bb:23:8f:49:5f:28:d4:f0:f8:c6:7a:56:07:f8:
                    9c:be:45:77:2e:eb:6d:6c:c7:26:77:21:e6:15:da:
                    32:6d:ec:4f:75:de:0a:f9:b7:c4:1d:72:18:bf:fa:
                    5c:d5:d7:0d:b0:ba:92:bb:9f:15:da:fa:7d:37:75:
                    9e:7d:02:6f:d7:21:08:71:e3:03:c4:02:a5:3f:a2:
                    c9:f2:60:93:42:67:b9:ad:0c:e4:68:c1:ca:39:1f:
                    2a:a0:76:22:a5:af:32:08:e4:5f:ed:ff:af:35:fc:
                    c3:80:9e:fa:35:43:54:d8:e8:12:6c:da:2d:5c:41:
                    c3:d0:23:0d:5c:18:5d:24:26:d1:ef:f7:c7:a2:57:
                    da:53:37:21:9c:6e:96:3b:93:8c:8f:e6:ff:48:da:
                    22:9b:36:2b:46:46:8c:f8:be:25:63:26:59:cd:e8:
                    70:90:4d:6b:90:3f:d3:fe:f2:dc:ff:36:74:b8:f2:
                    70:80:50:59:a0:77:ab:3e:6f:4d:de:5b:a3:25:ef:
                    7f:7e:7f:ae:29:5f:f5:fd:51:56:f0:93:93:4c:d4:
                    92:dc:ac:9e:7d:38:28:3c:d7:45:4a:fd:9b:76:f2:
                    66:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C6:EB:C8:3B:64:50:A9:F5:1F:83:1F:8B:02:E1:68:C6:14:25:6F
            X509v3 Authority Key Identifier:
                keyid:1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:05:68:20:f2:95:55:33:0d:cb:ee:b6:98:da:a3:32:9e:3e:
         7a:db:8d:50:28:8e:e8:de:d9:66:d8:f6:05:e3:f5:19:0d:10:
         e2:e1:49:ca:c6:e7:61:9a:d5:72:bb:0e:b3:ac:9f:31:04:b7:
         26:39:00:4d:8a:45:c5:95:fb:af:7f:45:5b:56:fa:3c:80:fb:
         8b:d3:fd:21:d7:e3:d3:b8:3c:79:29:3b:40:e0:6a:5a:20:62:
         74:48:c9:a0:85:42:fa:5a:c2:87:82:87:b1:c7:0a:42:2c:67:
         c4:69:dc:02:2f:90:aa:8d:b1:70:13:f3:aa:be:9b:78:6c:e7:
         61:ea:3c:04:ed:d5:39:8b:6f:fd:37:9c:15:cc:f8:13:60:c6:
         ef:14:99:d1:8f:e5:d4:50:6f:23:29:9f:d2:ee:35:2e:b4:16:
         14:47:36:8a:70:38:2b:ee:9c:3e:18:8e:de:8c:17:22:0d:fd:
         43:32:ee:c1:56:14:af:7c:9c:0a:7e:f0:5c:cd:b6:12:e4:1f:
         9a:72:fe:66:a2:fd:db:22:9a:a6:b7:15:98:6b:0a:30:5c:f9:
         c1:52:f5:c1:90:90:80:6e:ba:99:bb:e7:b7:3e:97:ec:cc:7f:
         7d:fd:58:d7:8e:28:83:57:2b:41:fe:6c:97:be:23:50:ea:0c:
         f0:ac:9a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:45:20 2026 by rpki-client