Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft
File:                     He-yCnpR7hjdetBq2qxJEePi95Q.mft (raw, json)
Hash identifier:          W0BZVeZJNEArZLasoNb+p1t5Ek1KrnCragUdts3npKc=
Subject key identifier:   8D:66:09:CA:DA:80:2A:57:66:CC:57:E3:1F:6F:A1:26:6F:FD:97:AC
Authority key identifier: 1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94
Certificate issuer:       /CN=A91285E3/serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794
Certificate serial:       02B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft
Manifest number:          02B0
Signing time:             Thu 23 Jul 2026 02:35:14 +0000
Manifest this update:     Thu 23 Jul 2026 02:35:14 +0000
Manifest next update:     Thu 30 Jul 2026 02:35:14 +0000
Files and hashes:         1: He-yCnpR7hjdetBq2qxJEePi95Q.crl (hash: woC4Ue6CaFg7HtUK0iafXvbV9Nb1dg+qcmCvbt+0VWE=)
                          2: 54365208708411EDA8B14246C4F9AE02.roa (hash: XkgCUe6o/GCC4RXMS466VJWBGD4478vydtNuBFIJtZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl
                          rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91285E3, serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794
        Validity
            Not Before: Jul 23 02:35:14 2026 GMT
            Not After : Jul 30 02:35:14 2026 GMT
        Subject: CN=6a617de2-8783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:8c:9f:10:dd:1f:38:c1:69:3b:06:d0:66:
                    28:76:05:ca:e1:b8:a1:3f:92:ed:9c:19:e5:6c:c1:
                    4c:9b:d3:f1:b2:f0:e9:63:3a:1d:dc:2c:80:e4:67:
                    c3:83:4d:77:64:1d:31:b3:4f:d4:98:8e:d4:a0:0d:
                    58:44:91:86:3b:67:2d:bf:16:d2:d6:1b:b3:ff:96:
                    b2:0d:36:17:5a:41:97:eb:6c:3c:3f:78:15:fe:4c:
                    5f:9d:eb:8b:7a:16:44:84:b9:e2:91:82:a9:0e:e5:
                    32:32:8c:d3:d3:6a:31:4d:ec:34:0e:ee:a2:68:ad:
                    ec:5d:77:1a:c0:ab:e9:30:38:7e:16:78:39:75:bc:
                    ea:a5:66:68:7c:ad:06:74:6c:49:8a:38:99:d7:60:
                    20:2c:5b:23:e8:af:e6:9e:b6:90:03:41:43:28:83:
                    8e:07:00:10:67:10:6d:91:af:3a:4e:7a:07:93:de:
                    4e:ef:06:d4:a5:df:95:d9:e1:76:d5:01:14:21:7c:
                    6d:d6:d6:ad:09:03:42:b9:e2:c1:dc:a3:cb:c5:0a:
                    ff:7c:bb:81:7e:d1:f9:d1:44:cb:b7:3c:83:b3:39:
                    33:db:81:56:a7:52:93:6b:9c:cb:37:90:1b:95:24:
                    c1:a3:3c:3c:1f:24:ca:1e:21:23:fa:6d:0d:7b:74:
                    f3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:66:09:CA:DA:80:2A:57:66:CC:57:E3:1F:6F:A1:26:6F:FD:97:AC
            X509v3 Authority Key Identifier:
                keyid:1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a8:aa:ae:c9:da:5e:7d:32:8c:33:46:8a:0c:8a:01:39:27:
         41:1b:69:ec:97:13:85:f8:89:ac:7a:0e:17:f6:64:1d:a8:dd:
         90:bd:c4:c1:8e:df:fe:8a:fb:fc:0c:54:74:19:5e:06:0d:10:
         d8:bd:a8:3c:a8:55:17:45:91:eb:99:84:31:66:ab:dd:4f:22:
         4e:ef:9d:9f:80:52:94:94:e3:a0:c5:94:4c:7f:64:59:11:ac:
         9e:10:93:09:42:a3:e3:63:f9:85:36:1c:ae:e9:b0:91:e0:94:
         06:85:50:45:51:50:08:b0:9c:75:6d:b0:27:f4:cb:3c:bb:04:
         fd:63:cd:e7:17:f6:fd:26:25:ce:e8:6d:3b:d8:15:69:37:12:
         2e:b6:e0:f3:7f:c1:0c:97:a9:eb:18:64:33:4f:46:d4:93:dc:
         a3:15:99:ab:96:42:aa:4d:cb:02:0e:9b:53:4a:6a:55:97:da:
         ed:d4:2c:90:99:c8:18:4b:14:bb:49:58:fe:4f:f0:e1:4a:14:
         6a:cf:e1:80:17:e7:96:ba:5b:9f:e6:cc:a8:37:78:42:22:51:
         cb:6e:0f:7d:01:f3:46:cc:61:e8:ca:96:b1:12:9a:00:5e:9a:
         6e:97:73:f9:e4:d1:30:a3:06:39:1c:9c:5f:43:e4:a5:08:94:
         3e:4e:b2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:55 2026 by rpki-client