Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
File:                     Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft (raw, json)
Hash identifier:          SluwI3NyVVUzGXyG/PHL4r5EdPL7JzSTRIPISEwl1fk=
Subject key identifier:   E4:75:75:4F:7C:D7:47:35:F8:99:8A:59:54:FD:0E:FB:22:96:42:FB
Authority key identifier: 1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96
Certificate issuer:       /CN=A912C770/serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
Manifest number:          8B
Signing time:             Fri 13 Nov 2026 07:48:26 +0000
Manifest this update:     Fri 13 Nov 2026 07:48:26 +0000
Manifest next update:     Fri 20 Nov 2026 07:48:26 +0000
Files and hashes:         1: Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl (hash: cdCW6BkTWGcRzfKz8Iz1pQil4bhv+LKg/C8+4/fQ0L8=)
                          2: C7FCC7D210DE11F18FBC6D5B083D8C67.roa (hash: ZJ2mGof4d8TGjIUSjiSJIxX88gLNKzRhctZ8YiDrvqI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl
                          rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 07:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C770, serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296
        Validity
            Not Before: Nov 13 07:48:26 2026 GMT
            Not After : Nov 20 07:48:26 2026 GMT
        Subject: CN=6af6c0ca-1485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:c3:92:45:2e:8f:11:94:15:45:03:31:5c:
                    dc:33:16:5d:a6:40:af:bc:98:32:e7:7d:af:80:48:
                    2d:71:6b:9d:d5:71:6e:18:c9:26:bb:3e:80:9a:2e:
                    ec:f5:bd:38:82:0c:f8:2c:c9:db:cf:97:ff:eb:ba:
                    59:c3:af:05:39:55:07:cd:32:5c:b5:23:a8:4c:f9:
                    3a:10:f6:84:b5:95:2a:5c:f4:ee:b0:fc:14:7b:8f:
                    8d:35:a2:86:9c:17:78:89:88:ca:fc:e1:83:fa:de:
                    ca:2b:16:40:58:79:68:34:d9:48:c6:af:91:00:73:
                    b0:a5:8e:e8:4c:7a:e5:c7:d5:90:69:6f:b8:a5:b7:
                    87:44:bb:40:46:fe:3c:40:e1:8f:5d:29:09:26:68:
                    12:2e:d2:a7:e9:a7:a5:bc:c6:c5:33:a0:11:f5:41:
                    5f:8a:58:db:0c:89:10:55:7c:1d:a0:e8:26:b9:5f:
                    03:ad:a5:05:19:ff:ab:99:3a:65:ee:98:67:54:81:
                    9a:da:a7:b3:7b:01:99:c5:7a:3c:db:ae:06:bc:e8:
                    9d:dc:4b:8a:b8:46:c7:34:62:c4:67:05:dc:c7:b8:
                    82:6a:7c:be:de:4f:8c:43:8c:c6:5a:15:95:d1:fe:
                    d3:2d:b1:68:5b:93:a6:ac:e9:d4:96:d7:75:99:ad:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:75:75:4F:7C:D7:47:35:F8:99:8A:59:54:FD:0E:FB:22:96:42:FB
            X509v3 Authority Key Identifier:
                keyid:1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:68:9a:f6:9d:eb:14:5f:eb:0b:65:b0:0a:d5:f7:1e:f6:04:
         7a:d3:ce:e4:d8:a4:69:54:82:d8:48:e9:68:c2:1b:26:16:7a:
         2a:56:2a:9c:fa:f1:95:f1:b5:64:4d:ff:66:47:68:08:aa:9c:
         25:4b:82:fe:37:e5:56:8f:85:42:c2:21:94:de:51:b9:77:ce:
         8a:b6:14:6a:fe:59:6d:8f:b2:79:17:85:45:bd:9f:9f:d2:28:
         4b:14:ca:d5:0d:93:93:89:26:24:11:05:7d:3b:44:53:89:4a:
         73:2e:d8:47:aa:df:d6:97:c2:52:6b:c5:00:18:26:22:23:02:
         7b:ec:7b:df:76:5c:4d:5b:99:23:31:c8:de:05:09:be:cd:95:
         ce:d9:60:91:50:44:6c:d6:33:ff:38:43:7e:d2:ef:b9:6a:0b:
         22:26:64:8d:c6:f6:2f:18:b5:73:64:80:42:e0:54:6f:d4:85:
         9a:a4:e8:2d:d6:b0:9f:61:bb:90:1a:ad:7c:67:fd:c5:35:43:
         60:3a:23:b1:db:e9:07:08:ac:39:cf:94:79:7c:b6:77:55:75:
         8c:fb:a2:ce:dd:c0:27:b7:1a:2a:e2:59:82:4d:d2:61:3a:e2:
         3e:97:43:86:13:9b:4e:14:41:70:df:8a:dc:6a:b6:0a:a4:6f:
         38:aa:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:28:55 2026 by rpki-client