Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
File:                     HSQuN7enRsN-RUFFarAJiztXPPw.mft (raw, json)
Hash identifier:          Q/U/UG/rn+TuuSZiw8KJNuxp8oHrsU17xCWgYxgDU+Q=
Subject key identifier:   20:18:D5:23:C9:28:26:14:59:4B:72:ED:02:B8:0A:85:0E:0D:28:EF
Authority key identifier: 1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC
Certificate issuer:       /CN=A9142EA4/serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
Manifest number:          C3
Signing time:             Thu 23 Jul 2026 08:49:11 +0000
Manifest this update:     Thu 23 Jul 2026 08:49:10 +0000
Manifest next update:     Thu 30 Jul 2026 08:49:10 +0000
Files and hashes:         1: HSQuN7enRsN-RUFFarAJiztXPPw.crl (hash: Ed/7+4xuaf0qOcj/D0fOiP9Fffle5sPszGiBKPCPbFo=)
                          2: 96E040E063B211F09B18DA38C4F9AE02.roa (hash: TJexH2mJnGHPHwiqib8qKUREb69KfASR/45xsIgcTsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl
                          rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142EA4, serialNumber=1D242E37B7A746C37E4541456AB0098B3B573CFC
        Validity
            Not Before: Jul 23 08:49:10 2026 GMT
            Not After : Jul 30 08:49:10 2026 GMT
        Subject: CN=6a61d587-3405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a6:a4:5e:1f:79:d1:d8:da:e7:a6:4b:96:dc:
                    d0:fe:83:44:cb:7f:5a:3f:d2:ae:0f:df:ac:70:8c:
                    a2:ea:f6:58:df:9c:1c:d1:f9:5e:7d:dc:5d:78:d7:
                    0e:15:22:92:06:f9:14:81:36:13:bb:44:83:28:71:
                    88:7e:69:6c:e5:1d:57:81:6e:8d:5c:38:eb:4c:fd:
                    da:63:97:49:3b:db:5b:58:35:1b:eb:31:f9:81:03:
                    22:59:64:41:a6:83:a8:5f:07:5e:84:56:5f:5a:b3:
                    3f:5a:61:b3:3b:ce:2f:5f:2d:d5:65:4e:05:3a:dc:
                    8e:88:3d:5b:e6:fb:bb:89:9c:f8:26:86:96:42:8d:
                    ad:37:fc:9a:95:df:0f:e1:12:5a:6b:2f:7d:e6:27:
                    0f:8e:9b:60:bc:17:aa:f5:9d:15:16:15:da:ae:ca:
                    e5:fa:25:0b:06:7c:14:d4:05:0c:43:db:d9:3c:93:
                    cd:74:6c:0b:53:d2:cc:e1:7e:ab:83:59:4d:3c:0f:
                    70:98:c4:35:4b:60:58:21:02:66:5d:8a:ae:7d:56:
                    3c:62:7b:68:0f:a7:ed:31:fb:0f:68:3f:62:f6:4f:
                    e1:7c:2e:66:64:4d:cd:ac:8b:2f:77:ac:b6:43:ca:
                    48:34:6d:92:8b:3f:61:20:a9:70:80:44:5e:b1:8b:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:18:D5:23:C9:28:26:14:59:4B:72:ED:02:B8:0A:85:0E:0D:28:EF
            X509v3 Authority Key Identifier:
                keyid:1D:24:2E:37:B7:A7:46:C3:7E:45:41:45:6A:B0:09:8B:3B:57:3C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSQuN7enRsN-RUFFarAJiztXPPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142EA4/264DCF1C63AF11F08E002B4CC4F9AE02/HSQuN7enRsN-RUFFarAJiztXPPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c1:2f:58:a6:50:99:62:8e:45:7d:d7:73:33:ae:a1:07:41:
         6b:ce:97:46:37:77:59:fd:12:00:ac:f0:4b:7d:be:d7:82:a8:
         42:c6:9b:45:5b:4b:86:78:4e:c5:54:8e:57:d0:a1:48:12:1d:
         12:c9:bf:36:92:68:1b:dd:f6:eb:f0:89:1d:6c:7c:49:20:db:
         1b:d8:64:3a:35:95:e8:b6:f1:3d:85:ef:ee:2f:d1:96:ae:55:
         ad:9d:a8:f9:97:93:b9:09:c8:00:3e:c5:28:a4:5b:c6:0d:a1:
         bb:cb:45:1a:7d:0b:f6:30:db:69:0f:f1:87:03:d8:9d:a2:21:
         4a:73:50:c2:ff:bb:39:20:b4:b3:fe:9e:25:22:cb:d9:36:89:
         ee:b6:17:80:d9:98:0e:3c:9a:18:8a:61:3d:e7:68:88:7f:f9:
         19:95:e0:f4:bc:11:ce:12:e9:94:0e:52:46:d4:b0:bb:92:ba:
         55:9b:7c:fc:33:b1:10:99:7a:67:98:e5:8f:1c:0c:24:9c:2b:
         af:78:a2:7a:a8:46:60:ec:73:d8:50:04:7a:9e:ff:7c:70:f5:
         c6:cc:25:73:dd:9b:cd:27:79:3c:47:ee:48:ba:86:fa:86:a1:
         3e:e9:6c:4f:36:7c:b3:6e:a9:a5:08:fe:0a:43:de:50:1a:10:
         d0:bd:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:44:46 2026 by rpki-client