Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
File:                     hYBFlRf-HXfU04pCnx0hxskt6TQ.mft (raw, json)
Hash identifier:          ln1fc2CDvrC9HvSSJzFFmuqq+CuXGRinWWuEtg4mCvs=
Subject key identifier:   3A:E4:4B:28:55:88:59:86:D9:92:3D:7E:35:E4:BD:27:60:74:1E:32
Authority key identifier: 85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34
Certificate issuer:       /CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
Manifest number:          017C
Signing time:             Thu 23 Jul 2026 06:10:48 +0000
Manifest this update:     Thu 23 Jul 2026 06:10:48 +0000
Manifest next update:     Thu 30 Jul 2026 06:10:48 +0000
Files and hashes:         1: hYBFlRf-HXfU04pCnx0hxskt6TQ.crl (hash: j+VANIfqZFUeEuCiAGkuhoEJUic4i+BiJJmlThB4/bI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145B5E, serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934
        Validity
            Not Before: Jul 23 06:10:48 2026 GMT
            Not After : Jul 30 06:10:48 2026 GMT
        Subject: CN=6a61b068-c8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:27:2d:6d:75:aa:88:21:19:38:1c:ed:d7:
                    b1:50:ba:c5:5f:66:54:33:5a:0f:71:6f:32:26:e0:
                    88:d2:6c:33:50:6f:4f:19:ac:a4:05:3d:a4:9d:a0:
                    d4:6c:ac:5a:3c:89:ed:42:48:78:5b:30:b6:f5:74:
                    29:0e:66:34:02:28:15:b5:b0:f3:2b:4e:48:a3:3e:
                    85:f4:ab:b8:72:4c:6b:f3:d0:ef:0b:45:f5:e1:28:
                    06:6c:6f:6b:88:a2:bf:cf:05:16:d2:99:05:58:1d:
                    af:8c:28:dc:96:0b:5d:4a:8e:c2:aa:87:ae:ae:48:
                    c6:12:eb:71:c8:45:88:90:dc:2a:cd:61:ae:22:eb:
                    e6:7d:24:af:73:18:d2:04:62:7d:6f:16:df:55:b3:
                    20:81:4a:6f:90:44:27:a6:eb:63:bf:84:b6:29:cf:
                    d1:3b:77:7f:e9:7d:46:ed:b0:cc:46:e8:4b:3c:33:
                    ec:1b:77:c7:00:99:ff:ae:81:58:c7:ac:2c:e0:65:
                    6c:df:87:c3:5f:41:b3:86:dc:42:0f:6f:5b:fd:28:
                    d2:35:c6:4b:95:2b:59:7d:77:b4:27:ec:d7:6c:76:
                    e2:6d:2c:7d:71:98:22:16:19:b1:75:de:e0:ab:a3:
                    45:8a:76:dd:96:00:e1:43:76:b4:26:e3:28:89:46:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E4:4B:28:55:88:59:86:D9:92:3D:7E:35:E4:BD:27:60:74:1E:32
            X509v3 Authority Key Identifier:
                keyid:85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:79:43:97:2a:13:eb:76:50:68:d0:91:40:d4:60:21:14:65:
         0b:3c:10:73:26:d1:67:ea:d9:07:ac:42:8e:7c:49:ea:60:d7:
         c5:3b:53:3c:97:27:93:12:e2:cd:e5:2a:5a:3f:58:19:e0:46:
         c1:29:ba:78:2d:f7:02:f7:75:41:a1:56:f1:6b:9c:27:27:32:
         9a:41:e5:2c:95:1c:95:b7:7c:ed:c6:9d:77:e7:83:89:6c:bf:
         b3:2c:b3:42:81:f2:0b:50:5e:30:27:5a:18:b7:cc:9d:ca:da:
         b6:9c:ed:08:07:aa:93:8e:48:16:57:bf:10:f9:eb:fe:c3:27:
         05:d0:34:6d:c5:4e:64:2d:00:03:65:57:a6:7a:5c:fa:16:9c:
         2a:2f:d1:af:43:8e:51:42:28:15:eb:fa:be:a8:99:36:e6:bb:
         60:78:dd:bb:f3:a2:49:99:78:2c:e3:f8:ac:0d:7d:29:e2:24:
         c1:8d:42:05:e3:8d:c7:36:99:4f:7b:3b:46:80:3e:cc:b9:32:
         43:9b:ec:71:07:d5:9d:b7:52:20:a1:1f:a7:5b:df:e4:68:08:
         cf:f9:e6:ea:36:de:5e:23:e3:9d:00:9f:aa:60:7a:9e:21:51:
         68:b9:da:82:7f:4b:da:41:43:ac:a0:9a:0f:e9:1a:d8:09:4c:
         70:b1:70:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:44 2026 by rpki-client