Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
File:                     huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json)
Hash identifier:          ibX9vsvBqJp7k8HjAw+gEjlKNsjsxKkhWUcIMr5mA+4=
Subject key identifier:   D4:22:6B:5C:AC:D4:DE:39:D9:AA:2F:E2:BC:74:8D:22:60:30:86:34
Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A
Certificate issuer:       /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
Manifest number:          0171
Signing time:             Thu 23 Jul 2026 06:18:08 +0000
Manifest this update:     Thu 23 Jul 2026 06:18:08 +0000
Manifest next update:     Thu 30 Jul 2026 06:18:08 +0000
Files and hashes:         1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: uA3YJFu0ZQk5WJkTtqLEPm4apYnlvmYRoPnWoXJcUbQ=)
                          2: D0E3A43EABCF11F0B7733310C4F9AE02.roa (hash: Ilnu4Ombw62v68xUTdb4wZObUEp/ahOobR/hUSsGRRQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl
                          rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
        Validity
            Not Before: Jul 23 06:18:08 2026 GMT
            Not After : Jul 30 06:18:08 2026 GMT
        Subject: CN=6a61b220-ce02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:89:ad:85:32:51:3a:ab:0f:e7:8b:12:a7:
                    e8:41:a7:a0:e5:f7:1c:06:4c:dd:75:5d:83:57:27:
                    32:9b:57:da:90:7d:b0:62:d8:5e:64:fe:15:3a:83:
                    cd:45:51:01:ce:0c:f3:25:66:36:5e:02:c6:41:66:
                    ee:4b:14:a6:f1:47:4b:b3:7e:4e:ae:b0:4a:2c:ef:
                    68:88:a2:d5:0a:8a:ac:2e:a7:e4:19:4e:c3:86:9b:
                    b3:07:6b:7b:07:6b:47:d8:12:a7:0a:bd:29:56:54:
                    79:0e:39:4f:3f:5b:5d:89:30:ec:ab:80:a9:08:cf:
                    fe:b8:f2:08:9f:cb:e6:b7:b7:d0:15:5b:d3:62:fa:
                    65:f7:22:34:1e:79:59:9d:49:65:ba:0f:be:16:a1:
                    8c:f8:a9:53:5a:b1:a7:81:d7:dd:03:ce:ab:50:b1:
                    d3:5c:e6:a6:7c:10:eb:ae:e2:ed:6a:86:b4:6e:70:
                    65:97:67:af:28:ec:7a:28:97:a5:af:e5:b7:44:19:
                    b9:a0:02:6f:e1:f4:88:c5:c9:00:44:0a:b0:0f:19:
                    fc:d4:8d:e5:33:ef:9d:56:56:5e:55:2f:60:a2:21:
                    1e:1e:24:18:8f:1a:b8:60:b6:32:f5:70:6d:06:09:
                    ab:7e:19:eb:69:ec:15:2d:a3:58:3c:e1:79:95:f2:
                    f9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:22:6B:5C:AC:D4:DE:39:D9:AA:2F:E2:BC:74:8D:22:60:30:86:34
            X509v3 Authority Key Identifier:
                keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e0:80:fa:f4:14:87:e7:69:90:8a:6d:d1:94:7f:87:42:05:
         f9:02:d5:6d:37:3c:ca:bb:26:97:d3:89:a1:b5:fa:d7:c5:8b:
         a0:f5:b3:f4:15:8d:d9:9e:5b:dc:14:38:3f:90:cc:33:c0:d1:
         c3:0e:c9:b7:cd:49:4c:e0:f7:95:96:4c:71:bc:fb:79:bb:8d:
         09:f7:ea:5f:3c:85:25:7b:ec:82:94:49:c3:fd:18:7f:26:5f:
         e8:15:8a:ec:97:59:27:0b:52:b1:3a:50:59:e2:cd:c3:a1:95:
         ac:8e:c9:b0:26:05:75:f9:54:e1:b9:c0:6c:e6:7d:3a:74:eb:
         65:b5:d7:be:d6:57:29:53:df:3d:2f:00:36:0c:76:34:3d:9e:
         ca:34:16:6b:0c:d8:33:0e:c7:fd:09:1c:db:e6:83:6c:75:60:
         47:21:24:ad:27:be:3f:c0:39:20:b9:87:c0:f2:8e:a1:57:bd:
         52:4b:c5:8a:8a:f8:fd:50:ff:16:90:61:b1:61:a4:69:f0:a0:
         ba:6f:46:f1:66:6e:36:10:fe:4f:c1:70:99:49:37:8d:92:f7:
         f8:49:87:ff:27:33:f1:ee:18:32:ce:3f:5c:f5:09:bf:1f:68:
         97:40:74:e4:f1:00:86:44:97:52:dd:f6:70:0d:aa:fd:4f:97:
         1f:ae:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:03 2026 by rpki-client