Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
File:                     Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json)
Hash identifier:          DqkF9LiM48Iwzev3xkZIeSpfOGrJtSwkbqtXRkqYKtg=
Subject key identifier:   1D:34:16:EB:DE:58:5F:8D:DB:D8:D8:1B:1E:9B:73:07:7D:33:4C:72
Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4
Certificate issuer:       /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4
Certificate serial:       1C41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
Manifest number:          1BF7
Signing time:             Wed 22 Jul 2026 16:19:14 +0000
Manifest this update:     Wed 22 Jul 2026 16:19:14 +0000
Manifest next update:     Wed 29 Jul 2026 16:19:14 +0000
Files and hashes:         1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: VKI0dMRgYyazpsIwoQQjukSQK7k/wHBDRtg+RpPDcPI=)
                          2: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: d64wjm9gxbiMp8OVy71nexJK/cOMcYjRyvHzyINqLwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl
                          rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7233 (0x1c41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4
        Validity
            Not Before: Jul 22 16:19:14 2026 GMT
            Not After : Jul 29 16:19:14 2026 GMT
        Subject: CN=6a60ed82-4d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:7f:82:a0:17:bd:2c:ed:4d:d0:a1:8f:65:
                    eb:e0:41:a4:d1:1e:f5:5a:8d:c0:ae:f5:1a:ad:c1:
                    77:c9:7d:b5:9b:14:75:6c:a4:aa:8f:1d:6b:31:c2:
                    15:32:eb:02:d5:be:e9:a1:b1:f8:ef:d8:21:4b:60:
                    8d:2d:bc:67:f2:89:28:2b:ef:81:28:07:f1:54:70:
                    db:ce:97:d8:1a:6d:0f:c0:f2:7d:2f:9b:f9:01:ac:
                    fc:ae:3f:ed:8f:96:b4:66:be:30:70:72:40:0b:84:
                    1c:ee:f2:ff:d9:4e:57:3d:4c:c9:e6:8d:b9:64:95:
                    ae:58:55:39:20:85:27:24:2e:5f:2d:e9:20:76:0f:
                    3a:05:86:86:71:ff:f1:6f:4f:28:94:d8:5d:83:49:
                    45:cf:e0:11:b0:b2:e0:46:7f:cf:4f:31:00:89:55:
                    c2:7d:7d:01:ba:72:92:12:c3:51:6e:2e:d0:fe:72:
                    db:d4:f1:a5:42:33:6e:86:51:87:db:7c:73:e0:55:
                    d9:fa:d3:c8:4b:63:64:34:8d:c0:68:a4:75:fb:0b:
                    73:7d:4b:46:cd:b4:db:1c:92:2b:fb:df:50:e1:1b:
                    8e:17:c9:56:7c:96:33:87:3a:e6:e6:95:15:e2:14:
                    c0:14:16:00:0c:b3:c2:2a:28:e0:72:8b:3e:3f:29:
                    7a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:34:16:EB:DE:58:5F:8D:DB:D8:D8:1B:1E:9B:73:07:7D:33:4C:72
            X509v3 Authority Key Identifier:
                keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:9f:d9:be:df:d8:66:4c:6d:26:62:99:5d:64:38:b9:cf:61:
         0a:8e:be:fd:6e:b7:a7:f6:a0:64:7c:4f:90:d6:55:2e:71:7e:
         1e:b6:b9:67:34:2a:4e:87:9c:99:05:cd:b1:ee:f0:ec:9f:f4:
         52:dd:d0:82:9e:f8:53:35:a0:52:28:cb:7b:38:92:1f:40:15:
         ea:65:b9:92:f7:53:1c:0b:19:e4:7c:f6:28:e1:69:0c:87:5d:
         f5:27:c4:69:79:b8:03:8f:d8:40:6a:17:5d:3c:0b:1f:e0:aa:
         09:79:cd:2b:4c:cb:90:9a:43:0f:b5:0e:15:c6:82:f9:88:f6:
         2c:9f:33:1a:39:70:06:9f:e3:06:0d:40:a2:a4:d3:76:09:a6:
         3e:cf:bb:74:c3:0c:4a:c5:1e:5d:93:9a:85:41:b5:e6:cf:30:
         13:f0:20:85:06:4e:4d:06:c5:4c:1d:81:7c:9d:a3:11:f3:ff:
         38:6a:1c:ab:f0:55:3b:ba:4e:59:2b:9f:fd:cf:12:0d:37:9b:
         a4:06:d7:3f:c2:5a:54:19:27:3c:62:54:68:5d:72:1c:d6:c4:
         2a:0e:36:a8:4e:17:47:63:f0:2d:22:dc:88:94:48:46:80:6c:
         a0:be:2f:23:6a:0f:f7:cf:f8:45:da:6b:d5:b2:c4:0f:3e:7f:
         73:7e:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:25 2026 by rpki-client