Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
File:                     hlng_trNtpATntXTNVh0di16GJ0.mft (raw, json)
Hash identifier:          kKFLJuoUrvQZgbfgkMaKDa1j0yyZTV1S+mK7rxNMClA=
Subject key identifier:   3F:60:C9:81:E0:B3:2B:82:8F:B0:05:CA:B7:65:9B:AD:FA:F8:DD:47
Authority key identifier: 86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
Certificate issuer:       /CN=A91AC0BB/serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
Manifest number:          43
Signing time:             Thu 23 Jul 2026 10:30:07 +0000
Manifest this update:     Thu 23 Jul 2026 10:30:07 +0000
Manifest next update:     Thu 30 Jul 2026 10:30:07 +0000
Files and hashes:         1: hlng_trNtpATntXTNVh0di16GJ0.crl (hash: MX2/4sc9i1CC8CMPlZD28GO7OHn//IlrZmGmy319RGc=)
                          2: 76DAAFAA251911F182F11CF1C0833773.roa (hash: uwccILNOfn3op7dK+stqfjkg9anKckOvjcXt+VX9yxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC0BB, serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
        Validity
            Not Before: Jul 23 10:30:07 2026 GMT
            Not After : Jul 30 10:30:07 2026 GMT
        Subject: CN=6a61ed2f-90bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3d:84:b0:09:46:45:a6:87:e7:10:12:d0:7d:
                    1f:a7:01:b7:24:5d:40:bc:98:4d:c2:38:53:f8:87:
                    0e:ab:92:86:50:e5:52:1b:51:b5:6e:ff:1d:15:78:
                    ee:51:58:61:ef:ee:64:f5:f8:dd:2a:60:bf:c3:bd:
                    40:9e:49:6c:f3:4c:93:4b:a1:3e:de:1e:41:33:0a:
                    a4:d4:fc:19:3f:36:fa:d1:20:fc:c4:13:c3:be:1c:
                    38:70:99:82:f3:1d:db:91:c9:5e:5e:1c:95:4e:b4:
                    02:bd:86:95:16:27:43:ab:2d:ee:bd:41:2c:b9:db:
                    c0:7e:71:53:4a:f9:ec:6a:d4:dc:b0:53:f5:b4:c7:
                    31:6e:21:6e:00:2d:40:50:20:11:74:1d:d4:15:48:
                    02:d4:c2:4f:b7:60:33:8f:bc:39:6d:5e:bf:ad:04:
                    2d:a6:8b:db:63:4e:bb:da:f5:75:35:f4:7e:db:17:
                    65:29:b7:27:f2:c6:95:30:64:bd:f2:57:a5:84:88:
                    f8:2f:2b:68:0f:c4:b3:c9:6e:90:3e:6d:db:85:63:
                    c6:f9:7d:27:6c:0b:7f:6e:d0:0e:e6:a5:4d:38:4c:
                    80:8f:06:ed:cf:89:15:8b:fc:c7:e4:69:f7:1d:35:
                    c9:41:fc:3d:92:55:ac:6f:60:0c:20:0f:7a:fb:a8:
                    eb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:60:C9:81:E0:B3:2B:82:8F:B0:05:CA:B7:65:9B:AD:FA:F8:DD:47
            X509v3 Authority Key Identifier:
                keyid:86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f8:33:c8:1e:14:89:e6:1a:76:26:d4:1c:72:a6:a4:c9:04:
         f3:9a:49:e2:58:a3:58:49:98:d6:ab:dc:3e:c8:24:b1:7d:89:
         3a:4b:59:fe:10:95:43:c1:10:8d:98:cd:d8:1f:90:a9:af:ac:
         be:8f:24:2e:ba:0e:55:8d:ce:b7:c5:1b:04:98:5a:07:37:98:
         ff:93:b7:58:27:40:fc:72:98:26:90:6e:b4:db:76:0e:96:a3:
         2c:98:0e:78:5a:7f:ee:bb:82:50:01:9e:8c:a8:f3:c3:a0:96:
         58:57:10:58:d2:e4:87:c6:f4:ac:80:47:a8:62:ca:d9:b7:63:
         bd:18:4d:97:57:16:27:4a:4c:a2:78:36:56:e6:a7:80:3a:fb:
         6a:12:24:42:26:77:10:33:39:27:b1:c8:9c:ad:07:ff:8e:e0:
         d6:30:75:97:99:aa:a0:f1:71:0e:41:7f:04:32:c2:0c:01:06:
         58:c8:57:f0:5c:d1:ee:99:bf:ab:22:ad:64:e9:16:d7:68:e8:
         42:fe:19:b0:4f:e5:83:3d:cf:99:70:22:28:9e:f3:b2:84:42:
         2c:f4:ac:d7:73:49:69:cd:35:49:70:65:b1:a4:07:c1:63:8b:
         50:9d:e9:ff:ee:7d:4b:ea:bd:82:89:e1:71:0f:9c:3f:b3:3d:
         59:8e:cf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:33:44 2026 by rpki-client