Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
File:                     hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json)
Hash identifier:          gKHVmUMPZvrgMuvvn9ZaiYI2/rzH8Q697OEHLbFFTNA=
Subject key identifier:   47:A9:5F:3B:AF:D0:AF:9C:EC:04:0B:1D:5B:0F:3D:30:08:BF:1E:D4
Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B
Certificate issuer:       /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
Manifest number:          58
Signing time:             Mon 11 May 2026 08:16:45 +0000
Manifest this update:     Mon 11 May 2026 08:16:45 +0000
Manifest next update:     Mon 18 May 2026 08:16:45 +0000
Files and hashes:         1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: h8iU1gjef0At/O9qN+i1Oipdh8elMVkp1dP3Xvo74W0=)
                          2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: mWJy1v+ne8mjUCBxQ8B6n5ShRR6xhgziEl5EgVMvzV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl
                          rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B
        Validity
            Not Before: May 11 08:16:45 2026 GMT
            Not After : May 18 08:16:45 2026 GMT
        Subject: CN=6a01906d-d412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:da:ce:77:96:12:06:5a:c2:d6:81:8c:5c:
                    22:56:d8:15:18:a5:c5:49:31:02:7b:e4:56:43:aa:
                    c1:85:d3:c6:4d:23:13:6d:54:3a:89:c2:61:c3:04:
                    78:cd:51:02:ca:78:c1:ea:25:b7:02:17:72:8a:85:
                    45:6d:96:d5:26:ef:8d:25:f5:b3:f1:3c:26:40:1f:
                    91:60:08:89:b6:d9:05:45:7d:cf:88:33:47:a9:e4:
                    1c:89:b1:14:bc:74:2e:16:06:5a:19:6b:45:ac:30:
                    91:cd:05:2d:b1:cd:59:d9:18:e8:f8:39:6c:83:3b:
                    75:55:e7:41:03:ba:a2:96:53:88:d2:ec:f5:0b:e8:
                    76:17:f4:de:c6:56:69:af:7c:04:48:15:f4:e6:34:
                    f0:86:ed:39:f1:02:c9:54:5b:9c:4e:2f:a5:fb:ad:
                    09:51:60:93:ad:16:2f:45:d0:f6:80:73:4f:67:2d:
                    40:13:a2:5b:88:14:ab:3d:c8:0f:0d:12:e6:9d:66:
                    a1:e8:c1:1a:61:28:f0:83:4b:3e:46:b4:52:d3:83:
                    04:57:89:c0:a4:1b:63:e9:88:e6:22:8c:c5:d3:a8:
                    64:67:88:dd:dc:59:e5:df:70:41:c0:8f:27:af:61:
                    cd:fb:b3:e2:fa:61:4c:0e:a6:e4:05:2c:3d:4a:53:
                    e1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A9:5F:3B:AF:D0:AF:9C:EC:04:0B:1D:5B:0F:3D:30:08:BF:1E:D4
            X509v3 Authority Key Identifier:
                keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f7:b6:37:c2:25:72:c1:cc:e9:eb:eb:14:20:af:1d:14:25:
         c1:34:c3:50:bf:06:df:14:02:f5:72:0a:ee:48:44:b7:6b:2f:
         d8:f3:61:05:f4:d1:90:bf:da:f9:39:ea:27:b8:b6:d9:ca:99:
         23:6f:3c:2f:6f:91:0d:5c:6f:c4:25:ff:ce:c6:63:47:09:de:
         96:c9:b6:0a:75:2f:46:d5:03:71:5c:a0:61:da:01:cb:b8:32:
         c7:d6:4a:69:52:13:fd:68:ff:75:c9:30:77:3f:56:33:6c:32:
         af:e0:2a:20:81:12:c1:bd:f8:58:d9:0f:d8:c8:5f:50:aa:c0:
         3a:4e:9e:6d:1e:63:27:20:65:7d:e8:1a:a8:c2:c8:48:6d:ba:
         49:01:5a:1c:09:d1:8b:61:cd:a4:4c:cf:90:cf:4b:d2:f6:d5:
         94:c1:9a:8d:9f:7d:a2:b3:13:9f:40:c3:90:ca:63:63:64:1a:
         8a:f8:f2:ea:a1:30:5b:2a:76:01:59:8f:67:86:22:eb:c2:eb:
         bf:df:ce:9f:c7:29:13:67:0e:b3:30:e3:dc:68:95:c2:84:40:
         2e:f8:47:fe:13:27:ef:eb:0e:7e:b0:cb:fa:4c:be:5a:d8:6a:
         d6:94:ec:b1:49:0c:c8:5c:c7:7c:8f:a5:80:bf:49:b9:90:9d:
         e4:50:a8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:30 2026 by rpki-client