Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
File:                     HdM6aLwLXJMQ__Uq1zlBINECpic.mft (raw, json)
Hash identifier:          cDgW11NgdKkLIqN7QgFjIVxb7CsJ99QcsZVbn73mtF8=
Subject key identifier:   CA:DA:97:EB:6C:6A:45:C6:55:C3:DF:5F:9C:A4:02:0D:5E:07:49:A3
Authority key identifier: 1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27
Certificate issuer:       /CN=A91C5319/serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
Manifest number:          014D
Signing time:             Thu 23 Jul 2026 06:49:40 +0000
Manifest this update:     Thu 23 Jul 2026 06:49:40 +0000
Manifest next update:     Thu 30 Jul 2026 06:49:40 +0000
Files and hashes:         1: HdM6aLwLXJMQ__Uq1zlBINECpic.crl (hash: P7U1FEb8AM5sPnbDIS5zsQ99zLEqOWP13XqYxiouGbQ=)
                          2: C7500EC88C2F11EF82B2F55CC4F9AE02.roa (hash: wRT9sM0qBqJTw3W+Zz9nGxaklW3kwpSgScv5I5RXTWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl
                          rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5319, serialNumber=1DD33A68BC0B5C9310FFF52AD7394120D102A627
        Validity
            Not Before: Jul 23 06:49:40 2026 GMT
            Not After : Jul 30 06:49:40 2026 GMT
        Subject: CN=6a61b984-0a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:34:4e:cb:51:ab:b8:ab:c4:73:b6:54:48:47:
                    1c:8d:a6:e9:3a:6f:01:9c:19:35:f3:3c:76:5e:b5:
                    16:74:65:b6:17:bf:2a:d5:66:40:57:19:4f:e7:6e:
                    53:8d:c2:14:9c:71:28:b9:c5:19:4a:ee:7a:52:52:
                    02:ee:c9:02:73:31:03:aa:ae:9d:18:98:6f:fa:46:
                    f8:a5:c9:dc:c8:b2:2e:cb:75:f0:78:49:67:d8:13:
                    8b:09:08:46:4b:7d:7a:cf:6e:57:5b:fe:e9:fc:25:
                    e9:f9:de:a2:ce:74:a3:12:38:49:99:7e:70:6b:76:
                    07:1e:da:09:41:c7:97:81:07:e0:7f:74:eb:ea:4d:
                    42:3b:48:06:59:b4:03:0a:d2:a6:c3:1f:1f:ee:18:
                    cc:9b:61:b7:a4:8b:f7:fb:11:69:22:f4:bd:39:c2:
                    87:03:8c:f8:26:1f:1d:1b:89:7f:ab:fc:0e:ce:cc:
                    50:7e:ac:40:07:3b:d6:4d:e1:ce:71:bb:21:2c:8e:
                    15:fb:ab:67:6e:a6:08:7e:e2:be:58:52:83:e2:03:
                    0d:05:7a:95:22:44:7b:3b:0b:c8:ce:4f:d2:98:a6:
                    f1:90:d4:58:2a:ba:39:03:00:bb:87:3a:a7:83:e1:
                    ed:6e:6a:f8:f4:63:11:91:86:f0:8f:6d:5a:7c:dc:
                    70:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DA:97:EB:6C:6A:45:C6:55:C3:DF:5F:9C:A4:02:0D:5E:07:49:A3
            X509v3 Authority Key Identifier:
                keyid:1D:D3:3A:68:BC:0B:5C:93:10:FF:F5:2A:D7:39:41:20:D1:02:A6:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HdM6aLwLXJMQ__Uq1zlBINECpic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5319/F94D41C88C2C11EF8122EC11C4F9AE02/HdM6aLwLXJMQ__Uq1zlBINECpic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ab:39:4e:b9:e7:5b:dd:f3:7e:9d:98:63:32:90:c9:40:81:
         63:dc:d2:15:70:50:5c:24:d6:49:c5:51:f9:08:f2:e4:05:eb:
         db:a7:aa:dd:bf:5a:c6:de:12:5e:b0:1d:3f:f2:1f:fb:e5:ba:
         50:1c:f8:ad:70:17:26:1c:27:76:0e:f7:03:24:38:62:70:37:
         32:f8:6c:5e:f9:e4:41:00:dd:64:1e:39:f4:a8:e3:30:29:30:
         8b:f1:a9:1e:12:77:ae:fb:eb:ca:b5:64:78:77:1e:55:88:12:
         ea:a5:96:4f:56:bf:dd:2f:49:c8:5c:aa:71:9c:7e:30:ea:68:
         f3:79:ac:06:9d:be:5e:d1:7d:94:95:4c:44:44:38:f7:ca:81:
         83:b4:18:9c:5d:8d:d1:dc:ac:f1:ce:dd:14:e0:7c:0c:02:46:
         4d:b8:72:71:65:51:74:c5:28:9e:8d:d4:63:47:37:d8:21:73:
         bc:dd:99:f9:80:a1:fc:92:a7:f7:30:2b:39:cd:19:7a:6d:c1:
         ab:7d:ae:3a:c1:03:02:bd:f4:09:8a:1a:00:9e:db:73:11:33:
         e7:5a:f7:f0:94:ab:59:4b:2d:6e:19:49:d1:77:e2:d6:e7:dc:
         79:fb:f1:83:e8:83:df:1c:69:c2:d6:8b:e8:07:2d:18:40:04:
         12:a4:ad:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzUzMTkxMTAvBgNVBAUTKDFERDMzQTY4QkMwQjVDOTMxMEZGRjUyQUQ3Mzk0MTIw
RDEwMkE2MjcwHhcNMjYwNzIzMDY0OTQwWhcNMjYwNzMwMDY0OTQwWjAYMRYwFAYD
VQQDEw02YTYxYjk4NC0wYTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlTROy1GruKvEc7ZUSEccjabpOm8BnBk18zx2XrUWdGW2F78q1WZAVxlP525T
jcIUnHEoucUZSu56UlIC7skCczEDqq6dGJhv+kb4pcncyLIuy3XweEln2BOLCQhG
S316z25XW/7p/CXp+d6iznSjEjhJmX5wa3YHHtoJQceXgQfgf3Tr6k1CO0gGWbQD
CtKmwx8f7hjMm2G3pIv3+xFpIvS9OcKHA4z4Jh8dG4l/q/wOzsxQfqxABzvWTeHO
cbshLI4V+6tnbqYIfuK+WFKD4gMNBXqVIkR7OwvIzk/SmKbxkNRYKro5AwC7hzqn
g+Htbmr49GMRkYbwj21afNxwiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMral+ts
akXGVcPfX5ykAg1eB0mjMB8GA1UdIwQYMBaAFB3TOmi8C1yTEP/1Ktc5QSDRAqYn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMxOS9GOTRENDFDODhD
MkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhKTVFfX1VxMXpsQklORUNw
aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0hkTTZhTHdMWEpNUV9fVXExemxCSU5FQ3BpYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTMxOS9GOTRENDFDODhDMkMxMUVGODEyMkVDMTFDNEY5QUUwMi9IZE02YUx3TFhK
TVFfX1VxMXpsQklORUNwaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj6s5TrnnW93zfp2YYzKQyUCBY9zSFXBQXCTWScVR+Qjy5AXr26eq3b9axt4S
XrAdP/If++W6UBz4rXAXJhwndg73AyQ4YnA3MvhsXvnkQQDdZB459KjjMCkwi/Gp
HhJ3rvvryrVkeHceVYgS6qWWT1a/3S9JyFyqcZx+MOpo83msBp2+XtF9lJVMREQ4
98qBg7QYnF2N0dys8c7dFOB8DAJGTbhycWVRdMUono3UY0c32CFzvN2Z+YCh/JKn
9zArOc0Zem3Bq32uOsEDAr30CYoaAJ7bcxEz51r38JSrWUstbhlJ0Xfi1ufcefvx
g+iD3xxpwtaL6ActGEAEEqSteg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:09 2026 by rpki-client