Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
File:                     6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json)
Hash identifier:          VqpN2Iy3PUlcapkCP5W/jbIfU3XoJcJDsJAOHvHBn44=
Subject key identifier:   2D:51:C5:44:B1:C4:68:94:A9:5C:B2:E0:3C:40:44:F2:08:C6:2E:7C
Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C
Certificate issuer:       /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
Certificate serial:       0298
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
Manifest number:          028F
Signing time:             Wed 13 May 2026 01:50:43 +0000
Manifest this update:     Wed 13 May 2026 01:50:43 +0000
Manifest next update:     Wed 20 May 2026 01:50:43 +0000
Files and hashes:         1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: ujUJx1AlKSO3chB9ZjKUcdcStp9y6GnuRWWGlIKHR8Y=)
                          2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: 4eRmnV1SKuH1F3TR04UxwRBazkfSRALaDVotnHYReM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl
                          rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C
        Validity
            Not Before: May 13 01:50:43 2026 GMT
            Not After : May 20 01:50:43 2026 GMT
        Subject: CN=6a03d8f3-6f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:30:3e:de:fd:d1:9c:3d:4e:b5:50:b3:fe:
                    e1:4f:d7:3c:64:b2:54:c8:a8:60:ab:9b:b2:5f:ed:
                    50:53:02:33:6c:71:d5:e7:4a:61:51:de:f9:3f:9b:
                    e8:a5:a8:65:cf:2e:2f:d1:42:e3:85:14:02:b9:d9:
                    b2:e7:cf:79:3f:5f:ea:f6:78:4a:0f:fa:b4:4a:fe:
                    15:b5:b5:c0:51:19:d8:c5:cd:70:7d:a8:fe:e4:90:
                    37:06:91:b9:6b:93:42:fd:43:2e:56:c6:cf:8d:07:
                    4f:05:0f:21:1b:96:78:f4:ed:94:61:78:ec:0d:2d:
                    af:a5:6a:aa:dd:71:cb:86:4e:59:4b:4a:cc:46:c3:
                    33:cb:2a:ac:bf:af:7b:79:f1:ca:3d:5a:b5:04:1b:
                    c2:86:e3:e5:de:cb:54:7a:b0:13:d8:01:99:ca:a9:
                    e0:a5:db:76:a2:58:73:d6:2e:05:37:0b:1d:8a:34:
                    c7:7d:0d:51:22:c8:be:97:f8:08:48:28:cc:a5:10:
                    5b:59:67:76:ec:8d:c5:24:17:f1:25:e4:6d:4a:15:
                    7e:40:44:33:61:d8:a0:28:43:70:e6:06:57:b1:cb:
                    fd:22:f4:6f:46:ee:b2:37:4d:0f:9a:18:92:29:49:
                    eb:2a:19:41:4d:0e:61:e9:4e:cb:e5:fc:39:ed:51:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:51:C5:44:B1:C4:68:94:A9:5C:B2:E0:3C:40:44:F2:08:C6:2E:7C
            X509v3 Authority Key Identifier:
                keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a8:4d:88:a8:cd:ab:94:c4:c2:b0:65:25:04:7f:54:b9:28:
         b9:b2:3d:60:a8:52:cb:9f:09:bf:0b:43:cd:4a:16:39:19:8f:
         a6:6c:1e:99:7c:a9:14:35:d1:26:7d:21:73:8b:7b:5a:88:f9:
         96:ec:7b:3e:6c:f0:d6:7e:61:4d:17:36:db:39:e5:e2:4e:d4:
         c6:52:08:9a:62:b1:46:e9:32:fd:be:12:90:c6:6e:9f:a7:77:
         98:4a:1e:79:55:fb:af:7f:93:17:6c:98:10:9b:12:c0:ba:b7:
         f0:ab:87:96:ba:c4:a3:e0:a4:46:fc:cf:a6:b3:fa:85:b2:89:
         41:be:01:05:61:64:48:d2:f7:a4:93:a6:0b:f9:81:01:84:da:
         d4:f5:bd:d3:85:3d:96:38:41:ab:9b:e7:76:d0:33:11:42:9d:
         c7:f9:fe:0d:3f:1f:ba:98:34:b2:64:89:be:ba:f9:cc:e2:02:
         45:83:a4:93:3f:97:f2:62:68:1a:ee:93:ce:05:25:41:71:17:
         fd:6c:83:b9:84:64:27:9b:e4:30:c6:df:13:eb:cf:7f:41:23:
         b6:bb:74:45:b0:84:08:22:39:f7:bd:78:96:47:84:78:55:aa:
         90:40:23:f4:fc:df:be:7a:93:fc:83:d1:80:f3:b9:4d:af:ee:
         6c:ab:38:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:36:08 2026 by rpki-client