Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft
File:                     Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft (raw, json)
Hash identifier:          eni8jgSBcA8obbBlFS0RPRbCdBPulJ5iF8sgTrGwcRs=
Subject key identifier:   A5:3C:C2:07:D8:0C:8F:F9:52:33:74:A9:4D:E2:10:C1:68:C7:2C:A4
Authority key identifier: 1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7
Certificate issuer:       /CN=A91F5BCC/serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft
Manifest number:          0122
Signing time:             Thu 23 Jul 2026 07:27:03 +0000
Manifest this update:     Thu 23 Jul 2026 07:27:02 +0000
Manifest next update:     Thu 30 Jul 2026 07:27:02 +0000
Files and hashes:         1: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl (hash: iw/QRcOakxb8X5Jr1rkcmG47LsNdTpEqQFfZuiNyaOc=)
                          2: 7A092C88E9E211EFAD188675C4F9AE02.roa (hash: VYzj3AeenQpibuJcJi+RGSfALT2kN6QBqvlUfKfEKWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl
                          rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5BCC, serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7
        Validity
            Not Before: Jul 23 07:27:02 2026 GMT
            Not After : Jul 30 07:27:02 2026 GMT
        Subject: CN=6a61c247-00aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:82:ab:c4:e2:47:ff:5a:b6:cc:89:d7:f1:
                    4f:98:fd:12:38:b9:76:dd:42:41:d2:60:d1:72:81:
                    f7:1c:bb:f7:5c:52:02:8b:d5:ce:c3:ae:d2:2b:2f:
                    3d:d6:8b:76:16:0b:bb:c2:28:43:e5:9f:59:a4:62:
                    db:5a:59:ff:6e:2b:f6:0f:db:44:9c:24:5d:bc:c0:
                    14:55:a4:d2:12:5e:c9:c2:97:09:6b:dd:74:04:4d:
                    32:77:c0:73:b8:34:ce:78:83:59:45:a3:0a:da:1d:
                    b6:00:ad:51:0a:52:bf:18:56:d7:f2:3c:53:80:1f:
                    b6:81:b2:fd:0a:d4:e6:29:6e:e8:3c:29:1d:0a:b5:
                    2a:f8:54:e3:e7:92:9f:55:58:69:92:8a:8a:38:de:
                    cc:d7:6a:0b:d7:16:ab:07:d0:27:5e:01:90:90:5b:
                    22:b3:f8:5d:bb:9a:3c:c5:19:57:b6:85:e0:cb:a8:
                    76:e7:5d:31:36:5a:b6:cf:c6:75:3e:d4:db:37:81:
                    19:50:e6:bf:f0:ec:9f:0f:90:2a:5b:0e:c1:4b:3d:
                    d0:7f:3a:84:0c:5b:ad:70:c7:a1:84:13:38:ae:d2:
                    80:12:e8:3c:5c:eb:63:3c:35:8c:69:58:01:4b:0b:
                    a4:f2:0a:5f:d8:6f:34:63:94:80:19:00:39:b6:8a:
                    07:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3C:C2:07:D8:0C:8F:F9:52:33:74:A9:4D:E2:10:C1:68:C7:2C:A4
            X509v3 Authority Key Identifier:
                keyid:1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:fa:f5:15:90:fd:93:17:ab:81:6b:19:f8:60:8a:10:0b:
         3d:9b:3a:03:2f:7f:e0:a1:d1:bb:b5:b9:79:5b:bb:8e:3b:4d:
         56:39:b7:d4:5e:9c:fb:6e:e7:fb:de:fa:ff:c6:e1:6d:a9:92:
         a4:14:10:77:b6:55:d4:53:b7:64:a8:07:55:2f:fd:63:9e:f4:
         51:14:4c:5d:2c:10:73:c1:7c:6e:d7:cf:af:c8:6c:11:05:7c:
         f6:3a:a1:78:7d:a4:6c:51:ac:aa:86:40:7b:7d:50:b9:fc:98:
         cc:85:68:d6:e3:44:f6:c3:cb:b6:c5:2e:91:ad:db:c1:16:95:
         48:39:ff:f9:05:c5:17:f1:4e:5d:5a:2a:18:61:23:0a:1b:ea:
         af:75:dd:66:f4:86:3c:42:0e:8f:9c:6a:94:9a:18:1f:ef:89:
         93:03:e1:d2:d0:0c:c2:71:5a:b2:05:ba:19:56:f1:93:c2:43:
         c6:f8:fa:2a:81:4e:0a:89:10:33:27:79:e1:28:62:0d:67:fd:
         a9:7e:a3:ac:6f:f2:b4:ad:4e:c9:d5:1c:17:eb:db:5d:48:10:
         46:af:3d:cc:ff:0a:9e:69:89:3f:b0:9f:67:d7:b4:b3:bb:38:
         ff:f3:e9:cc:7e:2d:3e:84:99:75:0c:9e:b1:23:cc:47:19:49:
         81:8d:d9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:11:48 2026 by rpki-client