Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
File:                     HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json)
Hash identifier:          X1ZFNILX6MjthJrNPrClaJgoJ0fsZFMCw9rkX3iCDuc=
Subject key identifier:   65:70:55:C4:B3:3A:64:DF:14:C4:70:FB:F0:69:9D:C0:2C:76:5B:F9
Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12
Certificate issuer:       /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412
Certificate serial:       0816
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
Manifest number:          080C
Signing time:             Tue 12 May 2026 21:14:43 +0000
Manifest this update:     Tue 12 May 2026 21:14:42 +0000
Manifest next update:     Tue 19 May 2026 21:14:42 +0000
Files and hashes:         1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: zDasYhM+koKkhg6XKj6pzsd22goJZ1/gO2rRJdNAGcw=)
                          2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: 4sy5bo4x5IejnxnpTcgGrJIpJDDeVrJ7W1QqzKsRoZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl
                          rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070 (0x816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412
        Validity
            Not Before: May 12 21:14:42 2026 GMT
            Not After : May 19 21:14:42 2026 GMT
        Subject: CN=6a039842-1956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:8c:fb:6e:fc:3a:f8:e6:02:27:0a:12:42:
                    be:1f:be:9b:18:55:7a:9c:94:87:d7:d6:d4:16:51:
                    7e:55:f7:00:9d:45:e7:19:cc:18:4b:8e:4a:aa:ec:
                    94:e2:85:31:74:42:d7:85:e7:3b:03:f2:08:00:1a:
                    d6:c9:e5:c8:a8:42:12:8a:d1:dc:2d:a4:62:47:8a:
                    28:bb:d8:ef:24:77:6e:54:d7:e8:4c:4f:77:27:02:
                    90:90:33:93:fb:a4:78:b2:61:13:a9:12:b4:8a:dc:
                    b9:7b:3d:c5:fa:45:d4:bc:cf:6a:0c:3d:6a:00:2f:
                    22:96:40:1c:12:73:1a:81:5c:7e:36:c8:3c:3c:28:
                    ea:60:a5:73:f1:2b:80:dd:dd:66:dc:fa:4b:2d:d7:
                    e0:17:bb:f0:8d:f8:dd:23:5a:27:67:be:60:6d:c8:
                    c2:eb:67:70:91:28:f8:ad:6d:3b:f0:02:9d:da:9b:
                    ea:57:e0:5e:38:cb:f1:b3:d2:25:17:61:20:73:7a:
                    26:07:2d:a5:af:c8:df:35:e1:12:ef:c2:8b:d2:98:
                    21:63:a2:68:23:97:65:44:95:e5:af:f3:b8:d2:a9:
                    52:d5:9c:cf:0c:47:14:2e:2c:10:8f:6b:bb:f0:75:
                    27:fe:e7:25:89:6b:57:47:68:dc:61:b0:5f:61:06:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:70:55:C4:B3:3A:64:DF:14:C4:70:FB:F0:69:9D:C0:2C:76:5B:F9
            X509v3 Authority Key Identifier:
                keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:bc:a4:78:52:9f:31:d8:63:67:77:e7:59:0f:e1:8b:1a:05:
         79:e9:5d:01:25:f0:e3:33:16:ae:1d:87:86:a1:0f:6e:61:fb:
         fb:6b:4a:e3:8f:4a:37:b6:37:e9:b8:a4:71:37:1d:23:d3:7d:
         85:30:da:5a:4a:51:bb:1b:a2:91:b1:61:8f:ab:2e:cc:b9:43:
         52:53:17:36:51:13:ae:c6:e1:eb:57:41:5e:13:af:c6:0a:ae:
         17:11:73:d0:b1:0a:ae:53:2b:e4:52:c6:32:01:27:53:ca:23:
         af:05:03:a1:1d:9c:fb:e6:74:1a:cc:56:50:49:7b:fe:d5:80:
         99:9c:27:46:ae:8d:9f:ac:8e:a2:6e:72:bf:83:d9:aa:00:9d:
         71:e8:3b:4d:c9:08:b0:b9:db:73:f5:3d:df:fe:d5:cf:14:74:
         12:7c:95:6e:2c:76:fd:67:2e:95:26:a4:51:dc:55:e8:b8:4c:
         b8:9a:a7:1a:91:35:98:e9:20:0b:3e:2e:01:1a:c4:40:09:20:
         8c:7a:51:00:2a:32:a1:7e:6b:c4:87:5b:96:f0:56:ed:07:5f:
         a6:6e:59:3b:14:a3:c5:df:51:d5:dd:2d:eb:9d:32:4c:fe:13:
         88:45:f3:dc:4f:8a:8f:89:1a:9d:0e:24:fe:23:84:ff:c8:9a:
         65:6c:22:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:17 2026 by rpki-client