Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
File:                     hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft (raw, json)
Hash identifier:          p7EiBzrA1KRwYsSfhLrvwgs7aRH8hpoBvk+JBeHwvw0=
Subject key identifier:   31:DD:C1:D2:50:B1:C3:ED:F8:4E:43:1C:61:6F:63:4F:74:CB:85:90
Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF
Certificate issuer:       /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
Certificate serial:       021F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
Manifest number:          0219
Signing time:             Mon 27 Jul 2026 04:27:50 +0000
Manifest this update:     Mon 27 Jul 2026 04:27:50 +0000
Manifest next update:     Mon 03 Aug 2026 04:27:50 +0000
Files and hashes:         1: hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl (hash: Ih+Dkn/aH6RIg8NmQsigo5pwGbEQOpwvPOl9YTPYpdo=)
                          2: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (hash: pkyGN44AS4SLdJe1nEC0cgptqJqFo9Jz+8yVjeVwyog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl
                          rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C9E8, serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
        Validity
            Not Before: Jul 27 04:27:50 2026 GMT
            Not After : Aug  3 04:27:50 2026 GMT
        Subject: CN=6a66de46-8bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:48:62:7b:5a:6c:8e:36:da:00:fc:6e:c7:
                    69:dd:0a:cc:75:c0:d8:e7:18:ca:3d:40:cd:90:d0:
                    7b:90:f3:ef:3f:fd:68:b0:64:96:74:ba:c6:6c:f1:
                    ee:09:ad:08:33:a5:c0:cc:81:c3:76:e1:4e:c9:e0:
                    5f:68:08:cb:48:30:bc:ee:be:bb:a9:61:7f:f7:96:
                    a4:a4:ee:89:3d:03:dc:70:05:e8:7d:84:46:63:51:
                    3b:78:5b:55:b9:44:66:a6:8b:86:b3:2c:5f:b6:ac:
                    25:e8:5d:7d:4f:43:fd:6a:7b:1e:08:b1:2b:8d:c2:
                    70:db:ab:ba:b2:04:3b:d1:2a:f2:59:8a:79:b1:b2:
                    51:2a:20:d5:16:88:31:7c:e4:59:5a:16:0a:d9:bf:
                    52:1d:fc:06:5e:e1:ea:83:5e:ff:46:9b:b9:08:de:
                    76:39:67:93:9d:d8:14:5c:fe:e6:eb:e7:a9:37:46:
                    96:63:91:a7:1c:44:49:ca:a4:0a:f2:66:74:9f:21:
                    a2:01:24:c6:b0:e9:ed:61:97:7d:bf:50:17:67:52:
                    7e:30:8f:4a:a7:fb:98:55:e5:ce:73:bb:c7:51:54:
                    4b:c1:97:ac:3d:7a:44:bd:3f:df:34:53:62:be:bb:
                    bf:d4:97:f1:a9:81:ba:45:b0:d9:cc:da:6a:86:78:
                    be:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DD:C1:D2:50:B1:C3:ED:F8:4E:43:1C:61:6F:63:4F:74:CB:85:90
            X509v3 Authority Key Identifier:
                keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:3e:f5:ee:d0:59:68:b2:ef:ee:35:71:71:3c:1e:8e:fe:8b:
         c8:b3:26:5a:98:b0:ea:f5:ef:89:f6:b2:07:cd:90:23:a3:b1:
         8e:96:51:f0:a8:1c:ed:32:99:34:b0:d2:f8:6b:cb:d3:7e:47:
         4a:c6:37:d9:bf:f7:da:f3:22:15:f0:91:e0:11:39:27:29:56:
         7d:22:77:dc:7c:be:73:d3:61:da:b1:ae:7c:b3:33:3d:55:0a:
         ba:28:f6:ad:ee:7d:8c:57:c2:bb:03:7c:74:18:52:4a:5f:21:
         f5:67:df:8d:85:78:57:5a:f5:30:7d:b5:d4:17:95:90:37:ab:
         6f:a3:96:12:a3:08:0f:21:4e:85:de:fd:d2:7b:51:df:69:68:
         d1:30:35:a3:98:ff:7b:41:ec:52:04:88:a0:89:89:7d:9e:69:
         51:11:98:27:db:54:8b:44:d5:4f:bc:04:b3:17:f7:43:86:4b:
         90:ae:9d:0a:41:71:c3:7c:bb:eb:51:29:8b:f3:89:a3:86:8d:
         ad:0e:2e:f9:15:6c:43:3e:62:0d:c4:33:73:b4:85:39:5e:75:
         0d:c5:08:69:a3:42:1d:dd:e2:eb:e7:65:a5:9c:90:f6:62:38:
         f8:04:8d:2e:81:22:0a:be:63:1e:63:a4:2b:22:8e:fa:83:19:
         64:ff:75:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:05:08 2026 by rpki-client