Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
File:                     r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json)
Hash identifier:          ffzyT7ivu1j+kVX9j4hfC9NMB93dZ7ns9h1CBaSNUiI=
Subject key identifier:   C0:9E:CD:C0:2E:F3:7D:03:F6:38:3E:30:B8:DC:0B:5F:7B:A3:07:CE
Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F
Certificate issuer:       /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
Manifest number:          025C
Signing time:             Sat 13 Jun 2026 02:20:28 +0000
Manifest this update:     Sat 13 Jun 2026 02:20:27 +0000
Manifest next update:     Sat 20 Jun 2026 02:20:27 +0000
Files and hashes:         1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: ImXsI620jEXgUsBPqVOdN3s0T+PGt1OcFZXTHQu335s=)
                          2: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: uPSJvajAQINjQlYTF7zaoX95KpMnomn9ZGEL6XXGiq0=)
                          3: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: yD5FYCPErZgPY0yX40dpogtlEWrDeZjOT8LtPpUMuck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl
                          rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:20:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F
        Validity
            Not Before: Jun 13 02:20:27 2026 GMT
            Not After : Jun 20 02:20:27 2026 GMT
        Subject: CN=6a2cbe6c-d142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:e9:7e:f0:5a:a3:d8:65:83:b3:26:a1:d7:
                    b8:4a:3f:2c:87:35:2a:93:67:7e:1e:57:c9:19:a0:
                    1b:b6:88:ae:f1:63:66:50:8b:63:97:00:4c:54:6c:
                    8d:45:72:a1:08:5d:1e:6b:7b:16:93:eb:44:f8:9f:
                    da:0a:76:d0:2e:cb:ea:47:c9:8c:df:98:69:28:3b:
                    0b:a6:cc:3a:2d:00:d8:87:8d:bb:1c:f9:1e:1f:0d:
                    c6:0a:72:be:cf:e8:2e:ea:ff:cd:61:97:f2:80:c0:
                    5f:95:50:cd:c0:d3:31:2b:48:9e:56:60:0c:7c:44:
                    9a:ad:a0:54:73:d9:54:80:da:2e:77:09:68:cf:f2:
                    bd:60:5e:4b:aa:46:2f:25:07:49:ca:ac:80:75:56:
                    88:b1:c0:51:e2:97:11:88:a3:63:b5:24:d6:52:f4:
                    f1:b3:9a:1b:eb:0f:6f:0a:d6:17:df:4d:c4:ad:8e:
                    70:b9:d8:f9:f7:88:49:da:66:35:07:a8:9a:6d:ee:
                    a5:31:8e:c6:98:9a:7b:70:a5:2c:d6:c9:13:08:e2:
                    f8:c1:71:74:ab:c0:49:31:64:7c:7a:49:e7:4c:c2:
                    57:8a:3d:d5:7e:f7:53:55:9f:8a:eb:c1:ea:83:2a:
                    da:ff:a6:da:71:41:12:5e:47:2f:db:7e:c4:45:b8:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9E:CD:C0:2E:F3:7D:03:F6:38:3E:30:B8:DC:0B:5F:7B:A3:07:CE
            X509v3 Authority Key Identifier:
                keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a7:a9:4c:ae:e4:b6:ba:dd:db:93:4b:ee:3e:d0:bc:4e:41:
         bb:7f:63:b9:a3:40:52:6f:d0:d8:71:ae:0a:cb:17:41:21:a5:
         17:54:74:5a:f4:88:69:84:17:62:0d:4d:6f:61:f3:c3:27:0c:
         e6:d1:92:5c:6e:5f:9a:ed:65:45:3a:bd:7b:75:a0:18:8d:ec:
         db:52:ab:d3:08:02:1a:5b:fa:78:f1:0f:9f:59:c8:94:19:47:
         bd:b2:d6:8d:67:10:5f:01:c3:c1:17:ff:01:25:f3:b9:d0:80:
         7e:da:ff:ab:34:26:82:60:8e:6b:3f:d9:25:31:7b:8c:d9:27:
         88:be:40:25:da:29:89:09:19:19:0f:16:19:27:6b:1b:23:45:
         96:88:25:b6:16:43:c9:3a:83:4a:1e:86:97:ac:c7:39:53:b5:
         b3:1a:bb:d5:d8:c3:26:3e:06:5d:b6:51:36:a1:b2:9a:fc:ab:
         fd:68:db:25:9d:83:ed:f8:db:b0:cb:cd:db:0a:2a:90:ee:3b:
         e8:e4:8a:54:73:71:bd:a4:98:0a:83:8a:6a:f5:c3:0f:31:de:
         58:1a:70:57:21:7e:ef:f8:8a:54:59:56:ca:67:a7:b4:7a:54:
         68:d5:a3:45:6c:fc:26:a6:16:83:28:85:fc:5f:be:fd:dd:95:
         db:f5:f1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:54 2026 by rpki-client