Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
File:                     hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft (raw, json)
Hash identifier:          M9+4ffuSJX9oRGiYJahNKxGlQOimCUo7BhDf03JgCkw=
Subject key identifier:   49:3E:B9:4E:15:C0:AE:AB:DA:5D:7B:59:22:1E:C2:75:15:05:1A:C1
Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53
Certificate issuer:       /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
Manifest number:          0252
Signing time:             Wed 29 Jul 2026 03:30:11 +0000
Manifest this update:     Wed 29 Jul 2026 03:30:11 +0000
Manifest next update:     Wed 05 Aug 2026 03:30:11 +0000
Files and hashes:         1: hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl (hash: tWxNOXpGDk91ALrDBxS0V+hIpeehpj5J/k5hvldc5WU=)
                          2: DC11ACCE182F11EE82A0FC48C4F9AE02.roa (hash: TVUqImfkH05qiQ19RCKAlmLm+qu0pav08yARc+QiM3g=)
                          3: 44DD2C9ABD2811EE9E6BD047C4F9AE02.roa (hash: su1llYedwPnLSUZ71VKszo5WnnMLP9v6r72WwKMqsNs=)
                          4: DCC31BA8182F11EE82A0FC48C4F9AE02.roa (hash: Nk6B9oGSm+C8lzJG0kzS3nVaiBodjvcAtEqWj+52CmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl
                          rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 03:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
        Validity
            Not Before: Jul 29 03:30:11 2026 GMT
            Not After : Aug  5 03:30:11 2026 GMT
        Subject: CN=6a6973c3-7866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:3e:a3:93:2f:a8:54:dc:28:08:ca:9b:c7:
                    4d:e2:74:2b:59:61:95:d1:32:9a:13:d2:b4:83:ed:
                    26:15:85:f2:ed:7f:58:77:19:8b:ff:c8:3d:91:6e:
                    c7:92:9c:78:ee:70:3d:1d:62:dd:80:56:16:f6:14:
                    ed:42:95:85:27:91:95:26:8a:60:20:06:20:94:9d:
                    8d:a7:e0:66:d9:d0:53:6e:76:e3:d5:31:c7:5a:85:
                    92:ee:4c:29:ad:77:28:73:32:22:92:bd:aa:12:b4:
                    42:23:b3:68:95:a6:50:15:47:ff:6f:51:6e:41:a7:
                    51:83:31:bb:ec:a0:44:57:bd:30:31:8f:ba:8c:de:
                    54:d2:e3:b9:2e:2a:4e:fc:c8:ca:7a:f5:59:39:cb:
                    83:f1:06:f0:9b:5c:9b:75:08:69:53:a1:af:5f:e2:
                    5b:c2:09:ca:44:8b:22:81:c3:3a:a5:49:2e:01:1f:
                    10:85:33:dd:06:2c:1b:38:a8:b6:2e:0f:14:a1:f6:
                    7a:03:ea:ba:96:13:87:7a:26:12:5a:e2:a5:1d:11:
                    58:30:8f:bc:d0:cb:25:df:9e:7a:b5:14:c1:87:3c:
                    15:b7:40:fe:72:2c:68:b4:c5:42:bc:55:78:60:93:
                    a4:6c:05:76:6a:4a:ce:09:7a:c1:40:35:56:1e:a0:
                    1f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3E:B9:4E:15:C0:AE:AB:DA:5D:7B:59:22:1E:C2:75:15:05:1A:C1
            X509v3 Authority Key Identifier:
                keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:c0:fd:af:d7:55:14:ea:9e:59:74:98:a6:2f:56:84:d1:
         c9:a3:a1:42:4f:9c:65:97:8b:68:f4:14:19:f9:4a:0d:47:d5:
         e7:ff:b1:1b:5a:3e:f0:b1:e7:0c:83:f2:98:9e:48:a5:72:4b:
         44:12:63:78:11:74:ea:af:c9:13:5d:e7:84:38:5b:86:24:a4:
         9a:21:4c:eb:aa:88:28:0f:99:7b:08:aa:b7:ec:92:fd:d0:5e:
         0a:33:db:bb:9d:33:8b:68:c7:48:33:02:35:95:1b:eb:68:27:
         81:b2:ff:af:92:0b:50:f7:a2:30:f1:21:0c:3d:0b:8e:67:97:
         32:c1:1c:8b:62:68:b2:87:c5:b3:be:ec:99:1a:f9:51:75:d1:
         66:7b:2c:f8:a4:aa:2a:1a:7a:25:6e:32:f6:dd:41:9b:0c:e2:
         8f:68:ec:08:01:90:d7:4e:d1:82:89:32:11:0f:25:75:89:78:
         fc:77:c2:e5:56:13:e2:5b:0f:3d:b9:cd:f8:fe:50:66:dc:8a:
         c0:15:34:c3:ff:0d:0e:5b:c8:4b:a0:38:1c:aa:d0:cf:5d:a9:
         21:70:d4:f9:eb:95:c7:67:9c:0f:b3:f7:ad:7b:3c:1a:d5:f3:
         29:e2:04:a4:c6:a9:24:0b:10:f3:c7:cc:df:5d:bc:83:31:e4:
         73:5c:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:26 2026 by rpki-client