Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
File:                     hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json)
Hash identifier:          nLw/KkFpr91YXyz2YAhM8HFnz3ByHEScZlN2do/wLGk=
Subject key identifier:   CA:E3:43:1D:CC:C9:33:BA:F3:6A:7D:50:D9:E0:60:99:A5:FD:4A:12
Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Certificate issuer:       /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
Manifest number:          A6
Signing time:             Mon 27 Jul 2026 09:23:32 +0000
Manifest this update:     Mon 27 Jul 2026 09:23:32 +0000
Manifest next update:     Mon 03 Aug 2026 09:23:32 +0000
Files and hashes:         1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: l3cSrX7Eb1M769jYnODDmagNlKcHbq62pHtppb5VOsw=)
                          2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: pV6RrpL0HFiSkSQ3Egen1lL8OO4gLgRAAJv9sHZbodQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
                          rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:23:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
        Validity
            Not Before: Jul 27 09:23:32 2026 GMT
            Not After : Aug  3 09:23:32 2026 GMT
        Subject: CN=6a672394-5160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:c4:b5:33:7b:63:26:01:6b:ee:0a:e4:21:
                    98:93:05:7c:7c:06:c3:a0:7b:c1:7e:f4:4d:f6:2b:
                    dd:ce:af:ed:a9:cd:dc:f7:68:0e:a8:9d:d2:e5:8b:
                    7d:9d:27:93:11:19:82:f2:fb:c8:77:1e:5d:27:0f:
                    c6:d7:d0:e6:c8:53:74:c6:e2:0b:6a:b2:e4:7f:fb:
                    b9:45:47:d9:55:f7:69:01:56:56:93:6f:9a:10:42:
                    1b:16:13:e7:51:4e:5e:c1:33:05:bd:e7:0d:e8:aa:
                    6d:a1:6c:c9:ea:b3:33:22:36:7e:be:23:97:c5:ea:
                    7d:c2:dc:ab:2d:a3:ef:7e:ba:c7:bb:42:2b:4c:33:
                    6b:e3:b6:2b:f4:a1:ca:e8:e6:a6:00:0b:ef:65:16:
                    10:71:d5:90:cb:cd:57:3c:91:52:57:66:e3:83:1f:
                    ee:ee:b9:47:f3:b6:fc:83:af:48:24:44:4a:6e:85:
                    33:f6:88:bd:e0:b5:c0:3b:f8:e3:24:de:e0:ae:a0:
                    88:be:0d:e2:41:b5:1a:89:59:58:32:8e:d1:a8:6d:
                    22:f9:93:22:a8:df:ab:da:8a:3a:0b:0a:4e:b4:ee:
                    47:33:7a:63:b0:a5:e9:b2:27:0d:71:50:95:5e:8a:
                    76:40:5b:58:6b:86:aa:65:3c:35:b4:ec:60:9d:e4:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E3:43:1D:CC:C9:33:BA:F3:6A:7D:50:D9:E0:60:99:A5:FD:4A:12
            X509v3 Authority Key Identifier:
                keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:42:23:39:5e:c1:4f:4c:ca:0e:5b:b0:2a:27:ae:7b:7c:5a:
         97:d7:ef:0a:be:c2:40:83:9a:47:24:c0:1d:0c:f8:3e:62:63:
         56:1b:aa:c3:63:56:12:bd:15:16:3d:3f:aa:76:58:0c:ad:96:
         6e:b4:bf:c7:1a:68:2b:7a:d1:5e:2f:9c:67:d2:0d:2c:fa:46:
         80:26:95:89:ba:c5:9c:d3:37:bc:c8:13:4f:ac:df:28:d4:fa:
         a3:67:24:7b:66:cd:98:e5:b0:69:b0:76:e9:c8:3d:f8:1f:1f:
         9a:d4:e5:c0:5d:7b:1c:2a:0f:09:0b:c5:18:1b:11:63:bb:bf:
         43:ef:dd:eb:c7:15:3d:22:9a:95:da:63:8b:49:e9:17:3d:cc:
         14:99:c2:e7:5e:55:fa:b7:05:78:bb:6a:fc:c8:6c:a9:e9:91:
         04:f9:4f:ce:18:db:85:52:bb:d5:88:b9:7c:0d:2e:61:10:d0:
         c1:94:60:54:00:f1:dd:41:d1:e7:d9:88:1e:4e:fe:52:4f:d9:
         ca:c6:bf:03:00:6b:95:d4:7a:77:a6:8e:41:da:27:10:44:12:
         0c:56:f3:06:d8:08:f3:2f:f9:af:10:7e:12:a2:32:f0:62:a9:
         89:e3:94:49:9a:46:4b:e5:37:be:52:83:36:0c:5d:35:9b:a6:
         d4:71:2e:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNEQUMxMTAvBgNVBAUTKDg0N0YyRTEyRUFCNTA2QTUwMTA5OTQ0MjA3QjFENzAy
NjY3N0YwOUIwHhcNMjYwNzI3MDkyMzMyWhcNMjYwODAzMDkyMzMyWjAYMRYwFAYD
VQQDEw02YTY3MjM5NC01MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApofEtTN7YyYBa+4K5CGYkwV8fAbDoHvBfvRN9ivdzq/tqc3c92gOqJ3S5Yt9
nSeTERmC8vvIdx5dJw/G19DmyFN0xuILarLkf/u5RUfZVfdpAVZWk2+aEEIbFhPn
UU5ewTMFvecN6KptoWzJ6rMzIjZ+viOXxep9wtyrLaPvfrrHu0IrTDNr47Yr9KHK
6OamAAvvZRYQcdWQy81XPJFSV2bjgx/u7rlH87b8g69IJERKboUz9oi94LXAO/jj
JN7grqCIvg3iQbUaiVlYMo7RqG0i+ZMiqN+r2oo6CwpOtO5HM3pjsKXpsicNcVCV
Xop2QFtYa4aqZTw1tOxgneRTNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMrjQx3M
yTO682p9UNngYJml/UoSMB8GA1UdIwQYMBaAFIR/LhLqtQalAQmUQgex1wJmd/Cb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RBQy83MjYwRkMwQzhG
MzkxMUYwODYzMkEwMzlDNEY5QUUwMi9oSDh1RXVxMUJxVUJDWlJDQjdIWEFtWjM4
SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL2hIOHVFdXExQnFVQkNaUkNCN0hYQW1aMzhKcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0RBQy83MjYwRkMwQzhGMzkxMUYwODYzMkEwMzlDNEY5QUUwMi9oSDh1RXVxMUJx
VUJDWlJDQjdIWEFtWjM4SnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArkIjOV7BT0zKDluwKieue3xal9fvCr7CQIOaRyTAHQz4PmJjVhuqw2NWEr0V
Fj0/qnZYDK2WbrS/xxpoK3rRXi+cZ9INLPpGgCaVibrFnNM3vMgTT6zfKNT6o2ck
e2bNmOWwabB26cg9+B8fmtTlwF17HCoPCQvFGBsRY7u/Q+/d68cVPSKaldpji0np
Fz3MFJnC515V+rcFeLtq/MhsqemRBPlPzhjbhVK71Yi5fA0uYRDQwZRgVADx3UHR
59mIHk7+Uk/Zysa/AwBrldR6d6aOQdonEEQSDFbzBtgI8y/5rxB+EqIy8GKpieOU
SZpGS+U3vlKDNgxdNZum1HEu/Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:15 2026 by rpki-client