Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
File:                     -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json)
Hash identifier:          IXaHdblWvAjHGX2tQH5v4uwVhmelO3698/u5JMUCWWY=
Subject key identifier:   AA:A3:9F:11:57:F1:6A:3C:02:D5:32:DA:5E:65:42:DF:3A:B0:FE:09
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Certificate issuer:       /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial:       0BD5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
Manifest number:          0BC4
Signing time:             Tue 28 Jul 2026 19:16:59 +0000
Manifest this update:     Tue 28 Jul 2026 19:16:59 +0000
Manifest next update:     Tue 04 Aug 2026 19:16:59 +0000
Files and hashes:         1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: BrwviAfSmXKwVi4iOZXQPBB3ZE2/ZtrX+g3dtfPPjS0=)
                          2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: eJeSjBWnfyztRwss0NRo6wVnGnHYGD5kAHWaTt/BWrE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
                          rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3029 (0xbd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
        Validity
            Not Before: Jul 28 19:16:59 2026 GMT
            Not After : Aug  4 19:16:59 2026 GMT
        Subject: CN=6a69002b-412f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e5:26:b9:7a:c9:d9:af:8a:34:8b:90:43:84:
                    90:fc:fc:63:f8:9c:0a:81:66:ae:0a:a5:26:c1:49:
                    4f:ad:1d:a6:1a:63:2e:7c:b5:66:81:f1:e7:7e:81:
                    61:2a:c7:93:7c:21:33:0c:d6:0f:7a:e3:75:e6:b3:
                    6b:87:8b:ca:1c:e3:1f:05:4c:eb:fa:e5:61:9d:89:
                    5a:b9:e3:69:6e:fa:bf:6d:76:da:fe:04:97:27:ed:
                    b7:77:89:25:66:32:c3:88:ea:38:58:52:99:14:87:
                    de:81:ba:f4:aa:b2:76:c8:fc:f0:99:fd:89:7b:00:
                    5f:96:5c:38:6a:82:06:c5:d6:b7:d3:dc:8d:d8:c2:
                    7a:7b:61:16:2b:71:d5:be:bc:10:7f:43:31:f5:fd:
                    26:68:94:3f:4e:47:8d:7b:18:ef:7d:ea:b8:0b:10:
                    7a:0e:9b:9b:1f:c8:c1:35:9e:cf:98:35:df:e8:45:
                    6e:80:4c:5f:2b:1f:a8:a1:7f:15:99:ef:66:12:7e:
                    08:b3:66:48:2c:03:f7:cd:42:69:16:f0:a5:c3:40:
                    da:2f:93:04:b3:5d:42:09:93:ad:fc:c9:bd:00:51:
                    ae:e9:c3:4e:16:c3:ce:d0:65:cc:57:b8:e3:c9:5f:
                    98:bf:7a:22:85:84:d3:9e:de:2d:d2:f5:4f:b4:26:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A3:9F:11:57:F1:6A:3C:02:D5:32:DA:5E:65:42:DF:3A:B0:FE:09
            X509v3 Authority Key Identifier:
                keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:1d:86:4f:71:27:60:f2:b7:43:c8:81:a4:c9:e4:38:0e:5f:
         97:21:2f:ca:8d:0a:33:5b:7a:d5:30:e8:91:fa:0c:78:b6:87:
         51:d8:f2:b5:5d:8f:3c:3d:50:d8:0d:93:e6:82:b8:c3:30:13:
         35:77:90:43:6b:f7:3d:0c:15:f3:73:9c:2d:a3:71:47:5a:83:
         e3:16:ce:a0:b5:05:6c:cc:91:25:9b:24:2d:e5:d4:78:ec:fc:
         e8:d2:53:41:df:ab:99:1f:85:e0:78:c7:dd:01:ff:2e:2b:da:
         ea:00:1b:a9:e7:da:88:59:ca:57:89:8a:19:bc:eb:44:e3:19:
         84:57:ba:58:4b:f1:d2:01:77:74:63:31:d2:96:50:d6:f0:21:
         db:a7:af:b3:f1:26:04:85:09:fc:e3:4b:b1:bb:a2:0a:87:46:
         11:cd:0b:88:6b:26:0e:ed:18:99:41:af:d1:37:d3:1f:f5:84:
         26:a6:28:46:78:9d:9b:b0:a2:11:d1:16:47:38:d0:73:75:4c:
         b9:37:d7:65:e3:31:df:14:d5:38:7d:57:7c:4d:33:72:6b:97:
         cb:18:10:59:75:02:ce:64:98:19:48:c5:fc:d1:50:65:14:f2:
         1a:21:ca:d5:c5:1a:89:32:08:8e:55:42:3f:79:0a:d5:51:18:
         78:c3:ec:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:11:45 2026 by rpki-client