Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
File:                     hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft (raw, json)
Hash identifier:          1HlkfyesprgmJ6ebYeAGyDhLa8yZA43JzmHa/tsJGYk=
Subject key identifier:   32:86:72:10:A5:9F:F2:87:6D:5B:55:8B:F8:CE:C0:0E:09:23:FC:16
Authority key identifier: 86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65
Certificate issuer:       /CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565
Certificate serial:       105E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
Manifest number:          1046
Signing time:             Fri 12 Jun 2026 17:23:13 +0000
Manifest this update:     Fri 12 Jun 2026 17:23:12 +0000
Manifest next update:     Fri 19 Jun 2026 17:23:12 +0000
Files and hashes:         1: hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl (hash: qg74jkVg0yD8O9o/jKzuiQvR2+Ea5cUZ9MQckbsP2wU=)
                          2: 28DA447C289B11EAA1EA9B53C4F9AE02.roa (hash: +QsBublCSi/Ra5CJk1uOnK17kaA8DRCpH5g6/7+9Qrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl
                          rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4190 (0x105e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A8BE, serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565
        Validity
            Not Before: Jun 12 17:23:12 2026 GMT
            Not After : Jun 19 17:23:12 2026 GMT
        Subject: CN=6a2c4080-84f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7e:49:61:3d:ae:e2:67:8e:8c:70:0e:bf:6b:
                    5f:70:af:79:73:b9:0a:72:5a:65:f6:05:ab:fa:7f:
                    6a:d8:51:a3:c7:31:60:d9:b1:17:f8:6e:f4:53:10:
                    e4:54:0d:cb:97:eb:2b:bd:80:f8:35:a6:07:9e:d5:
                    aa:8c:d1:82:8d:f3:d7:42:07:6e:ee:82:1f:01:93:
                    cc:f3:c6:c6:f3:97:9d:9d:fc:b5:b8:00:fa:bb:9e:
                    be:7f:24:c2:c6:a3:16:60:f9:39:15:83:9d:c2:8e:
                    d9:b5:ea:17:1b:7b:fa:02:be:f2:2c:5f:a2:2a:77:
                    bd:ce:e0:7a:f3:a2:1f:9a:ca:60:8b:67:69:fa:18:
                    92:c4:7a:1b:1f:6e:6f:1e:56:4f:3b:f6:6c:bd:c8:
                    01:8c:6b:a6:55:02:12:d1:76:b3:36:17:d5:74:02:
                    c0:f6:70:b7:0f:79:7d:08:14:6a:2a:60:7e:54:33:
                    c4:ba:a7:ab:53:3f:b5:f8:e3:e5:c9:eb:31:70:4a:
                    02:6a:6f:7c:08:92:b5:f4:4d:43:87:58:b2:93:4b:
                    55:78:ad:12:3d:66:fe:d4:17:d6:1f:b2:80:6e:c0:
                    c1:a4:b9:f0:e8:03:bc:98:bc:ac:89:a5:c0:db:51:
                    ed:9f:f3:7c:94:0d:b3:c2:4b:67:ea:73:ee:60:04:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:86:72:10:A5:9F:F2:87:6D:5B:55:8B:F8:CE:C0:0E:09:23:FC:16
            X509v3 Authority Key Identifier:
                keyid:86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:61:72:2f:7a:ac:0e:f7:62:20:44:2b:2f:0c:95:96:a0:4f:
         c9:ed:74:8c:1c:6f:09:ca:c2:40:6b:bd:e2:b4:40:22:8a:d2:
         96:0a:ac:1d:62:ce:46:79:ce:f0:95:e4:0b:f1:eb:cd:a3:8d:
         19:31:a3:10:87:3b:4c:6a:bf:8e:3a:32:47:98:6d:8b:54:07:
         17:34:f1:3d:3c:98:03:cc:d8:f3:4f:59:94:ec:e4:40:2f:bc:
         4b:bd:cb:72:b1:f7:06:e7:01:fd:be:57:b4:d3:49:24:86:d3:
         7d:72:c2:55:11:32:45:37:da:0d:64:1a:3b:17:76:8e:a0:13:
         fc:de:a2:2a:71:c8:8d:fa:66:53:0c:7c:27:3f:8f:0b:6c:c3:
         6f:25:da:a2:63:26:30:44:2b:2c:0d:3f:b4:30:11:29:5c:4b:
         5f:74:fe:d8:ce:be:d6:f6:60:c3:14:11:c6:5a:c5:a8:0a:89:
         28:07:85:77:3d:91:ac:20:33:e1:82:b3:3d:d4:10:0c:e8:6f:
         c6:ab:cb:eb:ab:1f:17:fa:64:79:d0:6a:71:4b:fb:4d:32:2d:
         54:b7:38:98:79:ab:bc:f6:ae:01:4f:57:d7:3c:a7:17:2d:05:
         21:43:68:76:4a:03:2c:1b:e8:a5:f5:e6:10:51:eb:2c:93:24:
         3f:4a:10:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE4QkUxMTAvBgNVBAUTKDg2RjJFQkI0QzFFMkU5MEFEOTAwN0M0MjAzNjc2NjI1
OEQ1NDg1NjUwHhcNMjYwNjEyMTcyMzEyWhcNMjYwNjE5MTcyMzEyWjAYMRYwFAYD
VQQDEw02YTJjNDA4MC04NGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7X5JYT2u4meOjHAOv2tfcK95c7kKclpl9gWr+n9q2FGjxzFg2bEX+G70UxDk
VA3Ll+srvYD4NaYHntWqjNGCjfPXQgdu7oIfAZPM88bG85ednfy1uAD6u56+fyTC
xqMWYPk5FYOdwo7ZteoXG3v6Ar7yLF+iKne9zuB686Ifmspgi2dp+hiSxHobH25v
HlZPO/ZsvcgBjGumVQIS0XazNhfVdALA9nC3D3l9CBRqKmB+VDPEuqerUz+1+OPl
yesxcEoCam98CJK19E1Dh1iyk0tVeK0SPWb+1BfWH7KAbsDBpLnw6AO8mLysiaXA
21Htn/N8lA2zwktn6nPuYAQ7EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKGchCl
n/KHbVtVi/jOwA4JI/wWMB8GA1UdIwQYMBaAFIby67TB4ukK2QB8QgNnZiWNVIVl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QThCRS85MDE5RDEyMDY0
MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZRclpBSHhDQTJkbUpZMVVo
V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h2THJ0TUhpNlFyWkFIeENBMmRtSlkxVWhXVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QThCRS85MDE5RDEyMDY0MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZR
clpBSHhDQTJkbUpZMVVoV1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPGFyL3qsDvdiIEQrLwyVlqBPye10jBxvCcrCQGu94rRAIorSlgqsHWLORnnO
8JXkC/HrzaONGTGjEIc7TGq/jjoyR5hti1QHFzTxPTyYA8zY809ZlOzkQC+8S73L
crH3BucB/b5XtNNJJIbTfXLCVREyRTfaDWQaOxd2jqAT/N6iKnHIjfpmUwx8Jz+P
C2zDbyXaomMmMEQrLA0/tDARKVxLX3T+2M6+1vZgwxQRxlrFqAqJKAeFdz2RrCAz
4YKzPdQQDOhvxqvL66sfF/pkedBqcUv7TTItVLc4mHmrvPauAU9X1zynFy0FIUNo
dkoDLBvopfXmEFHrLJMkP0oQVw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:50 2026 by rpki-client