Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
File:                     HNyP8SmsVhBgxHINdUk_12hGxhU.mft (raw, json)
Hash identifier:          U2KBxXwxMVVhqt8Jqu9hQko42sQx8sEYKXUc9IQnVPY=
Subject key identifier:   7B:F1:EB:29:77:5C:0B:14:BF:15:F3:32:1D:3C:7B:6E:8F:39:D5:91
Authority key identifier: 1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15
Certificate issuer:       /CN=A919FE07/serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
Certificate serial:       0C4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
Manifest number:          0D7E
Signing time:             Tue 28 Jul 2026 18:56:55 +0000
Manifest this update:     Tue 28 Jul 2026 18:56:55 +0000
Manifest next update:     Tue 04 Aug 2026 18:56:55 +0000
Files and hashes:         1: HNyP8SmsVhBgxHINdUk_12hGxhU.crl (hash: Feb0OfkQue2jUIsjPBFqcvqLcfjFktC9AWkkOJGSHHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3151 (0xc4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07, serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
        Validity
            Not Before: Jul 28 18:56:55 2026 GMT
            Not After : Aug  4 18:56:55 2026 GMT
        Subject: CN=6a68fb77-8bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:a5:6c:6f:5a:8e:e8:d2:55:8d:79:52:3a:
                    93:cc:1b:b9:86:a9:69:d9:db:97:a5:24:d5:3b:86:
                    e0:41:d2:70:60:12:3a:6c:4a:77:57:ab:d6:b9:d3:
                    f6:43:b8:6f:8b:5e:75:dd:38:79:b0:d6:5d:27:68:
                    b2:32:c0:a4:2d:25:2f:7d:f8:29:f6:89:41:b8:00:
                    eb:d5:1f:2b:f3:7b:0e:61:63:fe:a1:d8:ae:55:46:
                    bb:24:99:68:d6:b9:22:ae:68:06:31:0e:13:ba:b4:
                    a2:88:3f:b7:87:58:04:8b:3e:69:eb:e6:f6:7d:5a:
                    a8:73:45:00:3c:c2:35:f5:45:46:f4:e3:30:6c:d6:
                    d3:f5:1f:3b:49:4c:34:17:f9:a1:03:1d:b0:f6:b1:
                    fe:d3:00:a8:4f:87:0b:3a:52:5e:82:b1:23:c4:54:
                    83:6b:a8:ce:bf:bd:36:7e:e0:0f:78:06:87:02:74:
                    16:49:3e:7b:8a:5f:40:d2:d6:3d:99:0b:78:6b:79:
                    58:97:3c:b3:b1:6a:24:1c:8a:27:1e:3f:ea:a9:e5:
                    6f:a5:c6:1f:8d:09:f0:17:13:68:81:01:c8:42:74:
                    a4:5d:eb:17:3c:5e:7f:4f:13:7f:2a:49:2a:b1:c8:
                    d3:b8:fc:e8:1f:75:0e:d8:10:91:86:84:f0:5d:72:
                    be:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F1:EB:29:77:5C:0B:14:BF:15:F3:32:1D:3C:7B:6E:8F:39:D5:91
            X509v3 Authority Key Identifier:
                keyid:1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1a:48:22:f5:a3:33:7c:86:3d:eb:78:18:c6:0f:9b:cc:c7:
         ce:e5:c0:df:2c:da:87:b7:7b:53:02:e5:8b:3d:23:91:07:86:
         46:cc:2a:da:12:ac:3c:27:04:ee:0c:b8:c2:85:36:ba:63:8d:
         d8:39:c8:2f:01:48:70:46:c0:a7:38:7e:ef:b1:0d:11:b5:7f:
         97:1d:a9:bc:cb:fd:e1:78:71:f2:1c:7b:bc:e2:93:0e:47:8c:
         7b:fd:30:83:d9:10:e0:f8:83:f6:a9:e6:f9:31:cf:dd:51:cf:
         48:1b:d8:a7:19:74:b8:67:17:dd:df:17:b5:46:79:99:f7:47:
         25:b5:6f:9d:b5:2d:4a:9d:4d:e5:4d:0f:03:04:5e:24:09:66:
         d1:f8:d1:a9:d3:af:ee:1e:d8:56:8c:c7:20:99:3d:87:ae:f0:
         ae:d6:59:7e:7f:b0:fa:cd:f9:97:9f:4a:1b:0f:49:5b:b2:b8:
         4f:79:48:93:fa:59:51:40:e7:8c:f7:81:9a:83:47:e2:af:08:
         d0:9f:6d:90:27:d5:c6:2e:30:9f:bd:2a:09:7b:16:9b:43:c6:
         a8:b8:68:64:ec:c8:48:63:77:38:6b:9a:0a:d1:75:43:b0:c1:
         b6:6e:9b:fc:0e:5a:3e:2f:81:bc:99:ad:73:1c:ae:b4:4a:80:
         56:e4:b5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:18:17 2026 by rpki-client