Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft
File:                     HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft (raw, json)
Hash identifier:          WqN0su1pD3Tj3zec9Yx6GkDVsZs2M+VHquXdWTvktwY=
Subject key identifier:   D0:4F:8F:DB:C6:30:C0:BB:04:E1:53:FA:1F:1F:5A:E3:3F:EF:69:24
Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B
Certificate issuer:       /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B
Certificate serial:       1444
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft
Manifest number:          140F
Signing time:             Fri 12 Jun 2026 16:54:26 +0000
Manifest this update:     Fri 12 Jun 2026 16:54:26 +0000
Manifest next update:     Fri 19 Jun 2026 16:54:26 +0000
Files and hashes:         1: HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl (hash: BvCVFtFp4cr5crc0NCBEG6qJ+HRZ+zk/6v3JnZeCZQo=)
                          2: 40567CA8F25A11F09752333B5F6F56BC.roa (hash: XiAc49h/ITbvuy7hirc9LsEmIhpsGVSj9jKpQ0AZeG4=)
                          3: E4A74BE6255211EB96B9B269C4F9AE02.roa (hash: WqMqFVIMW/WczjTWRvzLRKr2fBm6q4MFQ+IAb2s3IrY=)
                          4: 999C6728F7FF11F08B2BFA086C6F56BC.roa (hash: 5jwoaJRF05ynypppsournA2NpxdgiK2g9i/wb3qUNp4=)
                          5: 40366CF0F8C811EBB7BFD243C4F9AE02.roa (hash: lwkWaq6p0L37tuMHM356+eKrIkOsIPecy57fgsnLnhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl
                          rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5188 (0x1444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1FA8, serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B
        Validity
            Not Before: Jun 12 16:54:26 2026 GMT
            Not After : Jun 19 16:54:26 2026 GMT
        Subject: CN=6a2c39c2-33ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:92:22:e7:12:c5:2d:ea:70:15:18:06:8a:
                    08:17:b1:c1:f9:e1:d0:ab:d2:40:14:8f:25:81:3f:
                    f4:84:d6:a2:23:9b:91:91:3a:a8:a4:37:fd:c0:4c:
                    45:1c:5d:26:f9:18:b8:84:0f:ea:bd:b6:9c:fd:17:
                    52:a3:9d:70:0e:bb:1b:fb:fd:ec:b7:c6:a2:d5:65:
                    a2:bb:d8:8a:f5:4d:13:ce:54:29:5e:d0:07:9b:b8:
                    71:5b:dd:54:7f:a8:0e:e1:e2:0e:7a:a9:de:20:6e:
                    80:a8:d1:b1:25:8e:74:a5:54:b4:4f:4c:f3:c5:c5:
                    ce:4c:8f:cb:82:b4:e2:ee:06:b5:67:84:23:77:3c:
                    3d:f2:7a:1f:2d:18:c0:60:bb:d0:28:bc:1a:b7:42:
                    12:05:d5:f7:99:a2:c2:41:09:c5:42:c5:34:ea:fa:
                    9f:78:dd:ee:88:f3:db:ac:43:38:c2:a6:9e:e6:10:
                    9e:eb:d1:af:44:0f:3c:25:d6:fd:bf:79:58:35:92:
                    86:b8:74:25:14:02:d1:0d:51:b8:33:8a:ca:ca:52:
                    14:91:fc:43:c5:26:5b:7a:9b:ac:54:c2:c3:fb:3a:
                    ea:a8:90:90:f1:a2:c0:93:99:44:6e:f4:6e:2f:1e:
                    e3:a3:4f:47:66:67:5b:24:4e:d4:22:4b:40:f3:04:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4F:8F:DB:C6:30:C0:BB:04:E1:53:FA:1F:1F:5A:E3:3F:EF:69:24
            X509v3 Authority Key Identifier:
                keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a4:8a:58:f4:52:96:fd:4e:77:2c:85:24:6a:f7:d1:e4:cf:
         8d:b4:08:2e:03:c7:69:7c:7b:cd:b0:82:f9:7d:c9:63:83:ec:
         30:03:53:32:3a:cb:e5:35:c3:34:7c:46:ec:9d:4e:70:37:cd:
         e4:4d:2f:2b:12:3c:f4:17:7f:1b:ed:c9:0c:29:d2:5f:4b:3b:
         98:77:92:e7:e2:7a:8a:f4:4f:07:88:c2:ad:e5:1e:a1:a7:94:
         70:56:5d:6c:23:5a:b0:c0:85:d9:a2:69:c9:81:18:20:73:19:
         ef:08:5d:bc:37:c1:7e:95:5f:2d:e7:e8:33:67:2b:bb:6c:14:
         82:97:99:ac:0f:4c:0e:a1:75:99:cd:b3:42:cd:a1:fa:fc:ef:
         cc:9f:12:d1:80:23:f8:e7:5b:0e:85:74:d7:ce:3a:47:ae:ae:
         c6:7b:fe:3d:7d:75:6a:ca:81:f9:9c:dd:0c:21:44:e4:a2:89:
         84:57:80:5d:de:d2:0f:08:85:c4:20:84:54:a3:9e:15:e4:c5:
         15:8c:ed:1d:3b:7c:46:83:cd:1a:76:27:c4:2d:97:b3:9d:1c:
         5d:53:bd:45:9c:24:4b:5f:cd:e9:13:00:3d:b7:5e:a3:ee:6b:
         18:6d:ab:75:a5:2f:73:1a:5f:83:05:ed:e6:4a:73:e9:da:c8:
         41:71:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:20:48 2026 by rpki-client