Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
File:                     hbfttaaEvj2aYpdZkKcdmY3vUYs.mft (raw, json)
Hash identifier:          l0kHh8t7Dt6g7sjsX++MFitOM+IvG2C9iYrkknEN6Uo=
Subject key identifier:   D6:B8:14:75:5F:1D:73:25:09:66:B7:28:FC:2C:32:CD:B3:0C:23:F4
Authority key identifier: 85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B
Certificate issuer:       /CN=A91B62E1/serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
Manifest number:          7E
Signing time:             Mon 27 Jul 2026 09:52:53 +0000
Manifest this update:     Mon 27 Jul 2026 09:52:53 +0000
Manifest next update:     Mon 03 Aug 2026 09:52:53 +0000
Files and hashes:         1: hbfttaaEvj2aYpdZkKcdmY3vUYs.crl (hash: odexW+/7gWAULUkzt7DPeaDqbeEJpNSoMbkuwTwxl/s=)
                          2: 146F4288C8E711F0A7C33B4CC4F9AE02.roa (hash: mWJy1v+ne8mjUCBxQ8B6n5ShRR6xhgziEl5EgVMvzV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl
                          rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62E1, serialNumber=85B7EDB5A684BE3D9A62975990A71D998DEF518B
        Validity
            Not Before: Jul 27 09:52:53 2026 GMT
            Not After : Aug  3 09:52:53 2026 GMT
        Subject: CN=6a672a75-7bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:44:74:34:06:5b:e2:c7:c1:d8:ea:6d:56:ee:
                    61:99:bb:38:b2:78:19:bc:18:10:97:37:d9:d7:43:
                    69:d6:b2:fa:47:90:bb:ea:44:08:77:0e:3a:07:f8:
                    d9:7d:c7:b3:5f:7c:39:cb:29:08:2c:63:c1:db:80:
                    d8:6b:fd:59:47:00:a7:a4:66:e2:c5:eb:a0:a5:06:
                    78:3b:e7:ba:d5:9b:00:7a:3e:8d:ad:1e:17:41:45:
                    ff:b5:dc:c9:b5:05:e9:cd:6a:a5:a3:37:c1:81:0f:
                    16:6e:df:10:84:29:81:4f:58:bf:53:7d:38:d3:c9:
                    20:1f:d8:c3:f9:79:8f:76:5d:fd:70:f3:41:69:7d:
                    03:58:75:49:af:22:d2:81:98:76:41:c5:89:17:99:
                    2a:dc:5f:9c:c9:a7:10:9f:0a:a6:e8:db:ae:59:54:
                    7c:b0:47:8c:ac:cb:bd:f5:22:1e:4b:58:d9:02:bc:
                    1f:c6:c5:db:ab:a4:a6:19:a4:02:f5:de:25:98:67:
                    15:1f:31:8a:fc:5e:e4:da:fe:8e:2d:78:f6:67:cb:
                    69:5b:5f:10:0e:e5:9e:8c:24:ec:97:a6:af:6c:c9:
                    db:d0:52:bc:99:84:3b:62:16:91:05:cb:2c:36:4a:
                    6a:23:f7:d6:8c:62:cc:89:7d:0b:12:e9:62:24:16:
                    34:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B8:14:75:5F:1D:73:25:09:66:B7:28:FC:2C:32:CD:B3:0C:23:F4
            X509v3 Authority Key Identifier:
                keyid:85:B7:ED:B5:A6:84:BE:3D:9A:62:97:59:90:A7:1D:99:8D:EF:51:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbfttaaEvj2aYpdZkKcdmY3vUYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62E1/0ABB3568C8E611F0AA0C5B47C4F9AE02/hbfttaaEvj2aYpdZkKcdmY3vUYs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c3:ea:84:2a:2e:dc:98:a9:92:14:bd:f7:cc:86:87:0a:ba:
         46:74:83:3a:d0:a6:43:28:0f:10:40:ea:d6:a8:8d:8d:19:af:
         07:9d:0a:c1:89:b7:a6:aa:4d:63:d8:4d:56:c7:4b:01:6b:df:
         64:82:cd:da:72:e4:ab:d4:ac:d0:4f:12:94:1d:42:e4:43:cd:
         f1:7c:f0:98:9f:72:14:39:15:53:4e:0b:66:d6:54:96:4e:51:
         f2:d5:da:bb:5b:3b:50:65:09:f4:a2:03:d6:ab:55:86:62:6f:
         8d:19:99:c0:b4:21:75:95:fa:85:95:6a:48:4f:7b:ea:63:5f:
         f5:a9:55:05:67:47:72:80:f6:8b:54:11:a5:32:45:df:27:48:
         bc:bc:24:81:50:22:ba:41:2a:ff:c3:5c:44:a1:da:3c:f8:ce:
         21:fe:52:71:38:90:bb:33:3f:b1:ca:7e:25:15:e2:33:b6:22:
         eb:29:37:89:4b:1d:54:96:f3:ce:ea:b1:f4:35:bb:db:32:5f:
         c1:21:08:b8:37:d5:cb:9f:3a:05:3f:80:7c:21:16:e2:c4:cd:
         7b:9d:55:9a:39:8c:06:e5:f8:04:fc:75:f0:74:c5:f3:c7:b5:
         a9:e1:96:f7:68:fd:54:b3:57:e3:4a:42:13:0f:51:41:29:b0:
         36:9e:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:21:58 2026 by rpki-client