Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
File:                     hs2LQhipuaG84vrF7m3HhbAKkx0.mft (raw, json)
Hash identifier:          z0qDiX2PhL6UPqsylO91+FqO3t7MMJBLvMyOFmkRws0=
Subject key identifier:   80:5C:96:A7:95:34:C5:76:3A:37:5A:0C:63:01:76:D5:AD:BD:7A:DC
Authority key identifier: 86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D
Certificate issuer:       /CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D
Certificate serial:       02F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
Manifest number:          02D3
Signing time:             Sat 13 Jun 2026 01:31:33 +0000
Manifest this update:     Sat 13 Jun 2026 01:31:32 +0000
Manifest next update:     Sat 20 Jun 2026 01:31:32 +0000
Files and hashes:         1: hs2LQhipuaG84vrF7m3HhbAKkx0.crl (hash: 6xOATM8AZix213WYJu2zAuZUs7nsSlwf9k++f1Y1y8g=)
                          2: FB9DB0B8778011EFA197A558C4F9AE02.roa (hash: NdFnlMSr/V5noQXIsNx/D5f9zVB2iTgM5spp/nQu96Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl
                          rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF28F, serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D
        Validity
            Not Before: Jun 13 01:31:32 2026 GMT
            Not After : Jun 20 01:31:32 2026 GMT
        Subject: CN=6a2cb2f5-9dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:59:d8:af:ab:48:18:9b:e7:8d:3b:ec:76:
                    ee:9e:29:95:36:6a:bd:ae:95:e9:dd:09:1a:3a:0b:
                    50:3d:c5:7a:89:b1:e9:49:1e:ff:6c:ee:83:e4:6e:
                    8e:0d:9a:49:e9:a9:58:27:9f:fd:e4:4a:2c:1e:c5:
                    30:39:ad:c6:2d:78:f8:04:24:8b:aa:97:96:8e:4a:
                    73:6c:92:c2:10:3f:20:89:e3:27:c8:b4:e6:be:99:
                    f9:6f:47:d6:82:b3:3f:23:af:6a:7d:09:1f:0f:03:
                    dd:10:56:2d:2c:7d:48:66:ac:cb:8b:de:04:24:ef:
                    80:78:71:9c:05:8f:2c:36:b1:e4:45:e3:14:1c:c5:
                    4f:7a:42:f4:2f:98:69:9c:32:d8:e7:ff:b3:4a:24:
                    04:e7:2f:7d:95:cf:ae:97:6d:04:2f:61:7b:85:62:
                    75:3b:14:f3:9b:c9:04:55:3d:c2:3c:ad:21:df:0e:
                    d7:0e:6b:1d:5a:97:28:e8:0d:e5:f2:59:8b:67:f1:
                    2c:6a:9a:fc:c5:02:72:30:db:19:0c:d3:1b:c8:62:
                    0b:d1:16:f7:5f:d7:53:2b:59:cc:bd:1e:e3:0e:83:
                    5d:49:7f:e4:a1:3c:2d:64:74:eb:4a:f7:26:81:de:
                    05:e7:46:84:75:af:20:96:bd:6e:89:d2:84:d8:d1:
                    7c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5C:96:A7:95:34:C5:76:3A:37:5A:0C:63:01:76:D5:AD:BD:7A:DC
            X509v3 Authority Key Identifier:
                keyid:86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:10:ac:29:e6:c6:1b:d2:3c:b2:e6:27:98:64:a8:91:a6:76:
         90:05:4c:9c:4b:95:c0:e0:fe:14:67:5a:75:c7:4c:3a:33:a8:
         a9:19:1f:3c:01:6a:34:41:ad:7d:6b:5e:54:e0:f3:b3:b0:3e:
         e5:79:4f:4b:ec:57:08:9a:78:ac:97:cc:fa:cc:e6:44:3c:f6:
         2a:bc:1f:8c:34:a7:0c:b8:fa:00:e2:12:10:67:e2:6f:a8:74:
         79:9f:60:f9:24:19:c1:fe:ed:a5:96:52:1c:6b:06:38:0b:d9:
         98:06:0b:53:80:ae:6f:cc:b0:48:41:33:fd:bb:32:7c:d8:49:
         5d:16:9e:c0:f2:0a:69:bc:7f:27:05:c5:c4:5b:64:fe:20:03:
         e9:fb:b6:13:dc:48:b1:70:47:4d:1e:e7:e4:5b:5e:fe:dd:48:
         07:d1:5e:b2:b3:58:ed:ac:05:49:ea:3f:cd:7d:18:14:64:83:
         1b:c2:7c:19:83:c3:41:8d:a9:2e:e8:ac:a2:a9:1c:6d:2f:fd:
         c4:c4:34:e8:a5:95:77:68:34:be:5a:e2:c6:78:86:49:2d:d5:
         0a:44:01:ac:3d:0d:65:40:36:6b:5b:cb:18:aa:68:2f:66:85:
         c3:01:17:a3:fa:47:47:63:c9:10:fe:d5:56:cc:8f:83:56:84:
         b5:a7:cd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:35 2026 by rpki-client