Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
File:                     HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json)
Hash identifier:          YnJNjj+3vUsB7aePpC76oegFd0Dhk3TgtDc8nR8K9ko=
Subject key identifier:   93:8D:3D:4D:68:87:D8:DA:3D:82:D8:85:20:06:86:75:08:FE:46:89
Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2
Certificate issuer:       /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
Certificate serial:       04FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
Manifest number:          04EF
Signing time:             Fri 12 Jun 2026 23:47:39 +0000
Manifest this update:     Fri 12 Jun 2026 23:47:38 +0000
Manifest next update:     Fri 19 Jun 2026 23:47:38 +0000
Files and hashes:         1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: JpA3MMIM+lhrcrgnv4XmbxJ3ll+4qA7UpAE8AaHZADM=)
                          2: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 2RxAlS/oLuf7Y3VMI5wk5JfPIc2P4lPgJltprUhrclU=)
                          3: F45C79E262F711EC8184F344C4F9AE02.roa (hash: 31ILuWSDcxMEoCJtg/DemIqgF6JDQtA4+Gr57AYJDnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl
                          rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277 (0x4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
        Validity
            Not Before: Jun 12 23:47:38 2026 GMT
            Not After : Jun 19 23:47:38 2026 GMT
        Subject: CN=6a2c9a9b-155a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:2b:7c:08:2a:3a:46:d6:62:fd:d7:eb:1f:
                    5d:32:74:77:82:8c:d1:27:14:42:c1:a4:24:95:33:
                    b4:c0:2f:ad:b0:70:e4:c1:c7:5d:7d:d5:58:fc:21:
                    82:65:c4:89:60:9a:65:d9:28:b3:53:72:b8:d2:06:
                    da:e1:57:79:3f:c2:ef:10:00:26:b9:d8:d7:49:92:
                    89:40:ef:3c:54:fa:a2:6b:80:44:98:43:33:57:01:
                    46:84:fb:26:2b:64:d0:9a:a9:64:84:50:96:53:ce:
                    35:cc:74:ca:a3:cd:9d:eb:84:01:b4:1c:0a:ec:bd:
                    8a:53:fe:5b:b9:11:1d:15:ab:be:c7:1b:65:1f:51:
                    79:ba:48:29:c0:13:6e:1f:1a:19:62:bd:90:7b:00:
                    cc:dd:0a:33:a8:23:59:6c:02:91:e2:4a:08:03:40:
                    ec:fa:4d:49:51:86:bc:c9:d1:dd:4e:78:70:e3:e7:
                    9d:66:f6:02:11:58:53:b0:20:a4:b8:09:27:93:1b:
                    36:09:da:91:0b:0e:dd:b8:56:b2:27:3c:3c:bb:36:
                    27:53:3a:5d:5c:82:ed:65:1e:96:c4:05:75:86:78:
                    3d:f3:50:50:55:b8:1e:c2:9c:8a:c1:fc:dd:65:8c:
                    31:75:e1:24:73:a9:f3:04:93:fd:92:2d:bb:63:ac:
                    b0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8D:3D:4D:68:87:D8:DA:3D:82:D8:85:20:06:86:75:08:FE:46:89
            X509v3 Authority Key Identifier:
                keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:28:50:cc:6f:91:34:93:28:6f:45:b5:57:23:1b:fe:17:98:
         30:57:36:8d:f9:9d:27:34:10:de:25:08:75:ca:9a:37:f9:51:
         f2:4e:7e:a7:91:c7:48:17:38:f2:54:cd:f3:be:a0:37:cc:ac:
         8a:a2:2d:c6:b1:8c:8a:14:fa:10:da:c4:67:c9:b1:80:e0:6d:
         c5:46:fc:2c:c7:de:e0:fd:b5:a1:45:10:30:50:af:77:9a:f1:
         28:31:22:6f:36:d4:b6:19:6a:c4:56:2b:54:eb:31:27:b7:25:
         73:af:5b:e2:4d:6e:f9:4c:a9:76:d4:c3:af:63:f0:fe:1b:d1:
         7b:cd:c7:b7:0c:2c:0b:c1:ae:e3:78:9f:bd:45:7d:b6:10:5f:
         49:c8:57:bf:94:83:84:c8:7a:a4:d1:5a:c0:f5:b8:2f:fd:75:
         12:f8:7c:5a:fb:26:85:0a:d9:b3:9b:3a:cc:24:f7:e9:e4:9a:
         12:54:63:d1:4f:8d:e7:3c:27:b0:5f:be:da:79:5c:13:44:ab:
         c6:7f:34:26:cd:13:4d:12:01:a5:e2:ad:d3:4d:13:fa:3d:94:
         e3:bd:27:45:5e:4e:f2:b0:ad:c9:68:e8:f7:c6:57:1f:60:02:
         cf:22:f2:6c:52:84:d6:ab:77:45:04:04:1d:79:0e:4f:07:e4:
         d1:6f:e9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:25 2026 by rpki-client