Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
File:                     Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json)
Hash identifier:          IYHu/YbInG8B7nLjShrLN5pdb0LdI9MTjY9G0dLDyLQ=
Subject key identifier:   4C:43:B5:0A:B0:8B:50:24:62:FD:F1:32:1C:3F:F2:CF:44:4C:00:10
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Certificate issuer:       /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
Manifest number:          0257
Signing time:             Wed 29 Jul 2026 03:19:14 +0000
Manifest this update:     Wed 29 Jul 2026 03:19:13 +0000
Manifest next update:     Wed 05 Aug 2026 03:19:13 +0000
Files and hashes:         1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: ORQTV6iCcUwSs2zdyo4tczmh6w0vEW0ZzSQPj7VK0Bc=)
                          2: C369BA98260D11F082934618C4F9AE02.roa (hash: cXQDcqjGHQK7UALmkZP5e0hc3VzG0s7yGBDOUKs2gKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
                          rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 02:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
        Validity
            Not Before: Jul 29 03:19:13 2026 GMT
            Not After : Aug  5 03:19:13 2026 GMT
        Subject: CN=6a697131-1eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7f:00:8b:35:a6:9d:f6:be:62:02:5e:7d:a9:
                    bb:e1:1e:2f:31:1b:5d:a6:9c:1e:38:ef:bc:d8:34:
                    5c:40:46:b5:53:0a:28:9e:49:47:07:c8:e8:91:1c:
                    7b:45:9a:b8:33:51:9d:bc:a9:88:b5:c6:c0:6f:42:
                    05:e1:19:a3:c5:89:4d:10:13:74:64:5d:59:f6:37:
                    19:f6:14:7e:db:28:49:56:61:c8:34:04:0f:c0:54:
                    94:bd:1e:1b:43:74:cf:4c:a9:43:27:3d:0b:5a:36:
                    88:62:5a:6a:31:08:9c:4a:c0:16:ca:dd:ef:c8:74:
                    6f:c6:7c:1e:2c:49:27:73:d9:84:88:b4:ae:21:b4:
                    81:5d:38:98:1a:88:14:f6:97:80:9f:36:ab:7a:94:
                    f2:c9:d6:cc:12:5c:df:6b:91:93:84:ad:a4:4f:a4:
                    90:3d:e8:7e:f0:f3:2d:3c:55:03:26:84:91:90:19:
                    a7:c6:af:64:08:51:67:7e:fc:ac:68:51:9a:83:b4:
                    6a:9b:b6:0b:35:78:3d:ab:68:8a:70:8d:af:1f:eb:
                    34:05:f8:cf:af:9e:24:eb:02:6c:16:16:0a:9c:ad:
                    ae:c0:6a:b1:d7:1e:52:1e:f6:18:8f:55:5a:40:ee:
                    5a:e6:c6:d0:6c:03:58:eb:4d:10:e9:8d:a1:0a:62:
                    c5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:43:B5:0A:B0:8B:50:24:62:FD:F1:32:1C:3F:F2:CF:44:4C:00:10
            X509v3 Authority Key Identifier:
                keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:f8:4a:27:a1:86:5d:f2:b7:b3:ca:2c:67:93:69:f2:f1:51:
         e4:f2:02:b7:aa:53:d6:02:c4:b8:5e:ae:0b:46:33:ff:57:ce:
         00:b1:23:3b:aa:d9:fd:81:78:5f:56:5c:5c:35:0f:d7:dc:da:
         79:f4:98:62:64:0d:41:92:cf:5a:9a:d8:34:50:fb:c9:b3:ae:
         1b:21:64:e3:1d:38:3f:e2:dd:44:9f:32:28:7b:07:cf:c2:db:
         0b:bb:ec:2a:2b:32:12:a4:41:9a:09:fa:8d:41:15:0b:96:ac:
         77:b7:1a:20:22:44:85:35:ec:16:f6:1e:d2:87:71:e3:ca:1a:
         30:51:d0:fc:e4:b3:78:a5:78:fd:c5:5e:ab:6c:16:52:54:43:
         27:44:ff:1e:d2:b4:ae:c9:af:17:58:cd:f6:23:de:e9:5e:c7:
         f7:7d:0d:0e:aa:86:ca:d8:d1:95:12:e2:35:7d:f0:98:af:c9:
         b2:8b:29:f5:b4:57:25:5d:a4:26:3e:79:9c:19:9e:b1:af:f5:
         0a:42:7e:ce:94:33:20:27:1c:c9:be:7a:44:47:9d:95:1c:7a:
         1b:8a:7c:27:74:27:46:84:06:a8:5f:cd:78:4e:b4:12:36:6b:
         f7:63:7f:88:56:cc:2c:d8:15:ea:e6:1b:81:57:8e:d8:52:68:
         c8:66:1a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:58:10 2026 by rpki-client