Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
File:                     Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json)
Hash identifier:          jrpKjWhqDnY6UE/z1UYE3Tj7suBlwRdHClSgV7j6kgM=
Subject key identifier:   EF:25:00:85:4C:BE:18:4E:3B:55:DA:0C:5B:00:B8:87:63:15:23:75
Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
Certificate issuer:       /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Certificate serial:       07B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
Manifest number:          07AC
Signing time:             Tue 28 Jul 2026 21:56:25 +0000
Manifest this update:     Tue 28 Jul 2026 21:56:24 +0000
Manifest next update:     Tue 04 Aug 2026 21:56:24 +0000
Files and hashes:         1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: Ik5j3PyJ1Kc/emGnv+d3ymCbe37wVpodx2NVhXL4pEM=)
                          2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: EjQAXg2usCcTUh9gyvVBrkzQeLYgfkd976KZ0ehXsBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1971 (0x7b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
        Validity
            Not Before: Jul 28 21:56:24 2026 GMT
            Not After : Aug  4 21:56:24 2026 GMT
        Subject: CN=6a692589-d903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d9:2a:8b:8f:11:1a:ae:11:03:77:09:18:52:
                    7c:21:c7:c8:7f:ea:8c:fd:08:3e:cc:3e:8f:d8:89:
                    d0:06:b6:b6:c4:ff:a3:da:13:53:c7:dc:03:bb:6b:
                    a9:be:97:9c:a7:44:55:14:2a:32:58:fc:e4:51:aa:
                    29:f3:02:99:ce:18:65:c0:3a:48:6c:55:bf:70:3e:
                    de:87:73:37:15:c0:5e:7b:43:37:92:c8:09:63:15:
                    5e:7d:e7:6c:fd:b7:e8:13:6b:9e:65:bc:91:0f:36:
                    40:19:a2:93:44:6c:5b:f7:e7:3b:2b:cb:13:b6:e8:
                    23:8e:72:17:1c:97:6d:d0:b1:4f:e7:75:81:e1:8b:
                    bd:32:f9:08:bf:9d:e0:6a:0b:ac:66:5e:3e:00:6f:
                    c6:bf:86:e8:5f:73:30:9c:a7:c8:57:2b:aa:85:24:
                    9d:c9:fe:02:64:cd:59:ef:4e:17:17:ab:7f:32:f6:
                    91:ea:06:79:00:59:1d:d1:4f:88:16:55:7c:1c:f5:
                    df:bf:a9:3c:0b:46:7b:91:28:36:3a:57:ad:e7:bc:
                    b0:51:3d:bf:12:c5:bb:a4:af:e7:c9:4f:c7:44:0d:
                    c2:75:04:ee:d8:2d:c0:54:f5:68:36:42:1a:0e:c7:
                    bb:ac:2d:ed:c1:0c:ac:a2:13:05:b5:a0:19:05:11:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:25:00:85:4C:BE:18:4E:3B:55:DA:0C:5B:00:B8:87:63:15:23:75
            X509v3 Authority Key Identifier:
                keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2c:40:15:cf:92:73:87:5a:ec:99:bd:1e:a5:f3:fe:06:4b:
         dd:57:20:04:a2:f7:98:a4:18:a4:f4:01:28:b0:ae:9d:2f:7d:
         f0:89:31:07:4c:8f:d1:32:cb:35:51:39:6a:e0:f3:9b:78:78:
         84:f8:f9:be:07:32:c9:d3:9d:60:be:51:6c:d8:c2:38:45:58:
         1c:0e:c5:b7:b2:14:3a:7e:35:a3:26:76:62:d5:3a:7f:6c:54:
         49:5d:ea:ed:7a:f8:29:59:06:0e:e4:91:c2:91:2e:e1:8a:3d:
         12:84:4c:1c:64:ab:34:48:63:6d:14:b0:db:e0:40:f7:5c:f0:
         a1:84:c3:af:b3:50:f1:07:0d:98:94:0b:f6:53:4f:63:79:43:
         6d:11:89:99:d9:b6:35:54:fb:26:80:90:48:d0:30:60:4c:56:
         7c:32:6d:83:05:bf:96:d6:09:0b:c3:6b:a8:90:74:58:8e:04:
         08:e8:55:6e:33:c1:34:92:75:99:6b:e0:00:ce:0c:ea:c7:f5:
         f8:7e:89:fa:6b:64:6c:b4:67:8a:3d:e9:5c:5e:03:88:f1:b6:
         bc:fb:0f:48:79:bb:76:86:df:5d:23:71:a8:44:e0:ad:43:e9:
         fd:11:5c:a6:ea:38:d1:99:20:ba:1d:ce:0a:d2:db:4c:ad:1d:
         89:25:90:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:23 2026 by rpki-client