Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
File:                     Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json)
Hash identifier:          jx6HgaregRI30j2juXMgrfONTHewFBSpRSCosaTyUHQ=
Subject key identifier:   0E:2F:65:62:09:C5:2A:E7:70:57:59:35:5B:D5:9C:C2:1B:2C:B5:73
Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
Certificate issuer:       /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Certificate serial:       079C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
Manifest number:          0795
Signing time:             Fri 12 Jun 2026 21:34:16 +0000
Manifest this update:     Fri 12 Jun 2026 21:34:15 +0000
Manifest next update:     Fri 19 Jun 2026 21:34:15 +0000
Files and hashes:         1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: eGuH7NdYYTfebQkbwlS3Pt+pQV5BXdu3mFr3sUhiXus=)
                          2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: EjQAXg2usCcTUh9gyvVBrkzQeLYgfkd976KZ0ehXsBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1948 (0x79c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
        Validity
            Not Before: Jun 12 21:34:15 2026 GMT
            Not After : Jun 19 21:34:15 2026 GMT
        Subject: CN=6a2c7b58-0ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:87:16:b5:1f:34:41:35:d9:ea:11:6e:6a:
                    26:05:ec:6b:fe:1f:18:35:b8:ee:a6:1a:32:53:ee:
                    b0:a7:ec:21:19:bc:71:9b:1d:69:bc:e0:70:22:ed:
                    d3:c3:9e:cb:3c:93:1e:03:c5:8b:b1:99:77:29:1c:
                    55:6f:00:eb:7f:bb:d1:ab:2d:db:23:1b:58:66:b7:
                    45:09:2c:ba:50:62:12:25:97:ce:d1:1d:0c:e3:34:
                    03:a1:a2:ef:40:69:a9:b5:26:49:fd:ff:44:1b:6d:
                    01:71:5a:cf:70:94:d6:9a:53:37:33:11:f9:0d:31:
                    6a:c2:bd:62:ad:74:e0:58:ef:c4:19:50:ca:30:78:
                    e4:53:92:ad:73:e7:31:a0:99:b0:ff:c0:06:f0:81:
                    c4:6c:b5:47:57:7a:f8:00:b0:04:43:da:ef:17:ee:
                    ae:bd:16:1c:e0:1a:3c:83:0f:5d:a5:04:f4:ed:cc:
                    77:b6:3c:ca:0f:07:00:27:9e:37:29:02:3e:e4:5f:
                    ad:62:df:87:4a:b1:a1:83:e6:0c:3d:f2:db:33:5e:
                    68:6d:45:eb:09:8f:3a:b6:a7:b7:89:fa:53:e0:a6:
                    c1:a0:25:02:bd:0b:26:a7:fa:c7:20:cc:83:cd:46:
                    6d:74:9d:41:d7:9b:3b:43:9f:64:89:1a:41:69:28:
                    9d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2F:65:62:09:C5:2A:E7:70:57:59:35:5B:D5:9C:C2:1B:2C:B5:73
            X509v3 Authority Key Identifier:
                keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6e:5c:2e:aa:f0:3a:3b:a3:b4:e9:ab:72:e3:4c:85:6b:7a:
         76:2d:b3:b9:3e:f2:cd:f1:5e:94:99:03:d5:f8:29:ee:d9:d0:
         0d:01:82:a2:d3:db:c8:cb:e2:d8:67:3f:ac:27:00:3e:af:56:
         8b:46:f8:4e:f5:c5:5c:2f:8e:89:7f:1d:1d:05:16:0a:61:56:
         fe:25:d8:82:28:ea:77:99:bd:00:39:89:bf:11:8f:1b:97:4a:
         91:47:8e:54:7b:da:15:70:05:26:00:1e:7b:fa:84:a7:f8:9b:
         d4:09:65:76:7d:29:61:db:01:2d:6b:fb:96:d7:99:32:39:e7:
         8d:23:00:20:fb:22:0a:97:2a:aa:bf:77:a6:3d:c6:68:a7:34:
         09:2f:93:f2:43:1f:4e:50:5a:ab:0b:8d:d4:30:87:6f:0c:20:
         21:40:e7:8f:dc:61:34:4a:c0:81:e3:b6:14:96:69:2d:14:77:
         c7:a4:4f:40:b8:93:02:1e:9c:7d:c5:13:a1:7b:72:71:c1:2e:
         46:b2:d4:e7:25:18:26:e4:14:e8:61:55:c6:65:5c:fc:61:13:
         5e:19:88:94:c7:47:50:dd:c3:3f:a6:6e:c8:3c:1e:1b:78:08:
         26:11:a6:1e:fd:a3:de:fe:8b:d4:c0:b3:e2:a7:1d:42:e1:e9:
         bb:51:ae:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:58:41 2026 by rpki-client