Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
File:                     HpsNFjzgqhHpHVVg9aPMZp4yke8.mft (raw, json)
Hash identifier:          1cj87pmBw6C7CoT9lTu4x+np9/m32+5tg7L5Et4mbBw=
Subject key identifier:   0D:97:D8:BB:CA:91:BC:56:DE:EA:58:EA:D8:3A:21:D8:80:CC:2B:3F
Authority key identifier: 1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF
Certificate issuer:       /CN=A91F0578/serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
Manifest number:          0126
Signing time:             Mon 27 Jul 2026 07:45:36 +0000
Manifest this update:     Mon 27 Jul 2026 07:45:36 +0000
Manifest next update:     Mon 03 Aug 2026 07:45:36 +0000
Files and hashes:         1: HpsNFjzgqhHpHVVg9aPMZp4yke8.crl (hash: eHhMt3rsU4U/5l7s9tdDIa2E8papR1PCeLxdMl9EF4g=)
                          2: T1sCJNac9MZ8hYnogflo_49meCM.asa (hash: 8YCyfGEChZt1LMFooT/d1It47P/Pz1tYx3vhrbLIbWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl
                          rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0578, serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF
        Validity
            Not Before: Jul 27 07:45:36 2026 GMT
            Not After : Aug  3 07:45:36 2026 GMT
        Subject: CN=6a670ca0-b488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e3:ad:c8:bc:92:26:30:51:ba:32:3f:57:5f:
                    ec:8c:a5:50:5c:33:22:fb:56:b9:65:bb:e5:8b:bb:
                    26:7b:21:73:4b:28:14:a8:77:6d:99:76:82:b1:84:
                    ab:c3:b8:ca:20:96:c0:9f:77:3d:8e:fa:30:b6:c6:
                    18:be:42:d7:20:3f:b4:b6:f5:be:3d:83:de:10:aa:
                    fa:bd:e3:bf:12:bd:6b:d7:69:c7:db:59:b7:55:7b:
                    00:71:bc:e1:cf:2c:b6:2f:61:53:55:c6:c9:a7:02:
                    fc:75:4f:97:c9:8f:08:5d:77:35:12:b5:55:a6:06:
                    8d:14:75:99:bb:04:44:9e:18:26:fd:ea:9b:54:4f:
                    dd:d4:aa:87:9d:fe:2f:6a:a0:64:3b:7e:4d:39:d4:
                    9d:a0:57:88:61:8c:80:45:0f:a9:11:b4:97:d0:3f:
                    d1:4c:d1:eb:85:e2:68:d3:81:49:fa:e3:61:0b:52:
                    c1:b7:93:e4:85:1e:2f:f0:5e:9f:69:f6:31:52:0d:
                    07:2c:18:58:ae:c7:e3:4a:8a:76:21:37:87:bf:09:
                    e4:30:ff:f8:47:f5:be:21:d6:d5:93:f8:0b:db:4c:
                    40:dc:c1:1f:05:4b:00:ea:f4:e4:f7:39:36:8e:5a:
                    06:59:c5:7c:5e:dc:36:1e:45:6a:bb:60:07:a1:ef:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:97:D8:BB:CA:91:BC:56:DE:EA:58:EA:D8:3A:21:D8:80:CC:2B:3F
            X509v3 Authority Key Identifier:
                keyid:1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:05:b1:94:67:dd:0c:f0:d7:e4:81:ca:46:15:a9:a3:cf:7e:
         dc:35:ed:7e:ce:ce:d2:2f:4e:1d:5e:c5:96:fe:47:67:f8:49:
         e2:c6:5a:8a:60:78:16:9a:ff:f2:22:5a:f6:4c:f4:19:3e:82:
         11:1e:ea:f3:f7:f2:f3:b3:36:d1:2d:74:47:2f:d9:e0:26:4f:
         40:67:fc:fa:fd:a5:07:a1:26:79:29:a0:4c:cf:4a:26:b3:f1:
         de:f2:8b:36:2a:a5:21:08:ea:8b:fc:f2:83:59:00:e9:4a:0b:
         f9:f0:d3:99:53:f8:26:ec:84:aa:b3:6d:a7:af:9d:3d:6a:f6:
         52:9b:04:dd:fd:bd:4d:b8:1e:45:11:cc:c3:11:06:c9:a7:52:
         cf:cb:92:1e:f4:f9:eb:10:95:6b:7c:f1:64:69:e8:58:8a:96:
         79:70:81:23:e4:0a:06:09:99:8d:6c:6f:05:76:7c:70:9d:56:
         45:2b:e7:35:78:90:19:ed:fd:51:b9:ea:70:50:8c:91:18:72:
         98:ad:32:94:7e:40:fd:0d:6f:e0:43:f8:09:75:d5:f3:53:5a:
         44:b3:27:ca:4f:93:c3:76:a8:53:34:16:4b:86:61:8e:73:6c:
         c4:7f:ce:78:a0:1a:e0:91:b3:a8:3e:6f:13:c6:13:59:7f:01:
         4b:00:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:40:21 2026 by rpki-client