Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
File:                     HNLU8yahhKSHvyKs14rVwGj0ZmE.mft (raw, json)
Hash identifier:          vtfJC3Dr9bjPsseTLDXC0PVzFty2QnY6oy9WoFR2L6I=
Subject key identifier:   78:FE:37:69:28:39:5D:90:DE:DF:58:E4:81:D9:E5:C9:3B:67:45:05
Authority key identifier: 1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61
Certificate issuer:       /CN=A91F8177/serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
Manifest number:          C8
Signing time:             Wed 17 Jun 2026 07:03:41 +0000
Manifest this update:     Wed 17 Jun 2026 07:03:41 +0000
Manifest next update:     Wed 24 Jun 2026 07:03:41 +0000
Files and hashes:         1: HNLU8yahhKSHvyKs14rVwGj0ZmE.crl (hash: vsXb7DZabqpq1Z/vHArYoMA9ZZQDxpogDJi5q5V7Q/4=)
                          2: 447A88023DDC11F0ACD9F475C4F9AE02.roa (hash: yApvKnBxIUvq7AlUwJW85McmrlejDSLKrMcrZmKRC/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8177, serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
        Validity
            Not Before: Jun 17 07:03:41 2026 GMT
            Not After : Jun 24 07:03:41 2026 GMT
        Subject: CN=6a3246cd-266c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:cb:c4:28:09:c0:0f:df:cc:9f:08:3d:5a:
                    44:62:02:2d:fa:33:78:ab:ba:be:23:b0:5e:66:39:
                    ab:34:a5:c1:68:4e:88:db:b4:5c:28:f4:1c:87:95:
                    68:d1:a3:70:8a:e0:df:cb:eb:5e:ea:c1:2e:8a:63:
                    17:9d:2b:6f:15:3d:6c:d4:a0:2c:2c:d6:40:45:16:
                    5c:aa:77:ef:6d:bf:12:0c:2a:23:be:a0:a2:d5:c7:
                    ab:db:ae:85:84:a7:75:d7:f0:b8:72:27:80:b8:f7:
                    d9:19:ca:99:c1:02:5e:6c:5f:33:54:94:fc:de:4e:
                    e5:74:48:e6:f4:16:15:1d:0f:0e:a3:fe:4f:7b:4c:
                    e9:19:ce:22:4a:c3:ff:10:c4:60:cf:00:40:ed:07:
                    f1:82:3c:c3:cc:fd:a0:90:f6:2d:79:f6:3e:4f:0f:
                    6d:04:a6:65:36:59:29:d0:33:81:fc:64:3d:53:3a:
                    15:72:85:e2:a6:1b:30:d7:cf:a1:f7:f1:73:0a:7b:
                    15:0f:7d:41:06:31:04:d9:71:d4:11:74:ef:c1:e8:
                    ce:50:1f:cc:ab:aa:3b:ae:61:e7:8f:d6:54:96:c5:
                    5e:b5:3d:9f:04:08:1c:93:c0:15:7b:9b:75:33:52:
                    b0:e6:0a:fc:9d:20:20:ba:8f:4e:59:28:74:0d:53:
                    80:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FE:37:69:28:39:5D:90:DE:DF:58:E4:81:D9:E5:C9:3B:67:45:05
            X509v3 Authority Key Identifier:
                keyid:1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:70:70:52:5f:5e:0a:6f:f9:82:79:67:24:df:0d:08:49:45:
         0c:33:3f:d8:a1:54:31:59:6b:e8:50:96:fc:66:02:ab:21:14:
         47:a5:e2:d4:9b:44:20:05:c8:25:a3:31:19:27:24:d3:91:bc:
         55:ca:15:dd:7a:c2:64:75:7e:21:cf:90:35:f6:6d:39:50:28:
         50:2e:ea:ce:83:17:b2:82:ad:a4:8c:87:b7:bc:e2:f6:bb:32:
         7b:f2:6e:11:58:d3:2e:54:ed:ac:ff:fa:9d:a7:59:9f:2f:6b:
         28:2c:d3:ae:70:85:59:9c:0b:04:da:9e:74:0c:e9:45:c3:26:
         e8:3b:18:64:b9:bd:cd:37:d3:70:bb:d1:83:cd:84:73:90:d4:
         dd:66:89:ee:ec:ea:33:1d:ef:ae:41:32:e8:2f:e2:4c:90:43:
         44:36:f6:9a:a2:e2:5a:37:07:c1:b7:af:c8:9b:87:83:e5:c6:
         59:63:e1:bf:60:74:d2:8a:59:c3:20:a9:98:86:7e:ce:67:c4:
         f4:00:a1:70:53:37:e8:23:e5:42:df:7c:14:6a:f0:05:9c:25:
         27:33:67:71:82:40:9c:c0:f4:6a:76:0c:1c:50:13:f6:4e:87:
         00:06:8b:47:6b:88:95:70:5d:20:e5:4d:f0:d3:2f:bf:6a:49:
         ef:ea:76:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:50 2026 by rpki-client