Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
File:                     4hHNheByVQ4z5MyGpj-8360dNTI.mft (raw, json)
Hash identifier:          AdD9JNCZ6IESATFJ8XbF//lYIypzTRvOaYDUUP7WyOA=
Subject key identifier:   EB:C0:1D:CD:3C:29:2E:26:EB:B9:B4:CA:21:36:2F:65:A1:9F:75:9E
Authority key identifier: E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32
Certificate issuer:       /CN=A91F85CD/serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532
Certificate serial:       08F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
Manifest number:          08DC
Signing time:             Fri 12 Jun 2026 20:26:43 +0000
Manifest this update:     Fri 12 Jun 2026 20:26:43 +0000
Manifest next update:     Fri 19 Jun 2026 20:26:43 +0000
Files and hashes:         1: 4hHNheByVQ4z5MyGpj-8360dNTI.crl (hash: RnWwevU/F7VLyThamxOcJCN1RxlyqGRqucmOr1mpgts=)
                          2: 57BDB7A85E7011F1A73FCCD7147AAC22.roa (hash: D1vi/CU/2Qa3UAwk8ROF6/81kLEg5XQ0HrFSPG7aFBg=)
                          3: 0694DE925E7011F18D994AD5147AAC22.roa (hash: 1VTps7TMblVtTtQQmFdN1wLLHWYElV09OvYdQPb9W90=)
                          4: 624086E2E99611EA930A5B74C4F9AE02.roa (hash: j1ZQSkQIYFS+gldnyZ+dTEQnL4DNzl2Ixm3soEFr45s=)
                          5: AF3304C65E6F11F18B912BC3147AAC22.roa (hash: mugZ6N0u6WAwoUu9/alz8CzePymZa9nygy/+jo0Dw6g=)
                          6: CEDD71FAE48811F09BEEC367446F56BC.roa (hash: n4+tu4whf2PQeZcNUGvCEnzwL08T5EGFFqHM2nYkstI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl
                          rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2290 (0x8f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F85CD, serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532
        Validity
            Not Before: Jun 12 20:26:43 2026 GMT
            Not After : Jun 19 20:26:43 2026 GMT
        Subject: CN=6a2c6b83-eafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:6f:28:86:1e:43:84:b3:b6:1a:60:97:43:
                    86:12:67:d4:6f:71:00:ba:51:57:0a:b5:bb:89:ae:
                    40:3c:47:8d:3b:5c:8c:e0:d7:cf:46:ff:ae:9d:b9:
                    88:7a:10:bb:83:be:90:5d:11:6b:91:d0:19:41:14:
                    13:7a:1d:c8:1a:6d:df:06:8d:06:74:5e:62:fc:8d:
                    88:ff:19:85:69:29:09:f1:6c:ec:24:d2:93:64:32:
                    a2:27:bf:7d:31:03:d8:6e:bc:19:e2:39:69:3f:ef:
                    c8:13:60:af:83:84:62:f5:83:db:de:81:e9:59:bb:
                    ae:c0:6d:2f:06:11:73:67:9e:33:ce:fb:32:bd:b0:
                    28:cd:ab:ac:41:c6:5d:59:02:66:82:93:5e:8c:7d:
                    b3:66:e6:b5:45:2a:0a:15:3d:c8:b3:0a:c0:3f:82:
                    50:88:a5:e2:09:b1:12:0a:94:6a:23:b2:b9:02:a7:
                    3e:64:cc:2e:73:42:15:a6:e3:77:ea:e2:03:2c:03:
                    5a:7e:c8:96:d2:fd:fc:c8:ed:22:3c:e1:ab:b1:15:
                    81:ac:33:d7:15:ff:43:96:73:3c:06:02:33:5d:4f:
                    64:d2:19:9b:3f:7c:45:03:b9:fc:b7:4a:5f:fb:bb:
                    cf:fc:32:d6:93:08:72:2f:ab:e5:f5:c4:8b:2e:7c:
                    12:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C0:1D:CD:3C:29:2E:26:EB:B9:B4:CA:21:36:2F:65:A1:9F:75:9E
            X509v3 Authority Key Identifier:
                keyid:E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:3f:dd:7a:db:c0:46:1d:99:59:7a:65:e3:1e:ba:cd:f7:
         e9:af:f3:a9:e9:71:b2:a1:c6:00:37:14:57:95:32:f9:36:54:
         c7:4d:21:4e:b2:4c:13:99:e1:dc:9a:ed:fd:34:61:78:86:6f:
         b3:6b:37:08:ec:83:9e:35:47:f7:24:3a:53:e3:ae:f7:fd:af:
         98:af:ee:1d:9a:e1:6c:8d:02:75:bf:c2:4a:16:3f:e6:47:98:
         81:9c:7d:dc:ba:ad:67:20:ac:80:b2:87:92:af:82:64:4d:79:
         93:a6:18:7f:74:b2:ba:84:67:d4:42:10:02:db:95:6e:d6:5f:
         72:0b:af:1a:47:d6:54:7e:35:ba:dd:af:21:e0:0f:ad:77:8d:
         e0:2e:b8:f7:9b:71:7c:30:6d:27:a0:42:66:5b:c5:55:68:3d:
         a9:02:e9:e8:a7:08:93:8c:3e:8a:f2:ae:cf:aa:e6:9b:70:ec:
         a1:fc:4d:d5:e0:2e:7f:19:8f:14:92:18:aa:2a:f4:e7:96:2a:
         c0:cd:fb:16:00:ed:04:bb:8f:3c:b4:17:2c:fe:49:cc:8c:0f:
         d2:bb:bd:1e:2e:17:52:cf:fd:42:ad:18:ac:9e:9c:c0:a5:82:
         b5:58:b3:01:d6:e6:86:99:d3:63:a3:6e:39:dd:88:40:7b:1f:
         3e:15:e2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:05:09 2026 by rpki-client