Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
File:                     HUA-MjAeWHgKBwV8syty7K9G19k.mft (raw, json)
Hash identifier:          aErTPMBw4AC3svT5zW9K738IAqOyBYvVGFW8oJuoFtw=
Subject key identifier:   19:7A:62:68:C6:E0:49:C4:30:1C:BB:C6:B5:C8:A4:51:91:71:9A:94
Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
Certificate issuer:       /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
Certificate serial:       0496
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
Manifest number:          0487
Signing time:             Sat 13 Jun 2026 00:04:36 +0000
Manifest this update:     Sat 13 Jun 2026 00:04:36 +0000
Manifest next update:     Sat 20 Jun 2026 00:04:36 +0000
Files and hashes:         1: HUA-MjAeWHgKBwV8syty7K9G19k.crl (hash: DTOCooiQlgqCcqtZPvl0JQPGz+uF64PNe/CA0nth7Ek=)
                          2: 76EBCD3E8C9911ECB051A327C4F9AE02.roa (hash: 2+6KJayAWnQFJXHL2WauDqgBMec8ccqiiY0r+7oqsgs=)
                          3: F4639D76356211F09A66C487C4F9AE02.roa (hash: 1UN4KPGqZ6uoZhzgBcPw2J3Eo3ejGF+DzvEQ3A+zIIk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl
                          rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:04:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA645, serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
        Validity
            Not Before: Jun 13 00:04:36 2026 GMT
            Not After : Jun 20 00:04:36 2026 GMT
        Subject: CN=6a2c9e94-02d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:76:b2:ba:23:97:cb:f8:e2:fe:bd:50:91:0a:
                    c7:1f:72:77:4b:68:bb:d5:f3:0f:e1:e5:ff:ef:2e:
                    31:4c:84:5c:17:e8:13:69:eb:11:50:e2:25:10:10:
                    4d:8c:7e:2c:01:c4:86:c0:4b:04:1e:34:46:d0:1a:
                    e8:87:14:be:80:55:bc:17:ea:87:f2:f5:33:f1:c9:
                    38:b4:a5:51:d0:ed:95:65:84:9d:97:9a:3c:36:65:
                    c5:9c:a1:77:30:97:a9:fe:dd:6b:bb:46:3d:aa:d8:
                    4f:44:8b:2c:0d:1c:70:be:99:79:06:d7:df:01:07:
                    37:5f:09:57:f7:6a:ee:04:22:f2:96:b5:9e:61:de:
                    f8:c1:be:95:5d:8f:95:2b:86:35:b6:8a:db:e0:e9:
                    00:db:38:51:b8:d2:e2:38:91:2e:c7:8a:30:8d:00:
                    49:79:a2:94:c3:04:c5:13:07:70:7b:a9:6d:64:69:
                    00:d3:0f:1f:36:75:a1:90:39:29:64:25:f2:75:cf:
                    84:4a:93:11:11:ab:23:f4:20:20:a6:8c:95:e1:b7:
                    84:4b:6f:d1:f1:af:11:a7:dd:68:fb:db:f1:1b:10:
                    47:de:a9:27:67:68:d4:30:ec:27:d2:c8:07:e5:46:
                    b8:22:2f:8d:96:4b:9e:0d:01:8a:21:88:30:ff:a2:
                    cc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7A:62:68:C6:E0:49:C4:30:1C:BB:C6:B5:C8:A4:51:91:71:9A:94
            X509v3 Authority Key Identifier:
                keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:0a:12:d2:0d:da:b6:bd:b6:59:dc:52:35:44:65:f2:a2:63:
         61:24:a3:52:6f:e1:b2:1d:15:ad:ad:02:2e:ec:0b:55:5e:0e:
         09:26:d9:79:13:fd:df:ee:5c:55:47:9d:fd:9c:6b:b7:cc:6a:
         00:21:4e:52:0e:be:cc:5d:1b:57:d8:f4:a7:ff:54:1a:06:a3:
         45:4a:2a:98:1d:58:47:06:ab:9b:6f:4b:8e:46:ed:81:6a:e7:
         6b:16:8b:12:ef:da:fd:cc:aa:e5:57:30:0d:4e:fe:31:c1:19:
         c1:7a:85:bd:77:31:55:82:c7:6e:19:3c:92:c8:c3:be:6e:45:
         44:0b:23:50:1b:27:4e:1b:48:75:7b:6e:62:9a:d5:aa:7d:d1:
         30:7c:dc:17:4a:36:dc:e3:ed:c9:64:e7:77:9e:51:47:c6:ce:
         ad:5d:49:29:03:3b:4c:d2:ea:3b:ef:f0:c6:1f:06:c0:26:06:
         4e:2a:3e:c9:11:09:f6:20:fc:45:79:2d:1c:58:36:97:1d:94:
         bd:68:0f:a3:fa:67:6f:0c:8e:04:7f:df:b6:0d:02:07:f4:cd:
         07:32:fd:fd:c5:7b:13:6c:7f:75:39:64:fb:b7:63:1f:fb:dc:
         35:12:4a:ed:e1:67:47:7a:ce:7c:06:34:f3:6d:62:11:a2:f7:
         30:29:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:37:22 2026 by rpki-client