Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
File:                     Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json)
Hash identifier:          9X97EPiqqj+qEsZEeLW9xkferowVuc4XETKY/OTwd4A=
Subject key identifier:   6F:43:40:0D:B4:B2:DE:EE:3F:DC:6E:09:8A:34:88:D5:3A:D5:11:33
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Certificate issuer:       /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial:       025A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
Manifest number:          0253
Signing time:             Tue 21 Jul 2026 03:30:27 +0000
Manifest this update:     Tue 21 Jul 2026 03:30:27 +0000
Manifest next update:     Tue 28 Jul 2026 03:30:27 +0000
Files and hashes:         1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: Am/p/0qHTz7WNwCLzwXZm7qhfvL24C2P66AneJHAaQY=)
                          2: C369BA98260D11F082934618C4F9AE02.roa (hash: cXQDcqjGHQK7UALmkZP5e0hc3VzG0s7yGBDOUKs2gKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
                          rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 03:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
        Validity
            Not Before: Jul 21 03:30:27 2026 GMT
            Not After : Jul 28 03:30:27 2026 GMT
        Subject: CN=6a5ee7d3-d897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:38:5c:02:b8:6f:7c:f3:22:c7:ed:fa:9b:6d:
                    6c:d0:b5:d4:8c:87:cc:b5:54:28:78:0a:6c:ac:2b:
                    47:03:f5:dd:ef:94:d2:c4:ba:fd:16:d1:27:7e:06:
                    b7:83:a6:6f:c3:1f:f2:7c:27:35:bc:6c:e9:13:cf:
                    56:41:bd:85:f6:af:f6:0e:34:43:72:a3:e6:f5:2b:
                    19:4e:e4:4d:35:bc:17:f1:ff:df:4a:05:59:d3:09:
                    d3:dc:ec:13:0a:8f:70:94:bf:61:19:b3:94:c2:88:
                    72:42:3a:d1:32:c3:05:db:bf:82:2f:68:95:8b:45:
                    59:04:ca:36:fa:9d:fb:62:a3:0c:52:e3:84:74:c4:
                    5b:87:b0:00:d1:61:6f:63:e6:fe:a5:c5:52:5b:28:
                    12:d3:e5:8a:ca:ea:62:38:39:b5:5f:89:41:ee:cd:
                    15:a8:88:ae:f0:ee:a0:f9:ab:a1:5e:3c:fe:cc:ba:
                    bd:32:39:f3:fe:52:66:27:33:c8:de:6b:10:6b:08:
                    99:52:66:be:a2:01:15:72:c8:4d:48:a4:85:7e:59:
                    76:23:6c:d2:0b:e9:d3:fd:bb:4e:2a:63:04:0a:55:
                    3c:62:52:e1:3b:ab:47:3d:ab:53:fc:d5:3f:9c:fd:
                    b7:9c:bf:c3:d8:6e:e9:03:7a:29:42:3f:b6:91:17:
                    2f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:43:40:0D:B4:B2:DE:EE:3F:DC:6E:09:8A:34:88:D5:3A:D5:11:33
            X509v3 Authority Key Identifier:
                keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:10:42:51:ca:06:dd:78:5b:56:a9:4f:16:86:2d:18:d7:
         64:8e:7d:c2:fb:69:db:e5:59:32:6d:aa:7c:50:2f:1a:73:a9:
         d3:cc:15:eb:65:cf:51:c7:54:ab:cf:a5:76:15:e9:96:76:4b:
         8e:cc:a2:72:23:9d:ae:68:9c:bb:c4:4d:af:89:db:f3:a9:04:
         01:82:6c:62:2d:e2:c2:53:67:cf:75:b8:ad:e8:e5:3b:ca:7b:
         46:38:58:3e:21:4e:24:32:ce:80:04:77:68:34:f1:7b:5a:d2:
         26:c3:cc:dc:23:05:fd:5f:87:cd:fc:bf:db:80:1a:60:34:e6:
         5b:3f:2b:12:d6:c5:55:f8:aa:cf:2d:83:00:d9:91:9c:0f:16:
         ec:b6:bf:6d:30:30:4e:0d:ad:ee:b2:aa:0c:c9:a0:a7:ec:4e:
         aa:95:e7:92:8d:1c:dd:0d:cd:81:9a:91:76:2f:db:d5:f4:bf:
         34:60:84:1a:37:73:75:f1:ea:22:e0:44:38:1c:a2:d1:79:2a:
         97:c7:ae:4b:1c:64:7a:cd:fc:29:39:d0:7e:be:41:a3:47:64:
         34:45:a4:6b:6a:dc:60:91:68:7c:eb:ca:3e:a1:be:c6:fb:c9:
         f9:a2:03:12:cc:a8:d2:64:96:c7:bd:f2:45:1e:5b:65:07:41:
         d5:b0:04:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:45:01 2026 by rpki-client