Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File:                     HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier:          l6uTkGHxBadeP2k7eXcnMqCEuTpqm0xH5SbaB7B00kg=
Subject key identifier:   9E:91:21:5E:F9:AC:66:27:42:AE:EB:BB:01:8D:29:27:EB:5C:8A:81
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       0714
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number:          06E7
Signing time:             Sun 30 Aug 2026 22:20:45 +0000
Manifest this update:     Sun 30 Aug 2026 22:20:45 +0000
Manifest next update:     Sun 06 Sep 2026 22:20:45 +0000
Files and hashes:         1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: gzky3gCYF2FLbyE1A+YQEQB5YQ3IkjUk47uzOzhltmQ=)
                          2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
                          3: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
                          4: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
                          5: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
                          6: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 22:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1812 (0x714)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Aug 30 22:20:45 2026 GMT
            Not After : Sep  6 22:20:45 2026 GMT
        Subject: CN=6a94acbd-c908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:7a:3a:7b:27:21:b9:50:3c:ed:df:ac:37:
                    0b:35:dc:4c:f8:67:1f:d8:62:b7:58:f4:48:c5:cd:
                    37:a6:b0:57:6c:32:c1:25:12:9d:da:78:35:89:dc:
                    0d:40:0b:03:98:4d:7a:68:f2:59:d3:61:a4:d9:52:
                    d8:f5:f3:5b:fb:d8:a5:49:ba:ab:83:cd:a4:15:39:
                    34:68:37:6a:29:20:a1:c0:42:21:18:70:5f:98:e3:
                    c6:43:d0:f2:64:ae:8f:e7:9c:ba:92:f1:44:c9:3d:
                    ea:d2:ee:04:ab:58:cd:d3:0e:fa:32:02:01:31:ab:
                    15:af:d1:11:2e:4b:61:94:79:f0:7b:25:b9:ab:ac:
                    b3:ad:cf:81:85:c8:e7:36:0f:14:71:fa:2c:05:cd:
                    75:bf:cb:66:09:8a:93:c9:ea:54:0b:3b:7c:46:2d:
                    e2:3c:ea:af:5c:86:81:db:1e:29:d5:c7:83:1d:95:
                    d3:a2:dd:5e:04:9b:e9:81:99:b4:9e:2c:08:9a:80:
                    c7:24:7f:e8:aa:83:97:e6:5a:af:66:a6:8b:d1:5c:
                    72:61:e3:10:87:a9:41:24:25:89:45:95:63:7d:45:
                    33:36:1e:0f:bb:ac:82:e1:e6:e3:bb:0d:4c:01:4e:
                    c9:99:0f:93:91:aa:aa:49:74:d4:d0:a4:31:10:78:
                    e4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:91:21:5E:F9:AC:66:27:42:AE:EB:BB:01:8D:29:27:EB:5C:8A:81
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:30:49:18:b3:1d:48:cb:42:74:c1:b1:4a:05:87:f1:fd:76:
         53:b2:d5:f3:c9:00:26:fd:07:35:b6:44:a4:ae:13:95:71:72:
         63:6f:cd:af:7c:4b:f3:73:89:2f:28:c3:24:36:54:28:78:12:
         c2:f5:61:b8:e1:ff:7e:62:8f:3a:33:9d:eb:ce:44:5e:92:55:
         8f:24:e2:d2:3a:bf:ca:fd:c4:ae:12:4e:7d:25:11:3a:68:c0:
         20:67:fe:ae:f6:86:28:00:ee:79:4a:11:32:59:b6:52:68:be:
         47:80:da:b3:e8:42:e2:c2:71:5b:2c:55:d6:10:f2:a3:5c:50:
         38:d6:ce:20:ff:ad:e3:a9:b5:6a:1d:d0:35:d9:70:44:77:dd:
         0a:5b:ac:4a:e5:cd:1d:aa:d7:dd:a3:a7:36:20:b5:e2:ba:1b:
         db:33:90:2e:0f:d8:b5:a4:c1:e0:f8:df:ee:73:92:d9:85:7f:
         1b:53:22:7c:e3:cb:02:66:2c:b0:7a:c6:25:f2:3b:09:53:7f:
         cc:5b:36:ea:f7:b4:1f:13:e3:6a:73:7c:d6:de:0d:67:4b:ee:
         f2:68:91:02:38:d3:12:00:9f:b4:c2:9b:ee:91:13:e6:a1:58:
         cc:7d:54:c1:99:32:b3:fa:67:81:00:99:bd:e2:cf:c1:52:4c:
         72:bc:0a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 20:14:19 2026 by rpki-client