Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
File:                     h7LA6ClUHS71JmOF6zlGuNUpBgg.mft (raw, json)
Hash identifier:          zS0EMo2qf3mvRZUCudMMOApaT6eUBF1NARFeGDEtPSs=
Subject key identifier:   00:3D:59:A3:60:B6:7B:5D:53:06:03:94:15:A5:2A:94:75:16:21:90
Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08
Certificate issuer:       /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
Certificate serial:       0914
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
Manifest number:          08E7
Signing time:             Wed 20 May 2026 20:28:23 +0000
Manifest this update:     Wed 20 May 2026 20:28:23 +0000
Manifest next update:     Wed 27 May 2026 20:28:23 +0000
Files and hashes:         1: h7LA6ClUHS71JmOF6zlGuNUpBgg.crl (hash: fusqbnp4QzSV785VwCZCQVRwkeueOLod1kfo/F45OvI=)
                          2: 3619A9DA67B411F097A2770AC4F9AE02.roa (hash: 7njbVYsd3V87sSM3WNmywbGIw28FJJd2oN7m9l4XA/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl
                          rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2324 (0x914)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5B0, serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
        Validity
            Not Before: May 20 20:28:23 2026 GMT
            Not After : May 27 20:28:23 2026 GMT
        Subject: CN=6a0e1967-a918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:72:03:5e:f4:36:95:ca:4a:f6:c1:c5:78:
                    72:c4:ea:be:f8:e8:04:e4:f4:5b:21:d0:dc:1c:93:
                    8d:0f:76:98:54:4c:7f:d6:ea:f4:5f:de:16:55:0d:
                    e7:85:02:f5:a8:ee:91:0a:4e:99:24:19:1c:2a:37:
                    ee:c2:30:d4:ef:a6:ae:d1:b1:02:62:17:d0:65:51:
                    6b:dd:5e:49:76:89:2a:16:ab:af:cb:f6:6d:e7:de:
                    8c:76:cf:60:cf:bd:57:61:4b:bc:a1:26:83:40:bc:
                    dc:51:47:de:0b:f7:19:ef:26:d8:63:ba:88:21:7c:
                    d2:4d:5e:91:0a:4a:64:3a:d9:65:8f:c6:95:a0:99:
                    b8:56:6b:3d:bd:6d:64:67:dd:1c:05:f4:53:1b:ad:
                    5a:ae:fd:b6:96:77:49:a9:66:e4:92:d7:1e:34:2d:
                    a0:90:e6:6e:99:10:42:cf:f8:61:e5:2b:e7:28:c7:
                    60:dd:22:1e:a4:2a:25:e2:46:6b:7e:e5:4c:7c:14:
                    fe:d1:eb:b7:f5:1d:cd:fa:c7:65:1b:75:c3:87:d1:
                    3e:37:48:30:d9:3a:ec:3b:de:46:bd:f3:82:2e:2d:
                    71:42:59:8b:62:82:e8:fb:89:41:2b:4f:ce:9f:b2:
                    0d:98:1b:8f:c7:8b:e8:8f:ef:9c:b5:94:29:45:e9:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3D:59:A3:60:B6:7B:5D:53:06:03:94:15:A5:2A:94:75:16:21:90
            X509v3 Authority Key Identifier:
                keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:88:92:9e:82:a4:55:26:25:48:a1:c9:84:31:d6:82:06:e4:
         2f:76:96:49:47:76:f0:a2:b4:9e:bc:c7:37:54:5f:b9:f6:c6:
         70:03:09:55:8e:41:ca:5e:6b:86:df:98:67:10:e2:da:e8:ac:
         d2:18:8e:7a:04:e5:45:7e:eb:6e:bf:34:11:51:43:1d:19:40:
         b7:3e:82:03:66:5b:0c:aa:0e:53:bd:eb:e9:ee:cc:72:69:0d:
         80:8e:99:09:b0:d4:73:42:45:00:6e:4e:ec:7d:3f:b8:2c:ba:
         b6:38:d1:a5:b7:0b:30:a5:44:bb:42:af:9c:30:8b:9a:c0:e1:
         f6:e9:80:a0:c9:0a:29:1a:51:92:7d:78:d6:ad:4a:09:b1:30:
         c0:9c:89:82:8e:6c:dc:3a:45:31:00:7a:55:14:60:40:a6:55:
         fb:5d:d6:01:4d:bc:cf:f2:15:1b:9f:98:a1:52:91:82:7c:69:
         eb:bb:46:6e:4a:a2:11:28:18:23:5f:82:ab:65:21:a4:ad:03:
         20:d5:9e:b3:10:03:40:c0:9b:64:f5:90:01:d9:b2:04:74:03:
         cf:bf:98:fd:e5:61:b7:ea:bd:48:c9:76:b4:7a:f3:94:e1:15:
         7b:86:ed:b2:4b:51:95:c8:48:34:6a:53:01:79:b4:7e:3c:7f:
         89:dd:4a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:17:20 2026 by rpki-client