Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
File:                     hTkiUckhyp9RnbkRxagKd9_jVMQ.mft (raw, json)
Hash identifier:          zf7rnW44kgpOgESOKizcuhzgU+JmpkTQpT74LSaVkjY=
Subject key identifier:   83:44:4F:89:AC:B7:DC:C1:0A:30:C3:B3:39:5E:CD:7D:ED:42:91:12
Authority key identifier: 85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
Certificate issuer:       /CN=A915B358/serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
Manifest number:          6A
Signing time:             Tue 21 Jul 2026 09:52:36 +0000
Manifest this update:     Tue 21 Jul 2026 09:52:35 +0000
Manifest next update:     Tue 28 Jul 2026 09:52:35 +0000
Files and hashes:         1: hTkiUckhyp9RnbkRxagKd9_jVMQ.crl (hash: k6R/6S+5rUcx1d0TdYk7FQOdAt9Tfsbtux8zEevak5M=)
                          2: B1078FAAF1C411F0A342834F396F56BC.roa (hash: +jzkYrDbV9l56QxlBYuE37I0us4Fnv7wiflNV5QShGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl
                          rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 09:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B358, serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
        Validity
            Not Before: Jul 21 09:52:35 2026 GMT
            Not After : Jul 28 09:52:35 2026 GMT
        Subject: CN=6a5f4164-0624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:8f:13:e4:8e:93:71:b8:15:43:02:a5:9d:
                    13:55:33:78:81:8a:fc:56:1c:30:2f:92:98:67:1f:
                    67:ad:c0:47:30:1d:26:fb:f8:4b:88:be:4f:9d:54:
                    44:74:5e:da:3c:79:68:61:90:74:63:99:86:f2:98:
                    d1:a3:b4:0b:f5:e3:0f:4a:8f:89:6e:2d:0e:af:4a:
                    6f:4e:e5:f6:81:b1:47:1c:ca:bd:22:a5:d3:70:30:
                    21:c7:dd:25:95:ad:e5:23:1a:ac:54:53:62:5a:d5:
                    29:75:e2:9a:2a:31:c8:20:5c:4d:94:b4:35:7e:43:
                    05:3a:38:78:47:4c:6f:2e:29:79:f9:c7:20:92:c6:
                    1d:71:7d:91:8d:f4:b0:ca:6f:61:60:9d:92:6d:7b:
                    de:ef:4c:3a:7b:e0:07:d9:b2:62:3d:a6:04:30:32:
                    5d:05:1a:98:b0:22:d8:81:6c:f5:27:e9:b3:86:99:
                    f4:b2:d7:52:9b:7b:3d:52:37:18:ec:c9:a4:4c:5c:
                    97:b3:c0:87:0e:48:dc:d0:d8:42:e6:45:83:86:45:
                    ca:47:54:b1:68:6d:72:ba:bf:9f:03:56:13:77:26:
                    79:0f:ef:28:e7:98:68:a7:1f:71:8e:92:be:d5:b5:
                    e6:01:e1:3f:b2:d6:d5:d2:08:08:97:b1:4e:74:4c:
                    19:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:44:4F:89:AC:B7:DC:C1:0A:30:C3:B3:39:5E:CD:7D:ED:42:91:12
            X509v3 Authority Key Identifier:
                keyid:85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:83:ea:3d:cf:ef:a0:ef:7f:28:fa:d5:1b:1f:6c:55:28:13:
         02:27:79:43:02:a1:a1:74:94:cb:0e:63:cf:b8:68:5e:57:8d:
         04:a5:ca:8b:da:1f:b3:0c:01:15:03:81:f8:a4:d6:be:43:24:
         42:9a:76:8b:75:fb:0a:a3:64:25:2a:d4:38:6a:db:dd:32:fd:
         79:d3:70:cc:41:a9:11:89:b4:24:4e:00:a1:96:72:2a:cb:0d:
         f6:a8:45:16:d6:b1:31:d5:16:d9:2f:ab:b5:98:77:d7:b3:bc:
         a1:79:1a:78:f4:db:71:f7:be:39:ec:34:3f:85:b6:66:ad:e9:
         b6:d2:d7:cf:f1:1a:2a:0b:27:53:d7:84:cc:4d:ad:f3:54:01:
         5c:db:51:34:2c:15:d2:12:22:1d:e8:da:b6:6e:51:b9:88:1d:
         68:75:58:18:ca:df:a2:e4:44:12:78:27:df:56:0b:63:80:1f:
         e9:f9:9a:70:58:01:60:93:3e:2c:9b:2a:02:4a:b2:31:3a:7f:
         91:ca:cf:1f:83:7a:e1:0b:ce:c0:0d:ae:b3:49:fe:85:a3:3e:
         02:5e:12:7a:04:9f:5e:26:97:19:30:97:1b:59:cb:5c:5c:95:
         df:05:9e:29:06:51:27:c5:cd:58:58:6e:36:69:81:38:48:47:
         c9:66:7d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:06:24 2026 by rpki-client