Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
File:                     hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft (raw, json)
Hash identifier:          rW9Ptf/OhhOE/y4kYoigV2yUsb/48nhuJXCVrztgeCw=
Subject key identifier:   B5:34:5A:07:EC:6F:B2:7A:BF:2F:EA:C0:49:51:DC:43:87:3B:CD:18
Authority key identifier: 85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8
Certificate issuer:       /CN=A915BC71/serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
Manifest number:          34
Signing time:             Mon 27 Jul 2026 11:01:36 +0000
Manifest this update:     Mon 27 Jul 2026 11:01:35 +0000
Manifest next update:     Mon 03 Aug 2026 11:01:35 +0000
Files and hashes:         1: hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl (hash: 6SirtjEZRD+8yHHzfQd8CAHFMksTTLaywxgsBKH2+bc=)
                          2: 04DF866C3F0611F1B36B08F4C9833773.roa (hash: ox5XcIpV2S9UAzm7R4v0XD8a/1yL0AoCYGD4B4pq/A8=)
                          3: 2BC7F9083F0611F1ADBFCBF4C9833773.roa (hash: fjBBp9RAWRX1PPIA5V4SattdM60ZaCT18eTtLAtSLSY=)
                          4: VOwD2XwATr-c2sXH9st_AxV1K78.asa (hash: b+lmi/ZHvjZionERqzvs5ZBjeHGTFVv1O4Vs+9Qq7Ag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl
                          rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC71, serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8
        Validity
            Not Before: Jul 27 11:01:35 2026 GMT
            Not After : Aug  3 11:01:35 2026 GMT
        Subject: CN=6a673a90-f0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3f:46:c6:66:31:ae:90:57:96:37:d4:6c:fd:
                    04:b2:9f:f0:2d:24:99:11:2c:67:4c:6e:5f:fd:e3:
                    70:82:ef:e5:5a:4b:30:a0:bc:4d:a7:06:6c:95:02:
                    1a:23:d9:6c:8c:bb:7f:62:35:ce:ef:ec:7b:00:68:
                    a2:88:76:97:5e:79:83:52:d5:0e:2c:47:9a:3d:49:
                    d0:65:51:52:9c:0f:4b:d9:a3:5b:21:46:3f:de:bb:
                    84:23:04:32:53:18:34:e6:8c:bd:fe:bb:62:cf:b0:
                    9e:e2:30:f3:9f:fa:4d:62:f4:7a:5d:67:de:a7:7f:
                    b1:c8:74:09:c3:ad:1e:ec:72:bd:25:f3:41:c2:a8:
                    be:5c:ae:28:ab:dc:d7:3c:d4:e7:ac:35:93:01:4e:
                    08:08:58:0b:dd:f7:45:12:c7:29:4f:d4:8a:e5:fa:
                    f9:f3:9f:1c:a4:e6:10:22:c6:12:e8:75:06:9e:5b:
                    20:1c:ae:71:3e:70:c9:1b:37:fc:7d:b8:9e:f6:1c:
                    f8:9e:43:ee:9f:c1:87:d4:5e:94:23:e1:27:d7:ba:
                    e3:c5:d9:b7:c0:75:99:4e:92:7c:35:a8:d4:72:8c:
                    c0:98:43:7e:5e:25:ee:2c:4d:4c:8d:d7:13:29:60:
                    d6:99:1d:e4:8f:9c:ea:6e:92:ad:1f:50:8d:7f:6a:
                    1b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:34:5A:07:EC:6F:B2:7A:BF:2F:EA:C0:49:51:DC:43:87:3B:CD:18
            X509v3 Authority Key Identifier:
                keyid:85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:05:73:f6:72:52:6a:13:ad:39:87:48:de:b5:5e:68:b6:7a:
         f7:de:5c:f7:18:5a:e4:8c:cc:9e:ee:7d:74:65:72:7f:84:6a:
         e2:ad:35:27:f8:2a:7d:ed:ef:b1:01:9e:d5:2a:37:82:82:d0:
         07:4c:4a:b0:75:cf:02:d1:5c:8b:5a:ae:0f:f4:18:1b:6c:cf:
         99:03:9b:00:4e:ba:83:e1:72:91:1e:c8:6d:cc:e5:35:32:c3:
         8d:13:25:02:d3:8b:bf:99:f8:30:ff:d6:03:0a:56:cd:91:b1:
         77:5a:bf:18:35:8f:ae:5d:00:d0:30:4c:94:3c:60:04:2a:fe:
         6d:9c:35:54:45:1c:1a:ae:fe:d6:13:e4:21:dd:11:c9:9d:d8:
         3d:8f:37:aa:37:70:3c:90:0c:42:53:06:8c:07:a6:50:2a:72:
         37:b7:66:b9:c3:83:df:0c:ab:c5:81:b8:b3:82:c7:b3:dc:1d:
         4e:ee:96:60:81:30:62:2d:65:93:2a:da:f2:96:36:a3:7e:6b:
         69:b1:3c:f9:95:3f:71:df:3b:41:2d:de:36:36:22:24:3a:ee:
         fd:7a:6f:57:0a:3e:32:77:3f:7c:db:b7:de:e9:e2:96:57:55:
         4f:d2:e1:bb:ca:69:9f:12:e3:dd:57:f6:dd:77:37:83:2f:d3:
         c6:64:a1:59
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QkM3MTExMC8GA1UEBRMoODUxMkU5Njk5NTZBQ0I3RDNFNzYwRUQ5ODZFMUJFRUEz
RjhBQzBGODAeFw0yNjA3MjcxMTAxMzVaFw0yNjA4MDMxMTAxMzVaMBgxFjAUBgNV
BAMTDTZhNjczYTkwLWYwZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCPP0bGZjGukFeWN9Rs/QSyn/AtJJkRLGdMbl/943CC7+VaSzCgvE2nBmyVAhoj
2WyMu39iNc7v7HsAaKKIdpdeeYNS1Q4sR5o9SdBlUVKcD0vZo1shRj/eu4QjBDJT
GDTmjL3+u2LPsJ7iMPOf+k1i9HpdZ96nf7HIdAnDrR7scr0l80HCqL5criir3Nc8
1OesNZMBTggIWAvd90USxylP1Irl+vnznxyk5hAixhLodQaeWyAcrnE+cMkbN/x9
uJ72HPieQ+6fwYfUXpQj4SfXuuPF2bfAdZlOknw1qNRyjMCYQ35eJe4sTUyN1xMp
YNaZHeSPnOpukq0fUI1/ahtFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtTRaB+xv
snq/L+rASVHcQ4c7zRgwHwYDVR0jBBgwFoAUhRLpaZVqy30+dg7ZhuG+6j+KwPgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCQzcxLzkxQkUyQkMwM0Yw
NTExRjFCRTNGQzBDMkM5ODMzNzczL2hSTHBhWlZxeTMwLWRnN1podUctNmotS3dQ
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaFJMcGFaVnF5MzAtZGc3Wmh1Ry02ai1Ld1BnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC
QzcxLzkxQkUyQkMwM0YwNTExRjFCRTNGQzBDMkM5ODMzNzczL2hSTHBhWlZxeTMw
LWRnN1podUctNmotS3dQZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC1BXP2clJqE605h0jetV5otnr33lz3GFrkjMye7n10ZXJ/hGrirTUn+Cp97e+x
AZ7VKjeCgtAHTEqwdc8C0VyLWq4P9BgbbM+ZA5sATrqD4XKRHshtzOU1MsONEyUC
04u/mfgw/9YDClbNkbF3Wr8YNY+uXQDQMEyUPGAEKv5tnDVURRwarv7WE+Qh3RHJ
ndg9jzeqN3A8kAxCUwaMB6ZQKnI3t2a5w4PfDKvFgbizgsez3B1O7pZggTBiLWWT
KtryljajfmtpsTz5lT9x3ztBLd42NiIkOu79em9XCj4ydz9827fe6eKWV1VP0uG7
ymmfEuPdV/bddzeDL9PGZKFZ
-----END CERTIFICATE-----
Generated at Tue Jul 28 07:36:44 2026 by rpki-client