Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft
File:                     HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft (raw, json)
Hash identifier:          6FFqe/aXp9lv81pIC3rXvd0C7Q3vrNZBdkOPLgNSvgo=
Subject key identifier:   29:EC:C4:E6:1A:C6:B6:02:86:43:07:C0:D5:13:A5:84:1D:4D:2B:9A
Authority key identifier: 1D:92:E3:63:F9:A9:BB:24:DE:78:56:47:1E:E8:41:F1:DC:8D:C9:03
Certificate issuer:       /CN=A915FB34/serialNumber=1D92E363F9A9BB24DE7856471EE841F1DC8DC903
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HZLjY_mpuyTeeFZHHuhB8dyNyQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft
Manifest number:          26
Signing time:             Tue 27 Oct 2026 09:06:29 +0000
Manifest this update:     Tue 27 Oct 2026 09:06:28 +0000
Manifest next update:     Tue 03 Nov 2026 09:06:28 +0000
Files and hashes:         1: HZLjY_mpuyTeeFZHHuhB8dyNyQM.crl (hash: TGgGerJyqngooAOvXhwly4zImIIWHJQAGhm0FRgqWrc=)
                          2: E5D570A699A011F191D9C4ED6E11F970.roa (hash: 8Y+XAwfwrJgI3QCe0larDwfJRotuGixvON+EExk7AV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.crl
                          rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HZLjY_mpuyTeeFZHHuhB8dyNyQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 09:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FB34, serialNumber=1D92E363F9A9BB24DE7856471EE841F1DC8DC903
        Validity
            Not Before: Oct 27 09:06:28 2026 GMT
            Not After : Nov  3 09:06:28 2026 GMT
        Subject: CN=6ae06995-be31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:89:70:ff:46:cb:8e:44:9f:85:0a:60:10:a3:
                    fc:b2:d2:24:ec:a7:92:d4:44:15:5d:40:90:4f:cb:
                    30:45:f9:92:15:96:42:0d:79:ac:b0:b1:04:8a:af:
                    6d:71:86:d9:23:2c:79:9c:f2:60:51:e2:fd:02:ae:
                    7b:52:0d:b1:2b:5e:04:0d:41:16:b7:38:2d:9d:2f:
                    70:89:ee:21:e6:0f:63:88:23:14:38:0b:df:3c:e8:
                    20:06:eb:7d:c7:8b:8c:bd:ec:29:71:2a:c9:96:31:
                    cd:db:1f:99:7d:9d:37:27:7e:14:d0:73:00:32:a1:
                    c9:91:fc:98:cf:03:5a:bc:98:ad:f9:bf:bf:10:d2:
                    7b:21:b7:8b:7a:ff:86:f5:ea:fb:09:37:f8:70:6e:
                    f8:cf:25:a7:5c:c2:58:8a:de:42:e3:f6:6b:36:80:
                    e1:30:5e:cf:51:6d:e9:69:25:a9:8f:8a:01:2c:07:
                    cd:ee:17:3c:49:85:a3:b9:82:b4:90:74:33:52:9b:
                    b0:04:d3:25:d2:a8:ac:4f:6e:c4:93:92:72:61:61:
                    32:02:48:4d:48:8f:85:96:b6:5b:f7:e4:0c:ed:93:
                    e2:c0:d5:d0:09:78:55:45:13:8c:7c:1d:e7:cb:39:
                    cf:7d:94:8c:93:cc:97:8f:3d:fd:84:81:c4:dc:a0:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EC:C4:E6:1A:C6:B6:02:86:43:07:C0:D5:13:A5:84:1D:4D:2B:9A
            X509v3 Authority Key Identifier:
                keyid:1D:92:E3:63:F9:A9:BB:24:DE:78:56:47:1E:E8:41:F1:DC:8D:C9:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HZLjY_mpuyTeeFZHHuhB8dyNyQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3a:93:2d:ad:08:43:03:31:46:cc:f7:1a:f4:5f:70:5d:f7:
         48:14:d2:b0:d7:cc:ef:ce:c6:d7:b7:48:db:03:22:b6:e4:e3:
         e9:25:b3:78:0a:0f:98:c1:8d:45:d4:51:98:b5:25:ec:80:f9:
         7f:6f:42:45:37:6e:b1:27:bd:f8:04:42:c7:5e:e1:c8:27:7a:
         c7:a5:00:d4:b1:22:fa:64:a3:20:a9:82:91:42:82:bb:fc:a2:
         0e:4a:e7:f0:db:a0:23:27:24:90:89:66:29:15:f9:08:c1:e3:
         86:a8:74:a1:1b:a9:01:7b:2f:ef:40:4f:f6:0f:3b:cd:92:81:
         79:e7:93:1d:7e:d8:15:16:1e:a1:30:98:5a:8b:04:d2:42:db:
         3a:08:42:44:a5:9b:f1:3a:ca:28:af:8b:19:79:f5:15:d5:60:
         2a:af:fc:30:ee:f1:21:22:0a:c2:8b:b9:6b:1d:74:fc:df:1e:
         2e:cb:c3:8a:6a:a9:a3:9a:8b:d4:4e:9f:94:b1:a3:9a:90:76:
         39:c8:04:9b:8b:5c:6e:87:2a:9d:8e:f7:72:97:10:d3:1a:bd:
         85:28:8c:b8:64:bb:89:57:72:77:79:a0:c7:47:00:3f:e1:77:
         1b:b5:41:44:35:34:1c:a2:f6:2c:56:d9:5c:30:1d:ed:4f:a5:
         f3:3a:df:2a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RkIzNDExMC8GA1UEBRMoMUQ5MkUzNjNGOUE5QkIyNERFNzg1NjQ3MUVFODQxRjFE
QzhEQzkwMzAeFw0yNjEwMjcwOTA2MjhaFw0yNjExMDMwOTA2MjhaMBgxFjAUBgNV
BAMTDTZhZTA2OTk1LWJlMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDiiXD/RsuORJ+FCmAQo/yy0iTsp5LURBVdQJBPyzBF+ZIVlkINeaywsQSKr21x
htkjLHmc8mBR4v0CrntSDbErXgQNQRa3OC2dL3CJ7iHmD2OIIxQ4C9886CAG633H
i4y97ClxKsmWMc3bH5l9nTcnfhTQcwAyocmR/JjPA1q8mK35v78Q0nsht4t6/4b1
6vsJN/hwbvjPJadcwliK3kLj9ms2gOEwXs9RbelpJamPigEsB83uFzxJhaO5grSQ
dDNSm7AE0yXSqKxPbsSTknJhYTICSE1Ij4WWtlv35Aztk+LA1dAJeFVFE4x8HefL
Oc99lIyTzJePPf2EgcTcoICRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKezE5hrG
tgKGQwfA1ROlhB1NK5owHwYDVR0jBBgwFoAUHZLjY/mpuyTeeFZHHuhB8dyNyQMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGQjM0LzNEQkQxODEwOTlB
MDExRjFBNEVDRDJBRDZEMTFGOTcwL0haTGpZX21wdXlUZWVGWkhIdWhCOGR5TnlR
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSFpMallfbXB1eVRlZUZaSEh1aEI4ZHlOeVFNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG
QjM0LzNEQkQxODEwOTlBMDExRjFBNEVDRDJBRDZEMTFGOTcwL0haTGpZX21wdXlU
ZWVGWkhIdWhCOGR5TnlRTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAyOpMtrQhDAzFGzPca9F9wXfdIFNKw18zvzsbXt0jbAyK25OPpJbN4Cg+YwY1F
1FGYtSXsgPl/b0JFN26xJ734BELHXuHIJ3rHpQDUsSL6ZKMgqYKRQoK7/KIOSufw
26AjJySQiWYpFfkIweOGqHShG6kBey/vQE/2DzvNkoF555MdftgVFh6hMJhaiwTS
Qts6CEJEpZvxOsoor4sZefUV1WAqr/ww7vEhIgrCi7lrHXT83x4uy8OKaqmjmovU
Tp+UsaOakHY5yASbi1xuhyqdjvdylxDTGr2FKIy4ZLuJV3J3eaDHRwA/4XcbtUFE
NTQcovYsVtlcMB3tT6XzOt8q
-----END CERTIFICATE-----
Generated at Wed Oct 28 21:39:06 2026 by rpki-client