Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
File:                     rHE1BMtD6841eUt90irqe7WCPEk.mft (raw, json)
Hash identifier:          guOODdW0T/06ioQB46tcOyxhd85MmPrs/KNsiAtBEVM=
Subject key identifier:   50:C5:94:0B:61:F3:54:CE:61:36:B1:56:78:53:A1:54:48:29:FA:D4
Authority key identifier: AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49
Certificate issuer:       /CN=A9186777/serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
Certificate serial:       0D09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
Manifest number:          0CF9
Signing time:             Mon 22 Jun 2026 18:20:22 +0000
Manifest this update:     Mon 22 Jun 2026 18:20:22 +0000
Manifest next update:     Mon 29 Jun 2026 18:20:22 +0000
Files and hashes:         1: rHE1BMtD6841eUt90irqe7WCPEk.crl (hash: CmE5Ew74h7MVqTJx36bH693zM2Ea655XggIlp9CKI3I=)
                          2: 54E193E20AD511EA8397192EC4F9AE02.roa (hash: 4IWb1AIWezAKoYALmO7zIehYCtFAdvZjNhim+DfuwqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl
                          rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3337 (0xd09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186777, serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
        Validity
            Not Before: Jun 22 18:20:22 2026 GMT
            Not After : Jun 29 18:20:22 2026 GMT
        Subject: CN=6a397ce6-ec0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:3c:ab:97:e9:2a:02:a7:8a:c2:e5:0c:a3:
                    02:65:9c:02:c0:15:a9:32:61:61:db:c6:42:5e:91:
                    6f:ed:c6:0a:72:0e:c8:f2:be:5d:4a:b3:68:a2:32:
                    f5:89:39:e8:1a:72:c5:79:b7:4f:d2:fa:4a:37:22:
                    c7:40:68:1d:e4:7c:52:41:db:af:54:76:a2:16:2c:
                    8a:88:e3:09:e6:d3:3e:4d:7d:f0:02:cb:e1:76:25:
                    32:41:f5:0b:bc:36:e4:0c:7a:33:7b:75:8a:13:ed:
                    cc:d9:97:d6:73:90:73:e7:eb:e7:d8:1f:55:9a:d8:
                    41:91:b1:26:00:4b:85:95:d7:75:c1:17:6d:08:13:
                    86:77:52:0e:4c:e3:44:8f:31:49:87:5d:c9:a1:86:
                    45:c7:02:09:b3:4d:d9:2f:5e:d4:bf:35:2a:6f:3d:
                    f8:00:40:9c:69:12:8c:c6:75:26:b8:4e:0e:ce:ea:
                    8e:13:34:85:ab:36:9a:c1:1b:c7:65:67:bb:6f:54:
                    5e:f4:84:bf:66:6b:6e:03:15:57:74:08:f1:2a:eb:
                    6b:55:5b:43:9d:99:97:49:3e:07:41:d1:ea:40:f7:
                    a2:9c:64:a5:8d:23:83:be:17:0e:97:14:8a:af:21:
                    ae:71:71:b0:85:c7:28:9f:3d:db:f5:d8:7d:8a:46:
                    c6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C5:94:0B:61:F3:54:CE:61:36:B1:56:78:53:A1:54:48:29:FA:D4
            X509v3 Authority Key Identifier:
                keyid:AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:b3:20:58:46:ab:45:ba:90:a1:e8:e4:1b:1b:c1:17:a0:3a:
         55:a4:16:40:a4:3f:4a:9e:28:97:57:62:7e:ca:2a:d5:c1:31:
         60:03:2a:f8:55:eb:54:9a:a7:02:70:c2:91:fa:6b:14:76:af:
         de:fe:44:1b:1c:77:5d:b6:52:18:de:5c:00:79:a3:95:7a:a5:
         ff:de:ee:14:0b:b6:1a:ca:83:91:87:45:68:65:24:97:c0:57:
         d2:2f:a8:a3:51:48:3a:91:1c:c7:89:ac:82:b6:e0:dc:96:86:
         d2:bf:81:05:84:15:3b:21:62:39:0b:2b:f9:6c:ab:73:01:51:
         bd:34:05:af:26:1f:1a:02:4b:ab:fb:b5:06:d9:7f:c6:ee:3f:
         a0:56:d9:4f:fa:6c:c9:5a:a4:77:1b:5a:32:75:70:fa:21:3c:
         c1:67:b7:2c:2c:fb:26:6a:50:4c:7c:72:a7:6b:fa:94:5a:39:
         ed:4c:e4:71:e2:72:18:2c:52:76:a9:36:c3:9a:ee:71:d6:f1:
         75:88:b5:8a:f3:bd:4f:1f:0a:0d:9d:75:fb:0e:26:3b:e2:8e:
         d6:58:42:12:cd:20:7d:3f:c9:b7:3b:9e:45:40:b0:f3:7a:9e:
         cd:14:dc:79:e3:6e:f1:4b:47:57:45:da:23:7f:30:1a:6c:92:
         d2:3e:07:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY3NzcxMTAvBgNVBAUTKEFDNzEzNTA0Q0I0M0VCQ0UzNTc5NEI3REQyMkFFQTdC
QjU4MjNDNDkwHhcNMjYwNjIyMTgyMDIyWhcNMjYwNjI5MTgyMDIyWjAYMRYwFAYD
VQQDEw02YTM5N2NlNi1lYzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvuM8q5fpKgKnisLlDKMCZZwCwBWpMmFh28ZCXpFv7cYKcg7I8r5dSrNoojL1
iTnoGnLFebdP0vpKNyLHQGgd5HxSQduvVHaiFiyKiOMJ5tM+TX3wAsvhdiUyQfUL
vDbkDHoze3WKE+3M2ZfWc5Bz5+vn2B9VmthBkbEmAEuFldd1wRdtCBOGd1IOTONE
jzFJh13JoYZFxwIJs03ZL17UvzUqbz34AECcaRKMxnUmuE4OzuqOEzSFqzaawRvH
ZWe7b1Re9IS/ZmtuAxVXdAjxKutrVVtDnZmXST4HQdHqQPeinGSljSODvhcOlxSK
ryGucXGwhcconz3b9dh9ikbG6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDFlAth
81TOYTaxVnhToVRIKfrUMB8GA1UdIwQYMBaAFKxxNQTLQ+vONXlLfdIq6nu1gjxJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njc3Ny9GREFBNzcyMDBB
RDMxMUVBOUFERjc3MkNDNEY5QUUwMi9ySEUxQk10RDY4NDFlVXQ5MGlycWU3V0NQ
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JIRTFCTXRENjg0MWVVdDkwaXJxZTdXQ1BFay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Njc3Ny9GREFBNzcyMDBBRDMxMUVBOUFERjc3MkNDNEY5QUUwMi9ySEUxQk10RDY4
NDFlVXQ5MGlycWU3V0NQRWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0rMgWEarRbqQoejkGxvBF6A6VaQWQKQ/Sp4ol1difsoq1cExYAMq+FXrVJqn
AnDCkfprFHav3v5EGxx3XbZSGN5cAHmjlXql/97uFAu2GsqDkYdFaGUkl8BX0i+o
o1FIOpEcx4msgrbg3JaG0r+BBYQVOyFiOQsr+WyrcwFRvTQFryYfGgJLq/u1Btl/
xu4/oFbZT/psyVqkdxtaMnVw+iE8wWe3LCz7JmpQTHxyp2v6lFo57UzkceJyGCxS
dqk2w5rucdbxdYi1ivO9Tx8KDZ11+w4mO+KO1lhCEs0gfT/JtzueRUCw83qezRTc
eeNu8UtHV0XaI38wGmyS0j4HXg==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:39 2026 by rpki-client