Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
File:                     SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json)
Hash identifier:          WF6+9vho9T/TWcuoGMuLB0s00jL3pCji/XFue2x/pH8=
Subject key identifier:   82:27:52:7D:DB:80:58:2F:A0:85:91:94:4E:21:CC:C0:FE:DB:B6:E1
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Certificate issuer:       /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial:       02AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
Manifest number:          028F
Signing time:             Fri 15 May 2026 01:56:15 +0000
Manifest this update:     Fri 15 May 2026 01:56:14 +0000
Manifest next update:     Fri 22 May 2026 01:56:14 +0000
Files and hashes:         1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: NIw4dcF3zM1NIUlD6cMOmYQViJNUYr7ZLZpB/v6FYc8=)
                          2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: kt58U+JdwwoWOrJfOurK3ZzukKhfcE+5o9qCOQ61N04=)
                          3: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: 3thOWBScBaW27emyNgWIB6Tm9y3isPfdf3d0Ik133Zg=)
                          4: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: RnuV+1DoXIf2HDUvOKaEZgCO7oWGACeQmNMNZ7oeAtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
                          rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 01:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
        Validity
            Not Before: May 15 01:56:14 2026 GMT
            Not After : May 22 01:56:14 2026 GMT
        Subject: CN=6a067d3e-e4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:dd:aa:a9:23:22:d5:77:cc:e2:7c:1d:70:
                    bf:8f:81:8b:9a:02:b2:9b:a9:a0:51:51:c7:7b:9b:
                    96:53:61:0e:9d:76:78:f4:6b:f3:79:b6:d9:a6:5a:
                    65:6a:28:dd:d8:50:8c:57:7e:f8:1a:41:cb:c3:46:
                    87:4b:4c:a9:b3:9b:d7:a8:63:33:0a:50:4d:18:ee:
                    91:51:7b:a5:b5:ce:1b:15:09:15:0c:f7:41:16:da:
                    f0:75:a2:e9:4b:79:4a:5a:85:3c:3b:84:25:0e:ab:
                    c3:49:78:7f:eb:67:6e:36:96:63:2a:61:65:1b:77:
                    d8:2d:f8:c5:6e:c3:9e:67:48:0e:cd:aa:1c:14:d2:
                    99:f8:87:e0:88:ae:02:95:80:8d:8b:30:71:d6:60:
                    77:29:b9:d7:2d:8a:84:9a:52:ac:c6:ed:40:03:c3:
                    66:1a:9b:a4:11:6d:aa:3a:8e:5f:18:90:9b:a9:42:
                    a3:d1:18:75:af:14:29:c9:16:d4:42:74:32:7e:f9:
                    1a:ae:55:da:a3:10:f7:d6:39:a6:0d:41:45:58:c7:
                    eb:12:ec:24:47:6c:bd:85:67:5f:c2:18:11:d7:7e:
                    90:8a:fc:1f:4c:72:cf:dd:88:94:bb:74:39:8b:fe:
                    0a:f0:9b:ef:a3:aa:fb:f5:7d:aa:54:81:db:97:eb:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:27:52:7D:DB:80:58:2F:A0:85:91:94:4E:21:CC:C0:FE:DB:B6:E1
            X509v3 Authority Key Identifier:
                keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:07:a6:07:cf:a0:56:b9:21:5e:07:a6:b1:7b:4d:ff:75:c5:
         9e:8b:23:99:0b:08:14:5f:75:f2:6c:94:f1:e6:09:57:92:34:
         66:cc:5f:1e:bc:5c:9f:b6:c0:87:66:0b:9f:5f:79:a7:ae:93:
         f4:68:7c:fe:03:0f:e3:32:c9:0d:92:ca:a7:7e:74:47:3c:f4:
         d9:c6:08:fa:fc:94:c1:1b:28:8c:ce:66:93:ee:b2:a5:e7:bb:
         b6:47:b3:f2:5a:28:dd:0c:25:7e:ac:15:29:5f:5f:69:97:0b:
         41:a1:3a:64:a9:89:28:c8:c9:d3:e8:03:b6:ee:50:05:bf:61:
         39:f1:a2:d6:44:63:a3:09:79:0a:1b:da:d3:d5:17:d6:f3:df:
         49:3c:ab:14:66:82:7f:dd:56:bb:92:4a:35:f6:2d:0e:b4:47:
         fc:a2:f7:93:b0:17:a9:3a:17:d8:9c:33:27:bd:37:93:cb:95:
         bb:45:0b:b3:b0:6a:bd:87:b8:92:e0:83:bc:69:50:93:a2:ab:
         15:58:62:79:cd:d5:b5:c2:56:52:7d:ab:f5:3a:31:4b:ed:23:
         c3:59:e2:82:9e:d4:91:e1:f9:bc:c0:84:a4:d2:47:0b:a5:6d:
         48:e6:92:19:ca:20:c4:ed:6c:b1:f3:17:7b:9c:4b:e1:bc:a4:
         d0:92:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:53:23 2026 by rpki-client