Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft
File:                     hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft (raw, json)
Hash identifier:          I4NeT8Nhzz6sp4HeQOd80Fg6n/VIqbdmixyBQCsYyeE=
Subject key identifier:   72:91:EF:9B:93:2C:89:75:62:FC:57:A5:08:23:6D:DC:FF:2C:C6:55
Authority key identifier: 84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6
Certificate issuer:       /CN=A91A6AB7/serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft
Manifest number:          24
Signing time:             Tue 07 Jul 2026 10:07:48 +0000
Manifest this update:     Tue 07 Jul 2026 10:07:48 +0000
Manifest next update:     Tue 14 Jul 2026 10:07:48 +0000
Files and hashes:         1: hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl (hash: HCqJLTZJF9ISWFNY6LO9Tslt2ZCniXJdJEYJWGAUTY0=)
                          2: 2DFF5E4A450611F1937F277491833773.roa (hash: 47kNyS4a2pq8B+k+t2a9vj5unLrgCE/8MJzFAm97XS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl
                          rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 10:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6AB7, serialNumber=849B0D99020BF1D9D6F8D3F028C94F0AA011F6A6
        Validity
            Not Before: Jul  7 10:07:48 2026 GMT
            Not After : Jul 14 10:07:48 2026 GMT
        Subject: CN=6a4ccff4-3976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:93:7a:75:39:3b:d4:39:9b:ca:ad:dd:92:
                    93:7a:52:e5:98:ff:61:ab:ed:b8:e8:7d:ca:09:12:
                    a5:71:8f:49:d8:78:54:63:8a:97:4f:13:e7:42:8e:
                    7c:f2:a8:d0:88:72:7c:9c:88:45:c5:c7:f2:73:6b:
                    1d:5e:17:8b:50:44:cf:75:99:92:e9:82:da:ec:11:
                    bd:79:21:e2:d0:b4:68:46:89:ca:1a:6e:b4:a4:54:
                    60:45:11:2a:74:24:1d:d1:99:91:21:77:d7:94:bd:
                    ac:0d:82:7d:3a:b1:02:3a:36:f5:d6:84:4b:26:3b:
                    e8:03:9e:92:44:0d:a9:d1:19:bb:87:e5:eb:17:1d:
                    82:73:b0:25:1d:59:d3:8b:e6:7d:05:05:f1:37:22:
                    be:35:73:86:2e:43:45:97:61:10:1c:29:93:dd:7b:
                    cf:49:17:1d:33:39:f4:65:0f:d7:94:a5:67:45:af:
                    1f:f9:de:4e:9e:db:74:7b:d3:b2:ee:b1:eb:46:e6:
                    4c:a0:b6:5c:3f:f2:46:4c:78:13:5b:c9:0c:a4:67:
                    1d:eb:3d:1f:03:56:42:6a:6f:79:62:e4:6f:f9:42:
                    b7:73:7c:01:61:55:9b:d9:85:5a:b5:99:42:75:94:
                    e2:99:46:6f:68:26:4c:8a:a3:5a:6b:b8:02:ee:6e:
                    f2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:91:EF:9B:93:2C:89:75:62:FC:57:A5:08:23:6D:DC:FF:2C:C6:55
            X509v3 Authority Key Identifier:
                keyid:84:9B:0D:99:02:0B:F1:D9:D6:F8:D3:F0:28:C9:4F:0A:A0:11:F6:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hJsNmQIL8dnW-NPwKMlPCqAR9qY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6AB7/C6DC1D5C450511F1830D62F490833773/hJsNmQIL8dnW-NPwKMlPCqAR9qY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:40:5b:8e:2c:97:9a:f6:57:65:5e:67:8b:20:ae:03:b4:d7:
         c5:c8:6d:b9:7d:2a:ab:ca:a1:91:ff:ec:d3:23:d5:51:4b:07:
         cf:3d:f3:1d:1f:c2:3b:13:6a:31:0f:0e:99:02:7e:28:04:f7:
         08:b1:85:53:ef:c6:a8:a3:aa:95:4b:fa:8f:86:c7:61:30:b5:
         b8:33:ea:1d:ce:1c:c3:2c:b2:85:4d:3e:eb:87:65:62:12:53:
         12:ce:5c:1d:bf:8b:b6:3e:fa:6c:ab:17:0e:37:dd:4e:88:8a:
         b8:45:41:e7:ed:a9:37:d3:c9:41:c5:af:3a:a9:b8:f1:5d:bf:
         fd:fd:43:fb:3f:7e:29:e1:2d:4c:7e:17:35:4d:f8:29:0d:3a:
         82:f5:bc:13:40:cf:5b:50:ab:2f:d1:bb:07:68:1b:b3:64:a6:
         5c:7a:11:ca:de:b0:00:3b:77:81:11:f7:79:5a:4f:a5:42:d6:
         ec:b4:3e:2d:64:2b:a2:6d:97:d3:b4:58:da:c8:91:81:bc:be:
         44:ad:9d:3e:b4:07:a3:b5:ad:65:ce:85:46:da:14:7f:82:9f:
         bf:80:fb:83:67:3c:7b:b9:7e:69:91:89:1c:61:39:9a:f9:a1:
         3c:44:3a:9a:03:e1:e7:2b:a8:0b:09:4b:52:35:7b:c4:36:6b:
         2b:61:54:a4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NkFCNzExMC8GA1UEBRMoODQ5QjBEOTkwMjBCRjFEOUQ2RjhEM0YwMjhDOTRGMEFB
MDExRjZBNjAeFw0yNjA3MDcxMDA3NDhaFw0yNjA3MTQxMDA3NDhaMBgxFjAUBgNV
BAMTDTZhNGNjZmY0LTM5NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxsJN6dTk71Dmbyq3dkpN6UuWY/2Gr7bjofcoJEqVxj0nYeFRjipdPE+dCjnzy
qNCIcnyciEXFx/Jzax1eF4tQRM91mZLpgtrsEb15IeLQtGhGicoabrSkVGBFESp0
JB3RmZEhd9eUvawNgn06sQI6NvXWhEsmO+gDnpJEDanRGbuH5esXHYJzsCUdWdOL
5n0FBfE3Ir41c4YuQ0WXYRAcKZPde89JFx0zOfRlD9eUpWdFrx/53k6e23R707Lu
setG5kygtlw/8kZMeBNbyQykZx3rPR8DVkJqb3li5G/5QrdzfAFhVZvZhVq1mUJ1
lOKZRm9oJkyKo1pruALubvJ5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcpHvm5Ms
iXVi/FelCCNt3P8sxlUwHwYDVR0jBBgwFoAUhJsNmQIL8dnW+NPwKMlPCqAR9qYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QUI3L0M2REMxRDVDNDUw
NTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRuVy1OUHdLTWxQQ3FBUjlx
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaEpzTm1RSUw4ZG5XLU5Qd0tNbFBDcUFSOXFZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2
QUI3L0M2REMxRDVDNDUwNTExRjE4MzBENjJGNDkwODMzNzczL2hKc05tUUlMOGRu
Vy1OUHdLTWxQQ3FBUjlxWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAsQFuOLJea9ldlXmeLIK4DtNfFyG25fSqryqGR/+zTI9VRSwfPPfMdH8I7E2ox
Dw6ZAn4oBPcIsYVT78aoo6qVS/qPhsdhMLW4M+odzhzDLLKFTT7rh2ViElMSzlwd
v4u2PvpsqxcON91OiIq4RUHn7ak308lBxa86qbjxXb/9/UP7P34p4S1Mfhc1Tfgp
DTqC9bwTQM9bUKsv0bsHaBuzZKZcehHK3rAAO3eBEfd5Wk+lQtbstD4tZCuibZfT
tFjayJGBvL5ErZ0+tAejta1lzoVG2hR/gp+/gPuDZzx7uX5pkYkcYTma+aE8RDqa
A+HnK6gLCUtSNXvENmsrYVSk
-----END CERTIFICATE-----
Generated at Wed Jul 8 21:03:23 2026 by rpki-client