Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
File:                     HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json)
Hash identifier:          sxhu+dtHQjoB4K7CGJa3RXz1QOPP94mmk71L4qihflQ=
Subject key identifier:   FA:A6:B9:B4:2C:0D:A7:5D:1B:8B:72:DD:55:6B:DD:32:8D:1A:2C:F4
Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
Certificate issuer:       /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Certificate serial:       1283
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
Manifest number:          126B
Signing time:             Fri 04 Sep 2026 17:04:08 +0000
Manifest this update:     Fri 04 Sep 2026 17:04:07 +0000
Manifest next update:     Fri 11 Sep 2026 17:04:07 +0000
Files and hashes:         1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: YW7qQRDJBvRD5hpwddacjtJaxCITThZJhRFfbHVabvs=)
                          2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: 1PUveXSVNEFsI6eTf+ATt+sd0I0xyK56lA2WpD1UOWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
                          rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4739 (0x1283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
        Validity
            Not Before: Sep  4 17:04:07 2026 GMT
            Not After : Sep 11 17:04:07 2026 GMT
        Subject: CN=6a9afa08-144f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fb:ba:21:84:8c:2e:a8:16:20:50:2a:6d:b1:
                    60:07:e6:2f:bf:d3:fd:d9:24:be:5f:47:0f:5c:9f:
                    a0:8f:e5:4a:c7:7c:12:71:b6:76:4e:2d:14:2f:6d:
                    34:1f:26:14:ec:cc:79:ce:82:13:58:d7:a0:1d:3f:
                    ed:5d:e2:50:93:19:ce:c4:e1:46:59:27:bc:07:f6:
                    f8:ab:2d:49:20:1a:88:c0:7d:9e:e4:c3:ba:9c:13:
                    5f:2b:71:03:24:30:74:c0:f3:a7:e3:0e:17:c4:9e:
                    b6:89:d8:fb:59:e5:4b:9b:13:dd:58:d2:5a:06:a3:
                    fd:66:a9:f4:f0:2b:9f:81:ae:65:39:87:8e:fc:3c:
                    ed:0c:25:1d:d8:12:cd:04:0b:53:e8:82:9f:41:2b:
                    f0:ad:60:b6:eb:e1:2a:b0:5d:28:55:42:0d:a9:98:
                    27:9c:06:e6:d9:ee:9b:dd:3e:bd:32:9f:db:ce:1d:
                    d2:f9:ea:cf:4c:cf:fe:de:cd:c8:2a:59:83:83:31:
                    f3:30:8e:ed:5e:a5:ff:80:e1:ea:4f:84:35:71:21:
                    38:84:d4:b0:29:b4:de:e7:b7:a4:d6:f5:eb:ef:f9:
                    88:13:a7:0d:d5:ce:ee:9a:4d:1a:09:5d:bf:ab:91:
                    27:ce:15:b3:01:2e:e4:21:28:7c:29:2d:a7:2c:75:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A6:B9:B4:2C:0D:A7:5D:1B:8B:72:DD:55:6B:DD:32:8D:1A:2C:F4
            X509v3 Authority Key Identifier:
                keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e1:3d:2c:45:8b:51:bf:c4:aa:05:e6:3e:3b:37:3e:cc:db:
         11:55:d7:43:30:eb:87:34:d9:24:46:b1:99:71:67:5c:92:1e:
         83:8c:0f:99:79:fc:fc:76:72:cb:0b:07:67:30:39:f1:6c:bd:
         0c:f1:45:45:0c:49:11:91:fb:2e:e3:f6:75:0f:7e:4e:45:e6:
         5d:60:63:87:8e:ec:9f:56:a2:b7:bf:fc:1b:65:b1:10:de:85:
         b8:ed:6a:c5:10:ca:09:57:0d:88:10:1c:b6:9c:e3:cc:10:94:
         fc:f3:ae:5c:a3:a4:8d:0b:1a:a5:aa:56:82:e8:52:49:5c:77:
         c5:01:1d:31:19:1c:66:6b:1c:13:af:21:57:b2:c4:91:40:4c:
         ad:fa:c7:09:f8:7a:71:c6:52:fc:35:28:63:2e:d6:67:f5:f1:
         06:e6:c9:8e:f0:da:4f:26:98:d5:9f:23:85:d5:09:cc:d5:9a:
         ef:93:94:ae:62:ac:ee:96:8e:20:04:74:a4:7b:e3:50:14:88:
         4d:4b:bd:15:9e:62:ad:43:19:6e:7e:51:68:e9:72:d6:5b:ef:
         0d:2f:bb:d6:15:fe:c0:bf:e1:86:64:60:76:00:ff:b9:37:c2:
         74:63:11:f0:c5:1d:d8:7d:fd:ef:da:55:29:55:2e:fe:25:9e:
         99:48:d1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:19:28 2026 by rpki-client