Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
File:                     HmATrx-FZOqgCX2x8haHTEt4Zw4.mft (raw, json)
Hash identifier:          IUqe0gG4ljQVpOkbKXXUqN35XIf+lrvSdH+RAJeXvf8=
Subject key identifier:   63:47:1C:94:2F:A7:C5:CF:C3:C4:BA:CC:38:16:23:4C:CB:72:5D:DD
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Certificate issuer:       /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
Manifest number:          0225
Signing time:             Fri 17 Jul 2026 03:40:33 +0000
Manifest this update:     Fri 17 Jul 2026 03:40:33 +0000
Manifest next update:     Fri 24 Jul 2026 03:40:33 +0000
Files and hashes:         1: HmATrx-FZOqgCX2x8haHTEt4Zw4.crl (hash: XW5s2TnT4OuKetCiC+bOmzMP3gURrzNGY4iafJqAC6w=)
                          2: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (hash: FdNaF3+d7P8rDGstXuH8gApZBnIYbbzLiawSXMHrTM8=)
                          3: 1042D952157F11F0BA309342C4F9AE02.roa (hash: fqdoOBIiwQy8idxxM7YMLxvJT+7Eo0Bpc31Gs3WweTY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
                          rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
        Validity
            Not Before: Jul 17 03:40:33 2026 GMT
            Not After : Jul 24 03:40:33 2026 GMT
        Subject: CN=6a59a431-2728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:b4:8f:01:95:06:35:27:4b:a6:f3:7c:9c:
                    c2:3d:72:75:a5:5a:ab:4f:d5:37:27:93:64:82:8c:
                    56:81:4a:ca:24:87:89:91:db:58:07:70:fa:71:b5:
                    1a:40:62:2e:0f:e1:41:ae:ce:fa:b7:b8:27:f4:e9:
                    3c:05:71:8e:db:18:1d:33:92:9f:71:ff:0c:3c:07:
                    ae:07:14:6a:46:24:e3:62:4a:21:93:34:b3:e1:54:
                    9c:33:68:3e:cd:3f:45:4d:2f:79:59:21:cf:57:f8:
                    1d:b8:22:fa:71:ed:44:44:74:63:87:b2:fb:cb:63:
                    80:35:7c:37:18:f1:76:44:64:1d:ec:b3:6e:c5:42:
                    48:d1:dc:4f:28:fe:bd:22:bc:f7:50:3d:76:3e:47:
                    f4:19:be:7e:11:99:25:56:e1:db:d6:22:1c:85:8e:
                    0a:a4:6d:6a:08:37:06:0f:73:9c:77:17:ee:22:5a:
                    16:cb:11:92:b3:43:79:46:e8:37:d8:00:9c:77:9c:
                    09:c6:a7:d4:77:f1:6e:de:e0:1f:49:f9:60:d4:d7:
                    d5:7b:e1:be:24:6c:c1:9f:06:0e:37:d1:55:d8:63:
                    01:7f:ee:b1:8f:dd:50:7e:ab:00:98:17:fe:63:22:
                    d2:0e:35:43:59:94:6b:bb:3a:d1:e5:53:25:f7:64:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:47:1C:94:2F:A7:C5:CF:C3:C4:BA:CC:38:16:23:4C:CB:72:5D:DD
            X509v3 Authority Key Identifier:
                keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:16:f5:14:c8:e8:ab:f5:37:de:a8:e4:82:85:29:70:bb:10:
         24:55:c3:bf:3c:42:56:63:77:69:91:76:1e:db:ba:07:46:e2:
         31:77:16:6a:ef:81:14:80:79:43:cc:e8:a5:fa:d6:10:aa:05:
         04:69:52:67:b6:5b:64:e8:f9:56:b3:55:12:98:8a:d1:f6:41:
         5d:6e:a0:ac:a0:42:57:f9:2b:dd:ed:10:dc:83:57:a4:a3:a9:
         3a:64:eb:94:d8:43:45:4a:a0:cf:22:19:45:bf:f3:75:ba:07:
         6d:4e:04:54:3d:39:65:7d:5c:61:fc:45:40:ae:d8:40:a5:97:
         d2:0c:f3:63:fe:2f:c0:a3:88:cd:0b:94:85:e8:f8:e2:6c:26:
         1b:5e:2c:96:81:c2:b5:1a:e8:79:f1:16:b0:a0:48:4b:47:de:
         85:b3:23:55:95:94:0d:ee:18:47:6f:33:72:36:d2:ed:f6:62:
         e7:25:f5:fb:a5:60:f5:4b:15:b7:86:b5:65:83:f0:62:4e:19:
         9c:88:2e:4d:02:d0:da:d5:c8:a2:96:78:92:ed:fa:5c:0a:84:
         87:07:1a:f6:92:65:8b:06:64:32:c1:92:1d:34:0b:4e:bc:ac:
         af:81:b0:45:4e:9b:bc:5e:e8:61:3e:2b:52:67:ae:c3:b0:94:
         45:4e:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:19:48 2026 by rpki-client