Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
File:                     HlpjIbEaoIRvqJvxObzs2604vjc.mft (raw, json)
Hash identifier:          HmfNYJ5ajabLsEZECudg0eGSnam4MNlURc771hrScVw=
Subject key identifier:   FA:4F:78:E7:D0:64:6D:47:D9:0A:55:F5:B1:DA:B1:ED:3C:83:6F:D6
Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37
Certificate issuer:       /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
Certificate serial:       35F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
Manifest number:          35A2
Signing time:             Wed 20 May 2026 14:16:04 +0000
Manifest this update:     Wed 20 May 2026 14:16:03 +0000
Manifest next update:     Wed 27 May 2026 14:16:03 +0000
Files and hashes:         1: HlpjIbEaoIRvqJvxObzs2604vjc.crl (hash: o1MUC2jHfUzi+9pKgkno/504T/gYUvbpC87T2VLyEVI=)
                          2: 0997A5828A1511F09F6EBD2BC4F9AE02.roa (hash: ODWKcUe3z5vKtDIj0xaFZ5y/WUcNqtmAta/zMVOpKQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 14:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13808 (0x35f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D76, serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
        Validity
            Not Before: May 20 14:16:03 2026 GMT
            Not After : May 27 14:16:03 2026 GMT
        Subject: CN=6a0dc224-de02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:f8:54:0b:d4:79:07:8c:25:d0:98:1f:61:
                    7b:ec:f2:b3:2d:db:39:2a:7a:15:b6:0d:24:d1:45:
                    9e:59:12:20:ab:03:99:6f:f5:f0:aa:a7:49:6e:35:
                    fa:38:28:f1:6b:4a:38:6e:c4:e3:12:9c:93:8e:e9:
                    33:fe:3f:fe:64:a1:6a:0c:5e:8b:db:46:af:34:c7:
                    4d:13:ac:d5:86:36:39:55:b6:33:1f:f0:f6:d2:e9:
                    74:6b:27:e0:9d:e9:c6:c3:2e:f9:43:d4:47:f7:93:
                    03:6b:46:be:34:df:74:62:48:64:17:8a:eb:fa:ac:
                    e0:06:13:1d:a0:9b:c0:ee:ed:48:2e:ba:34:7f:19:
                    13:81:e6:be:20:78:ae:7c:17:b7:6f:bf:d0:a9:7d:
                    6c:60:62:db:fa:8d:92:8e:c0:f7:06:8f:9c:29:eb:
                    3f:a9:dc:af:e3:5a:dd:d9:e6:59:f2:07:bd:4d:47:
                    a1:5f:e2:b7:96:22:16:ed:18:29:45:03:5c:c7:ed:
                    ac:23:47:42:43:70:7e:4a:69:11:09:a5:ba:ad:95:
                    81:fc:6f:4c:6b:93:1a:c0:e1:63:f0:77:81:51:e7:
                    48:f2:fb:7b:b6:ab:a3:8d:68:60:8b:e7:fb:28:c3:
                    12:29:35:33:ef:5d:99:1a:bc:56:7d:ff:1c:cf:49:
                    9f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4F:78:E7:D0:64:6D:47:D9:0A:55:F5:B1:DA:B1:ED:3C:83:6F:D6
            X509v3 Authority Key Identifier:
                keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:01:dd:0c:d7:05:54:36:5c:b1:f3:67:ce:7f:b6:dd:a2:94:
         77:7d:86:1c:dd:be:08:25:58:82:6d:b3:ba:e3:4f:f5:3e:65:
         5d:be:92:4c:a9:1f:4b:7e:2a:63:eb:62:2f:ce:38:5e:0d:a5:
         5d:5b:97:1e:99:da:1d:1b:c9:f2:f5:b4:3c:1b:3a:75:ff:60:
         b7:ec:49:a1:e3:82:91:a6:8f:d5:b4:81:76:e0:cd:3d:82:bc:
         30:d4:89:ce:3b:78:43:b6:94:e0:47:5b:b3:0f:5d:9c:7c:6a:
         08:c7:c1:38:c2:eb:a5:a0:18:ad:b8:87:66:0e:9c:13:40:4c:
         34:9a:be:54:db:90:be:00:81:64:fe:a3:b6:8d:b1:fa:1b:6c:
         37:4a:f0:d7:88:7d:9f:38:98:e0:2c:72:91:1e:05:1b:ca:c2:
         ba:49:f5:4d:3f:a8:75:f3:33:95:ef:15:ec:60:30:fb:c1:77:
         4e:fc:42:ad:5d:5e:4c:a3:46:72:1c:49:bb:af:ce:34:65:e2:
         be:30:d3:f5:6f:1a:11:e3:31:58:ca:10:3c:da:7d:23:58:df:
         de:3b:7a:3a:21:59:75:a3:04:d8:25:36:5a:fa:e0:1a:75:a1:
         d0:61:09:79:3f:68:26:f7:03:3b:f1:27:03:5e:cf:fc:41:22:
         f9:9a:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:46 2026 by rpki-client