Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
File:                     Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json)
Hash identifier:          hLfDV7kNchXh4IL51DGpTY7TpAo3JJ3B+1yqtbJLf5A=
Subject key identifier:   27:6A:C8:A3:86:E0:0A:98:24:49:0D:91:2D:CF:AB:AC:CB:C7:D3:3F
Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
Certificate issuer:       /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Certificate serial:       07BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
Manifest number:          07B7
Signing time:             Tue 18 Aug 2026 21:47:18 +0000
Manifest this update:     Tue 18 Aug 2026 21:47:18 +0000
Manifest next update:     Tue 25 Aug 2026 21:47:18 +0000
Files and hashes:         1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: EPhTCtWsRdoQUrGiODs7KaRPRUKWiLUGstVOSdZXdYE=)
                          2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: EjQAXg2usCcTUh9gyvVBrkzQeLYgfkd976KZ0ehXsBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1982 (0x7be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
        Validity
            Not Before: Aug 18 21:47:18 2026 GMT
            Not After : Aug 25 21:47:18 2026 GMT
        Subject: CN=6a84d2e6-5985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:d9:ca:58:a6:4f:70:68:03:90:16:a7:ce:
                    82:ad:43:9d:6e:ac:50:99:d0:02:bc:0f:36:90:6b:
                    77:55:1c:a5:6b:7f:8f:d2:6b:dd:08:ec:48:2a:5b:
                    11:73:f4:1e:b6:94:9e:97:f2:88:8e:03:ca:da:37:
                    22:29:e1:c5:6e:27:3f:1d:69:9b:68:81:9d:e7:af:
                    1b:4f:73:03:b7:4d:3f:cf:06:6b:aa:95:f2:8f:f1:
                    e2:9a:8d:9a:da:c8:47:9f:18:18:8a:6c:02:fb:e2:
                    8b:17:fa:9f:d8:d1:68:b7:de:d4:fd:ec:1b:91:23:
                    0e:3d:29:cb:ec:21:31:48:3e:16:c5:49:23:8b:80:
                    42:28:d2:fd:38:59:8c:ec:98:e3:96:9a:6f:ce:df:
                    65:46:37:5b:0b:1b:0b:96:13:d2:b8:c9:01:8f:89:
                    c0:7b:3e:ae:b6:35:64:75:02:35:7a:48:0c:5c:e4:
                    69:d5:a2:60:40:7f:76:c8:2a:50:3c:75:a4:c7:51:
                    42:33:b4:99:3c:95:22:4e:a2:f6:7e:93:a0:98:52:
                    08:48:0b:0d:f1:72:e8:35:88:70:cb:28:d7:a8:71:
                    d4:6f:fd:e0:a1:7d:4d:f6:d4:e2:fe:85:1c:3a:d3:
                    5e:36:7a:d0:e3:e0:b4:7b:dd:26:18:2a:ad:fd:02:
                    64:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6A:C8:A3:86:E0:0A:98:24:49:0D:91:2D:CF:AB:AC:CB:C7:D3:3F
            X509v3 Authority Key Identifier:
                keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:db:e4:40:2f:a0:3c:1b:ba:b8:fb:2a:b5:b8:0b:61:8e:28:
         ee:48:9c:db:15:52:25:ba:00:dd:0f:c9:3e:4b:4b:8a:0f:31:
         be:b5:81:92:a0:7b:15:ae:74:39:b4:71:2d:ec:2a:8b:d4:c3:
         2b:84:ce:13:f2:b1:f0:18:a3:90:e4:f3:4b:78:59:2a:8c:bc:
         77:04:56:c3:e9:13:d4:73:d8:db:97:38:ed:ce:fc:00:c2:47:
         52:86:6a:0f:79:d8:dc:d2:18:af:08:5d:03:0d:cb:b9:69:51:
         5d:d4:af:d5:90:9a:ca:5d:94:2b:d3:59:5d:89:b8:af:5b:c8:
         f5:35:95:e1:fd:15:3b:aa:13:17:3e:04:c3:b0:d7:0d:b2:66:
         b9:e3:05:67:1e:72:2c:64:e5:e1:3d:ec:8a:71:c5:d2:3c:0d:
         c2:29:99:46:c4:d7:63:43:5d:ee:83:2f:de:3f:21:19:f3:53:
         2d:7c:74:42:c1:21:00:f0:cc:67:26:70:fa:64:cc:e9:c3:e8:
         13:f5:41:eb:52:90:1e:f8:2a:7b:7f:bd:81:1a:07:ff:36:2d:
         59:e3:89:3d:09:d5:87:fc:5d:1e:a0:98:4a:dc:95:48:7e:9d:
         4b:f4:9e:fb:42:9c:6e:71:14:34:be:e1:6a:db:70:15:9a:a4:
         21:c0:cc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:09 2026 by rpki-client