Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
File:                     hejumo0wUoWZBi0Iy5y51RPfa9c.mft (raw, json)
Hash identifier:          Wcper2ErGPJDipCWkqvQzYA2vWy9HdKQiWUeppPLBJY=
Subject key identifier:   FA:7C:F0:55:19:32:EF:E0:97:18:C9:35:8F:59:1D:8B:2D:24:69:13
Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7
Certificate issuer:       /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
Manifest number:          0142
Signing time:             Thu 03 Sep 2026 05:39:06 +0000
Manifest this update:     Thu 03 Sep 2026 05:39:06 +0000
Manifest next update:     Thu 10 Sep 2026 05:39:06 +0000
Files and hashes:         1: hejumo0wUoWZBi0Iy5y51RPfa9c.crl (hash: 1ErkleMj5x5qp2fzHsnmZOmVQct+fWo5WexHXxxPxw0=)
                          2: 1D79B286505111F1A6C3F8BB94833773.roa (hash: 3xKQOlORUB1srg8b9eZ+3Jlw2fisqPQnTL+nLDSZlQI=)
                          3: 4A4E595AC91C11EFB0DEB92DC4F9AE02.roa (hash: gUcqtC95g/7PYjkg92p/7QAIqkLozNb3MYQLoLKJN7U=)
                          4: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (hash: 0ugNO0JFbaqHVmsAuT0FX27EtH3EefDNknaja626TkQ=)
                          5: 49D54560C91C11EFB0DEB92DC4F9AE02.roa (hash: M5DGOXJP2e8jtsaJQ/vq9iASwvCcNNyavpWr6WEN/BA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl
                          rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 05:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7
        Validity
            Not Before: Sep  3 05:39:06 2026 GMT
            Not After : Sep 10 05:39:06 2026 GMT
        Subject: CN=6a9907fa-0e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:db:96:cb:7d:f8:35:d1:bc:48:1d:9d:b5:
                    e0:83:f9:59:87:e6:f2:9f:13:3d:6d:09:49:50:7a:
                    28:96:ed:f7:17:e5:ed:c1:c7:d3:22:48:5c:b7:45:
                    1a:73:4d:26:03:ed:14:40:2a:15:da:34:1b:a7:8f:
                    82:29:bf:2a:cf:76:2d:49:d9:92:3d:34:af:c7:7c:
                    83:ab:cc:84:a6:2b:5a:fd:cd:fe:fc:42:83:5a:3a:
                    ef:ba:8f:b4:31:d1:50:a7:c9:11:2a:2b:19:a6:77:
                    75:29:ac:4c:a3:a2:d7:5a:34:82:63:05:97:a1:f4:
                    16:2a:40:f6:ca:7b:d0:e6:19:be:92:a5:78:b5:b1:
                    3f:02:2e:6e:91:7c:7d:60:1f:63:73:0e:bd:31:d1:
                    a2:82:7f:26:c6:bc:37:d2:41:8a:dc:1a:59:ac:06:
                    eb:61:f9:d2:78:2e:28:b2:27:aa:17:56:bb:40:bb:
                    b1:f0:10:82:b2:4f:b2:3b:bb:cd:1d:09:d2:75:34:
                    bf:bc:8a:43:01:6a:1e:e1:b8:96:d2:3f:3e:f1:fc:
                    bf:0a:e4:30:1d:47:01:c4:71:53:0b:ba:f2:45:3d:
                    67:e0:3d:0b:04:dc:2c:ec:c7:6a:9c:e4:78:4a:8d:
                    e6:03:9c:23:79:c0:b0:21:d9:7f:fa:1c:89:a9:11:
                    87:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7C:F0:55:19:32:EF:E0:97:18:C9:35:8F:59:1D:8B:2D:24:69:13
            X509v3 Authority Key Identifier:
                keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:10:82:83:0f:67:bf:6b:1d:c8:38:2f:bd:f0:2c:aa:4a:10:
         57:56:45:1e:de:00:79:3a:69:ee:e5:6b:8e:e0:77:89:28:34:
         cf:d0:9f:eb:38:0d:c7:aa:0d:4b:53:28:cf:aa:e4:be:fb:75:
         ed:07:37:cd:d8:bc:32:b2:c4:e2:be:39:a2:2b:ff:8b:87:80:
         13:a8:44:56:87:e0:ce:a1:9f:0e:0e:dd:ce:50:3f:d5:d9:0e:
         34:59:90:c1:83:6a:0b:b4:92:98:a0:b5:8f:60:d5:4f:0b:1d:
         ec:6e:e2:cb:cd:45:5c:bb:9e:6d:59:05:a8:5f:a6:02:ca:8d:
         be:42:16:11:17:30:27:7a:eb:50:86:fb:f5:11:66:7a:25:35:
         d8:80:6a:7f:04:2b:3b:a5:f5:30:31:16:f5:4c:80:d5:20:e6:
         0a:e3:c7:6e:6c:dc:91:2c:c5:a4:1f:8d:f5:c3:9a:45:4d:c3:
         61:1c:d2:44:d5:00:9a:93:75:d1:a9:b0:3d:e4:0b:6e:ce:cb:
         e5:8e:1b:a8:af:6d:21:59:b5:95:69:75:98:f2:c7:ff:a2:67:
         f0:be:02:ed:ba:bd:f0:e4:ac:1f:c3:e8:91:04:c3:33:75:64:
         04:90:a9:e7:d9:ed:97:98:b9:6e:4e:e1:0f:f1:c9:7d:ce:5e:
         a9:73:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:21:49 2026 by rpki-client