Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
File:                     rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json)
Hash identifier:          rHscFjQx2WJwhC4u2ldKo2a3eLGE1UNzUpMW9Nm/Coc=
Subject key identifier:   DB:2E:CD:69:7E:4B:F9:FA:6C:95:03:0B:90:50:E9:99:74:4E:59:B9
Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
Certificate issuer:       /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Certificate serial:       051F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
Manifest number:          0513
Signing time:             Mon 22 Jun 2026 23:43:28 +0000
Manifest this update:     Mon 22 Jun 2026 23:43:27 +0000
Manifest next update:     Mon 29 Jun 2026 23:43:27 +0000
Files and hashes:         1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: tR4mGvTXOGR5sN1KdY4d8vcO/u5zozfDujRCdxgmoI8=)
                          2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: 9xagtFPDPDh7sP5RKvooGHMvmH3Edj6QzRlAg2sHVUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
                          rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 23:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1311 (0x51f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
        Validity
            Not Before: Jun 22 23:43:27 2026 GMT
            Not After : Jun 29 23:43:27 2026 GMT
        Subject: CN=6a39c8a0-34fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:64:81:24:a9:63:69:db:96:86:fe:b8:a1:
                    5e:18:72:9a:b8:5c:ae:82:09:7f:2d:2e:5f:96:81:
                    f5:f3:a7:7e:1a:12:f8:cd:e0:35:1c:dd:e1:aa:28:
                    cb:37:a4:06:ec:3a:eb:5f:25:e9:b6:90:09:e3:4a:
                    0f:93:04:e9:0d:14:c2:16:0b:94:a9:11:cc:15:fd:
                    34:c6:11:b4:c2:ef:2f:82:c9:9a:32:6b:aa:ab:e5:
                    49:ac:df:64:75:dd:2c:c2:4c:d3:b6:d9:cf:e4:e1:
                    d0:b2:ad:a4:50:f7:02:d2:52:fc:23:c5:b1:86:60:
                    ab:64:3a:2f:ca:f6:62:f3:1f:9f:0f:59:0a:1f:8a:
                    a6:99:27:62:32:c8:9f:ae:ba:ec:79:5c:71:42:9d:
                    a7:1d:76:a0:fb:1b:3f:06:77:79:d6:7b:53:b4:bb:
                    38:71:3b:91:c0:6b:96:af:f3:c0:4e:f1:94:b2:df:
                    68:1b:d6:93:42:89:5d:32:b3:9f:b1:24:95:46:58:
                    9c:16:33:7f:03:f1:66:f4:fe:e7:01:a7:cb:6c:83:
                    95:ba:96:6b:6b:22:8b:f6:97:37:7e:69:be:00:f8:
                    a6:9a:cd:da:8e:c9:93:b0:87:6b:d8:7d:44:26:a1:
                    20:af:86:af:c9:33:ee:42:52:5f:cc:30:13:d1:d4:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2E:CD:69:7E:4B:F9:FA:6C:95:03:0B:90:50:E9:99:74:4E:59:B9
            X509v3 Authority Key Identifier:
                keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:35:74:09:4c:62:4f:10:70:3a:82:33:12:5b:b3:8b:04:44:
         5b:f6:38:ac:d5:99:b4:de:30:e2:50:40:aa:0e:7c:d9:8b:e1:
         11:00:67:ed:cb:7b:d9:c1:5c:9a:0e:b4:61:5f:8e:25:38:9d:
         75:4e:6d:a8:ee:74:e2:62:ab:bf:ae:52:a9:8f:02:7e:10:0f:
         49:bf:48:b4:d1:e4:b0:c6:47:08:32:5e:bc:0a:bc:eb:14:b3:
         36:09:0b:aa:a2:31:44:6a:09:52:5c:ff:b0:31:70:b3:06:5a:
         17:8b:63:84:b3:e2:28:e3:4c:af:24:be:79:d5:25:a7:3c:64:
         bd:05:5b:71:d0:db:8b:f7:8e:e6:5d:6b:4b:59:30:2e:bb:5c:
         15:3b:a4:99:9b:18:95:40:da:f3:a2:14:3c:74:75:48:40:4e:
         90:88:6f:19:56:2f:d7:b6:3d:e9:6c:c7:76:58:1c:32:4f:b9:
         0a:31:8e:42:de:e6:56:eb:4b:a4:c8:9d:35:84:92:7e:ad:46:
         62:e8:18:be:7a:5e:4c:da:a1:14:34:92:20:ac:38:74:4b:7c:
         29:39:c2:82:e8:23:cb:a7:8a:6a:5b:4e:95:7f:b5:70:bf:f1:
         31:35:ae:31:f8:c0:e3:bb:cb:42:2f:14:82:3b:e7:da:0a:08:
         ea:7c:c2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:16 2026 by rpki-client