Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
File:                     Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json)
Hash identifier:          b8DSGndO8KXX16B0sIWfdxCRjv/OByqSdeZCfW6LM1s=
Subject key identifier:   F5:85:96:F1:F8:ED:59:15:AE:C3:7F:97:E3:ED:27:68:B5:92:B9:97
Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
Certificate issuer:       /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Certificate serial:       10AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
Manifest number:          10A2
Signing time:             Mon 22 Jun 2026 17:19:40 +0000
Manifest this update:     Mon 22 Jun 2026 17:19:39 +0000
Manifest next update:     Mon 29 Jun 2026 17:19:39 +0000
Files and hashes:         1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: ut1gwS5pdIXV+eOQF3Ep1p52Clo9bk/vf/Lm1qE7/D0=)
                          2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: Ao3jfGsh9U1xkNSfRtTIAsdPf+38NYLkOVbSpZBnBWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl
                          rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4270 (0x10ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
        Validity
            Not Before: Jun 22 17:19:39 2026 GMT
            Not After : Jun 29 17:19:39 2026 GMT
        Subject: CN=6a396eab-139d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:3b:43:0f:d8:e4:30:71:af:ad:98:84:a7:
                    71:f4:8c:7b:bb:1c:64:46:d3:78:19:5f:ff:37:84:
                    f3:d0:9d:30:ba:6a:45:48:f9:91:2f:ea:2c:dd:57:
                    6d:bc:37:2e:a1:02:14:16:1a:2f:94:d6:a2:09:ef:
                    a7:ec:5b:48:fc:90:1b:6e:d7:a0:84:40:d4:20:ad:
                    6b:60:0c:8d:8a:30:41:da:5f:6c:56:47:c1:05:8c:
                    bf:6d:48:9c:bf:cf:31:0f:90:80:6a:a9:f9:a1:23:
                    24:f6:b9:08:44:ca:b8:5a:b7:80:6f:ca:2d:c9:90:
                    04:25:1b:a4:3c:c1:61:d3:51:ff:12:fc:3b:80:c2:
                    5c:f8:65:57:df:67:ff:74:87:6a:5c:d3:76:aa:2e:
                    3d:cb:27:41:e7:e3:43:8f:4a:73:71:15:c0:81:16:
                    ac:b3:0b:93:2d:e6:75:19:63:13:c9:c6:93:7e:0f:
                    25:4b:fc:11:2e:4b:4e:67:eb:4a:77:f8:5d:b3:b4:
                    aa:b1:7e:fd:bc:28:66:fa:d0:13:6b:38:0c:37:82:
                    01:bf:81:f8:4d:17:7e:e7:d0:82:a0:ad:a9:d7:11:
                    20:b5:a4:13:3a:1e:23:dd:d5:f1:7d:19:5a:c9:9d:
                    d4:89:bb:20:2b:43:b0:9d:b9:bd:9b:19:94:69:dd:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:85:96:F1:F8:ED:59:15:AE:C3:7F:97:E3:ED:27:68:B5:92:B9:97
            X509v3 Authority Key Identifier:
                keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b6:ad:bf:7b:4b:b0:1c:8a:9a:0a:12:0d:32:5d:70:79:f1:
         41:42:30:0f:db:9c:b4:44:4d:70:64:d3:cd:b2:e9:01:91:0a:
         d1:93:43:cf:cd:6c:3f:23:2b:44:b6:68:38:25:b5:e7:1a:22:
         6c:20:08:de:de:21:1e:76:79:b1:25:43:d8:5e:21:b4:53:4e:
         18:7c:42:28:fc:e8:a0:3d:bd:66:fb:38:c7:68:43:20:93:06:
         82:62:2f:cf:88:8f:43:a8:9f:fc:67:6f:70:7d:15:83:6d:13:
         4b:60:5b:58:6b:ce:fe:39:dc:8a:88:3a:f4:e2:e0:04:c2:86:
         01:57:e8:77:db:53:ac:07:32:c3:ba:4b:75:70:32:de:3f:3c:
         14:05:eb:89:64:ee:c6:f8:58:c1:c4:9c:d4:95:93:9c:bb:5b:
         e1:ac:c0:fd:3b:cf:cf:9c:40:79:54:aa:9b:df:9b:4d:d8:38:
         94:a2:aa:bf:eb:58:70:be:45:98:24:ae:01:cf:9e:1e:e0:c2:
         75:44:90:b4:a5:ef:9f:5b:b7:5c:5f:c0:82:2a:39:c1:71:82:
         66:d9:4f:c7:ec:39:b4:83:52:1f:e8:bc:1c:fe:eb:b7:ce:d5:
         15:88:59:14:f6:79:5b:9e:c7:d5:3e:af:fb:24:80:b3:a9:01:
         25:87:62:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdCRTQxMTAvBgNVBAUTKDFFNkIzOTQ0QjY3ODhFOTBFOTk3RDhBOEU4MDY3QzU5
NjlCODg5OEMwHhcNMjYwNjIyMTcxOTM5WhcNMjYwNjI5MTcxOTM5WjAYMRYwFAYD
VQQDEw02YTM5NmVhYi0xMzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoy87Qw/Y5DBxr62YhKdx9Ix7uxxkRtN4GV//N4Tz0J0wumpFSPmRL+os3Vdt
vDcuoQIUFhovlNaiCe+n7FtI/JAbbteghEDUIK1rYAyNijBB2l9sVkfBBYy/bUic
v88xD5CAaqn5oSMk9rkIRMq4WreAb8otyZAEJRukPMFh01H/Evw7gMJc+GVX32f/
dIdqXNN2qi49yydB5+NDj0pzcRXAgRasswuTLeZ1GWMTycaTfg8lS/wRLktOZ+tK
d/hds7SqsX79vChm+tATazgMN4IBv4H4TRd+59CCoK2p1xEgtaQTOh4j3dXxfRla
yZ3UibsgK0Ownbm9mxmUad3uwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPWFlvH4
7VkVrsN/l+PtJ2i1krmXMB8GA1UdIwQYMBaAFB5rOUS2eI6Q6ZfYqOgGfFlpuImM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JFNC9BMDYzMDVDMjUx
MTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpwRHBsOWlvNkFaOFdXbTRp
WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0htczVSTFo0anBEcGw5aW82QVo4V1dtNGlZdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
N0JFNC9BMDYzMDVDMjUxMTExMUU5OEM0QkYxMEZDNEY5QUUwMi9IbXM1UkxaNGpw
RHBsOWlvNkFaOFdXbTRpWXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZbatv3tLsByKmgoSDTJdcHnxQUIwD9uctERNcGTTzbLpAZEK0ZNDz81sPyMr
RLZoOCW15xoibCAI3t4hHnZ5sSVD2F4htFNOGHxCKPzooD29Zvs4x2hDIJMGgmIv
z4iPQ6if/GdvcH0Vg20TS2BbWGvO/jnciog69OLgBMKGAVfod9tTrAcyw7pLdXAy
3j88FAXriWTuxvhYwcSc1JWTnLtb4azA/TvPz5xAeVSqm9+bTdg4lKKqv+tYcL5F
mCSuAc+eHuDCdUSQtKXvn1u3XF/Agio5wXGCZtlPx+w5tINSH+i8HP7rt87VFYhZ
FPZ5W57H1T6v+ySAs6kBJYdiQA==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:58 2026 by rpki-client