Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
File:                     HNLU8yahhKSHvyKs14rVwGj0ZmE.mft (raw, json)
Hash identifier:          G20UfUULH9hfGfzqkTk87YHxch14NMAoHSqNOJ2od1s=
Subject key identifier:   56:86:60:FA:8D:19:28:B8:BC:54:E1:07:EA:F5:50:5C:B2:1B:01:6D
Authority key identifier: 1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61
Certificate issuer:       /CN=A91F8177/serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
Manifest number:          BB
Signing time:             Thu 21 May 2026 07:07:55 +0000
Manifest this update:     Thu 21 May 2026 07:07:54 +0000
Manifest next update:     Thu 28 May 2026 07:07:54 +0000
Files and hashes:         1: HNLU8yahhKSHvyKs14rVwGj0ZmE.crl (hash: CCCg5tzQ4XHlUdd2A4R2OWetNx0kbTavlvbTwVwrzvo=)
                          2: 447A88023DDC11F0ACD9F475C4F9AE02.roa (hash: yApvKnBxIUvq7AlUwJW85McmrlejDSLKrMcrZmKRC/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8177, serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
        Validity
            Not Before: May 21 07:07:54 2026 GMT
            Not After : May 28 07:07:54 2026 GMT
        Subject: CN=6a0eaf4b-4e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0f:86:34:78:c6:e9:99:22:47:6a:ba:61:6e:
                    9a:b5:16:29:aa:39:1c:f9:69:5c:e3:6e:40:79:3d:
                    50:70:23:f1:cb:bf:2b:f0:62:d8:f7:31:88:e1:bf:
                    c0:ef:fe:0c:04:9f:c4:8c:50:73:20:ed:e6:cc:83:
                    f1:0d:b9:a5:90:44:f0:1d:22:48:c9:c0:8b:09:18:
                    18:3c:29:15:12:3b:c3:f3:84:70:62:dc:01:e0:96:
                    8d:79:39:3c:e8:71:78:e4:ab:5d:73:d4:9e:2a:f2:
                    b8:52:e6:55:17:ba:95:2d:21:51:5d:eb:ba:2e:b3:
                    12:de:ad:cc:d2:88:6c:18:40:90:52:7e:97:65:2e:
                    38:69:17:67:59:a8:06:be:d0:c2:6f:37:99:8a:20:
                    45:46:56:0e:71:8d:87:09:9a:03:31:db:6d:8d:84:
                    39:39:89:cf:d1:9a:c1:7a:ab:89:f9:94:35:00:a7:
                    c7:49:ac:2b:0f:c4:17:7d:93:7d:07:39:2b:78:20:
                    1e:a7:ba:91:f5:38:fa:03:05:de:ac:0d:ca:f2:f2:
                    21:f2:5c:81:13:ae:f7:2c:21:31:a7:09:d2:94:8e:
                    e3:b4:83:79:33:f1:e5:83:97:9b:80:0f:af:07:7d:
                    e7:bc:f4:c9:87:46:c0:5d:20:7d:c3:17:22:bd:34:
                    c9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:86:60:FA:8D:19:28:B8:BC:54:E1:07:EA:F5:50:5C:B2:1B:01:6D
            X509v3 Authority Key Identifier:
                keyid:1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d7:39:e3:53:df:cd:20:e5:5c:84:ca:44:f0:ce:06:03:a0:
         f7:19:e4:2a:14:b7:2e:4f:96:5a:a7:63:63:3a:74:b6:ea:99:
         0f:f8:3f:fc:85:74:d0:d1:46:da:24:55:fe:0a:15:7c:9c:fd:
         69:ce:7e:72:69:5b:3d:08:f4:71:6b:a8:90:05:38:08:e3:45:
         a4:c4:1f:c0:22:c5:75:cb:87:fb:6c:58:62:ad:a3:82:8f:6d:
         c3:64:f4:c2:f9:ac:c6:a7:43:74:2a:92:f0:79:28:94:55:c6:
         ac:4f:b0:05:3c:f2:0b:c3:dd:53:b4:4f:57:c8:b6:32:21:de:
         9e:2a:35:38:3c:e2:dc:76:b5:a6:28:65:e4:c7:b1:64:eb:7c:
         2a:f8:f9:3f:93:f5:65:71:18:b7:f3:59:f8:bb:d9:5c:64:29:
         ab:bb:49:26:5b:42:4b:cd:ed:3b:92:42:01:8c:e2:a9:13:46:
         d7:43:f4:14:9c:ea:26:cc:cf:98:5f:10:fa:53:d7:01:40:47:
         1b:a6:d5:1b:43:0e:13:26:67:0c:a5:68:60:58:50:2e:f6:a8:
         80:37:c7:12:94:cf:82:46:2b:d9:99:fa:20:22:76:ad:6f:3d:
         1b:16:e9:e7:f8:74:52:72:18:36:6b:6b:55:36:d1:bf:a3:d3:
         df:3b:fa:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgxNzcxMTAvBgNVBAUTKDFDRDJENEYzMjZBMTg0QTQ4N0JGMjJBQ0Q3OEFENUMw
NjhGNDY2NjEwHhcNMjYwNTIxMDcwNzU0WhcNMjYwNTI4MDcwNzU0WjAYMRYwFAYD
VQQDEw02YTBlYWY0Yi00ZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Q+GNHjG6ZkiR2q6YW6atRYpqjkc+Wlc425AeT1QcCPxy78r8GLY9zGI4b/A
7/4MBJ/EjFBzIO3mzIPxDbmlkETwHSJIycCLCRgYPCkVEjvD84RwYtwB4JaNeTk8
6HF45Ktdc9SeKvK4UuZVF7qVLSFRXeu6LrMS3q3M0ohsGECQUn6XZS44aRdnWagG
vtDCbzeZiiBFRlYOcY2HCZoDMdttjYQ5OYnP0ZrBequJ+ZQ1AKfHSawrD8QXfZN9
BzkreCAep7qR9Tj6AwXerA3K8vIh8lyBE673LCExpwnSlI7jtIN5M/Hlg5ebgA+v
B33nvPTJh0bAXSB9wxcivTTJAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFaGYPqN
GSi4vFThB+r1UFyyGwFtMB8GA1UdIwQYMBaAFBzS1PMmoYSkh78irNeK1cBo9GZh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODE3Ny84QkEzRDhDNDNE
REIxMUYwQUM5M0Q0MzJDNEY5QUUwMi9ITkxVOHlhaGhLU0h2eUtzMTRyVndHajBa
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hOTFU4eWFoaEtTSHZ5S3MxNHJWd0dqMFptRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODE3Ny84QkEzRDhDNDNEREIxMUYwQUM5M0Q0MzJDNEY5QUUwMi9ITkxVOHlhaGhL
U0h2eUtzMTRyVndHajBabUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARtc541PfzSDlXITKRPDOBgOg9xnkKhS3Lk+WWqdjYzp0tuqZD/g//IV00NFG
2iRV/goVfJz9ac5+cmlbPQj0cWuokAU4CONFpMQfwCLFdcuH+2xYYq2jgo9tw2T0
wvmsxqdDdCqS8HkolFXGrE+wBTzyC8PdU7RPV8i2MiHenio1ODzi3Ha1pihl5Mex
ZOt8Kvj5P5P1ZXEYt/NZ+LvZXGQpq7tJJltCS83tO5JCAYziqRNG10P0FJzqJszP
mF8Q+lPXAUBHG6bVG0MOEyZnDKVoYFhQLvaogDfHEpTPgkYr2Zn6ICJ2rW89Gxbp
5/h0UnIYNmtrVTbRv6PT3zv6/A==
-----END CERTIFICATE-----
Generated at Thu May 21 14:14:51 2026 by rpki-client