Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
File:                     276b_H-KPTvgW7W2Ah91Rb6YG_A.mft (raw, json)
Hash identifier:          l7jgIgS2tGL+ywdXGBs5tAgNr8N3sgARskWSX5/XQwE=
Subject key identifier:   26:D6:03:D5:EC:F4:A6:9C:3C:CA:19:89:B7:40:02:3B:4F:61:46:5B
Authority key identifier: DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0
Certificate issuer:       /CN=A913D03A/serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0
Certificate serial:       0788
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
Manifest number:          077F
Signing time:             Mon 28 Jul 2025 21:58:44 +0000
Manifest this update:     Mon 28 Jul 2025 21:58:43 +0000
Manifest next update:     Mon 04 Aug 2025 21:58:43 +0000
Files and hashes:         1: 276b_H-KPTvgW7W2Ah91Rb6YG_A.crl (hash: rPU36zAIwDaqFJY2MAG5jrHHQ0POkqRTLMYZNryb0io=)
                          2: 3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa (hash: rhQRS5c9b4woxqf3Lh4ekB6IlqaEB8oCpxpphU5va4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl
                          rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 Aug 2025 21:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D03A, serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0
        Validity
            Not Before: Jul 28 21:58:43 2025 GMT
            Not After : Aug  4 21:58:43 2025 GMT
        Subject: CN=6887f294-846b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:c0:49:7d:9e:d8:00:3c:2f:40:40:ef:00:
                    5e:d9:22:60:ef:a7:ba:ec:1a:ef:13:4f:09:16:19:
                    ac:76:89:c1:04:2f:48:29:ba:f7:78:16:43:82:43:
                    3f:e7:69:0d:15:73:33:09:bd:c4:88:48:9a:ee:af:
                    1e:93:0e:84:fa:e8:90:8d:17:81:af:b6:b6:be:89:
                    f6:a8:8a:2d:a1:a4:72:9a:0e:8e:9c:b3:07:1e:dc:
                    ef:5a:0f:e6:0e:d2:a7:f6:d5:86:d7:ba:8a:d6:fd:
                    91:80:72:92:fc:f6:9f:0c:10:88:43:16:42:46:3a:
                    f5:d2:79:c3:f9:61:2f:40:3a:88:f4:96:5e:be:33:
                    48:95:23:ce:7c:ce:90:8b:22:49:bd:fd:0f:49:19:
                    c4:be:a0:41:7f:40:7b:4d:a7:e4:68:ed:c9:3d:de:
                    b1:f5:67:45:ac:2a:58:59:19:b4:21:4a:33:b7:71:
                    60:8b:69:c6:22:61:c6:47:cb:d0:ca:1a:4c:7e:e0:
                    a2:55:97:7e:c4:c7:be:1b:fc:d2:5a:6f:b4:f0:c6:
                    f9:f5:58:af:66:24:00:dc:15:fe:a7:90:e1:9a:ac:
                    e9:3b:82:cc:8a:2e:cc:d0:1c:7e:fb:2c:a1:7c:01:
                    9f:fc:eb:d4:6b:06:01:15:75:db:b3:a1:2f:6c:fe:
                    97:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D6:03:D5:EC:F4:A6:9C:3C:CA:19:89:B7:40:02:3B:4F:61:46:5B
            X509v3 Authority Key Identifier:
                keyid:DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e5:c1:57:7e:16:33:24:a6:6b:bf:cf:21:c5:0a:ca:05:b0:
         94:9d:63:bb:e0:d8:b9:35:db:9b:0b:bf:b7:c8:8f:bb:49:17:
         d8:5a:e7:00:bc:4e:04:a9:23:c3:7b:39:04:97:15:01:8d:fa:
         11:bc:56:71:30:c5:11:c7:7f:ec:ea:60:d4:9d:e9:1c:f9:82:
         3f:87:ab:68:7c:36:88:d7:e4:83:6c:0d:60:0f:29:0d:43:15:
         22:3b:6c:29:5f:6c:fd:b5:96:ae:46:a4:1d:9e:d8:cc:31:d5:
         91:19:70:e7:16:9b:ef:b9:8f:51:cf:d6:58:d4:09:ca:d9:43:
         58:e7:22:3f:04:08:00:08:a2:48:c8:93:d3:86:20:d7:20:ca:
         43:b0:4d:da:a0:f4:f1:52:7d:6b:32:b5:d4:19:bf:25:de:78:
         c4:6d:88:ed:6f:b7:66:87:a8:b5:69:78:2b:ba:53:35:1d:08:
         94:89:51:0d:e8:d1:48:88:14:b7:7f:09:19:d8:aa:56:16:5c:
         48:4a:4d:b0:f9:d1:9a:51:84:c6:11:79:7f:be:3b:0a:9f:1a:
         42:4b:17:11:05:6e:30:c5:2d:d0:d4:e3:dc:90:ae:32:db:1d:
         18:0a:ee:17:31:4e:7a:c5:b1:09:e4:0a:5b:e5:81:85:7b:6d:
         09:92:7b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 04:33:51 2025 by rpki-client