Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
File:                     HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json)
Hash identifier:          CyEcpeZLjT2eZmAfwwxvAJzLvb8wER/4clpUUjXvGbI=
Subject key identifier:   50:C2:9A:2D:53:CD:49:96:2C:0B:55:37:52:E3:E4:9E:FF:18:9E:A8
Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
Certificate issuer:       /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Certificate serial:       0F93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
Manifest number:          0F68
Signing time:             Mon 20 Jul 2026 17:43:58 +0000
Manifest this update:     Mon 20 Jul 2026 17:43:57 +0000
Manifest next update:     Mon 27 Jul 2026 17:43:57 +0000
Files and hashes:         1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: f/LeGgqrD0o05L3x9KhEruMxWyNFttOjqpxW6FkFGSY=)
                          2: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: HJroJ49BIbNGAuccbium1kEpSjVPB8qo4E6nRxSwoW8=)
                          3: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: JnEr1ULSbKqalMG/ES7bWBOgeNVDSEEFX8LfergGB94=)
                          4: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: CzoXjxwwafDE/0X1/IFRvm6Y/QHPkUJqqlhM2vR6GHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
                          rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 17:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3987 (0xf93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
        Validity
            Not Before: Jul 20 17:43:57 2026 GMT
            Not After : Jul 27 17:43:57 2026 GMT
        Subject: CN=6a5e5e5e-eea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:68:db:98:8d:47:78:37:31:0e:2e:4a:c1:
                    6d:5a:26:2c:a7:5e:9e:ff:61:4f:7e:b1:5d:71:0c:
                    71:b6:fe:76:bc:f7:af:a0:74:00:10:e3:3b:fe:99:
                    a7:fe:23:76:4e:08:9f:72:c6:d8:2e:21:0c:15:24:
                    0c:10:d8:f9:1c:be:07:9e:66:bd:71:28:49:69:b2:
                    56:4f:fa:b1:3c:be:5c:71:39:b9:ef:a3:2d:83:eb:
                    ea:4c:0a:70:53:94:dd:b6:af:91:e2:75:46:da:29:
                    a9:ea:2e:11:e4:1b:08:29:ec:06:0e:08:e9:76:ea:
                    60:b0:89:fb:6b:79:a0:dc:56:d3:38:ed:8f:05:75:
                    22:82:02:0b:45:4f:45:5a:37:67:25:20:c6:fc:67:
                    a1:ba:95:e0:6b:dc:e5:39:80:ba:dd:a7:c3:67:5b:
                    8d:3f:20:5d:c6:6c:32:48:9f:9e:09:bd:aa:8a:fb:
                    7d:5a:29:a3:40:ce:96:d6:69:68:8a:64:c8:26:70:
                    53:99:7a:ba:f8:68:8a:f7:0f:a2:36:0a:2f:dc:a4:
                    74:cd:71:70:95:af:ef:49:76:ef:72:5e:14:d6:ab:
                    2a:8a:1b:73:d0:80:d1:e3:c3:07:14:44:da:50:24:
                    8c:08:e2:f2:b3:4d:ac:83:20:0f:f1:50:8f:56:1f:
                    93:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C2:9A:2D:53:CD:49:96:2C:0B:55:37:52:E3:E4:9E:FF:18:9E:A8
            X509v3 Authority Key Identifier:
                keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c0:04:c1:6d:89:88:70:f2:de:82:fe:55:65:52:23:54:ff:
         64:14:62:c4:37:91:3f:f6:10:9c:55:d8:e6:62:df:29:38:28:
         32:7d:53:e7:79:66:9f:6f:15:c3:40:76:40:e3:1b:69:7b:a2:
         d5:e9:f2:39:2d:4e:a4:0a:eb:74:70:a0:96:60:b9:1c:c0:95:
         1e:82:46:ef:1f:69:06:eb:63:ae:0d:12:6c:e3:72:5c:8d:a9:
         06:51:f8:38:01:04:e8:76:4f:44:c1:c6:2c:3a:2b:7c:4b:90:
         98:99:7b:2f:a7:9d:7f:98:2b:e6:63:5b:a3:2b:86:6e:a6:34:
         a4:7a:7f:bd:d3:e2:04:6c:82:4d:42:67:8e:3b:93:09:2d:ac:
         96:e1:56:1d:53:73:ae:9e:c7:90:0d:6e:09:bf:e4:61:d5:d8:
         ab:a2:89:ef:22:d6:55:c4:de:8f:89:57:16:be:2c:0c:4b:77:
         48:dc:19:fb:1e:bb:95:55:93:61:86:98:78:79:de:62:80:09:
         bb:83:2d:1b:c4:6e:ee:1b:d7:06:dc:b0:13:13:ff:07:05:92:
         7a:1c:86:73:8e:fe:33:88:a2:ba:ca:50:f7:99:8c:97:31:1c:
         5a:be:2e:17:f8:60:32:af:5a:e5:e4:e5:66:7d:e3:9d:c0:af:
         9c:9b:cd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:22:55 2026 by rpki-client