Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
File:                     H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json)
Hash identifier:          6NCDpMn2w91sr1tOXBxtRaoEFMH5eCnLI9WQex+HTxI=
Subject key identifier:   48:A6:7B:D7:B5:43:C7:F6:1D:70:B3:CA:6E:3A:95:13:A9:37:64:61
Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
Certificate issuer:       /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Certificate serial:       027F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
Manifest number:          0279
Signing time:             Wed 19 Aug 2026 02:29:35 +0000
Manifest this update:     Wed 19 Aug 2026 02:29:34 +0000
Manifest next update:     Wed 26 Aug 2026 02:29:34 +0000
Files and hashes:         1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: Q+G8M3kFnaepgZFWY2rOKUyuZvp4Xza+Vtu4OiCzpR8=)
                          2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: ojeQEJwfkmkjsjTjJi7JxC/rYMjRAxyFan+n2ZkXfIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
                          rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
        Validity
            Not Before: Aug 19 02:29:34 2026 GMT
            Not After : Aug 26 02:29:34 2026 GMT
        Subject: CN=6a85150f-4f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:19:cb:42:3d:6e:69:47:70:63:89:f1:51:
                    32:97:a6:3c:7b:23:da:24:79:80:8c:81:7a:7f:ba:
                    62:29:18:eb:c1:0e:3d:8b:32:d0:e7:f6:cc:6f:60:
                    16:67:69:a7:3a:87:ba:32:c0:8d:90:9b:62:1c:19:
                    ab:cb:dd:b6:06:12:37:65:07:79:54:b1:4c:b3:8d:
                    18:ce:84:eb:93:8e:0e:9a:72:53:9e:2f:19:04:8e:
                    e7:33:86:e9:d5:cf:08:29:8c:66:9e:e7:8a:62:b6:
                    08:31:09:17:06:72:63:6d:2e:62:83:3a:4d:12:de:
                    df:17:14:68:21:39:4b:54:c7:e3:36:cb:68:94:0b:
                    34:6f:18:2d:fa:a7:01:d7:9c:81:72:f6:42:52:2e:
                    c4:4e:78:05:5a:4a:6b:b5:e0:26:6b:7e:78:ff:ac:
                    fc:90:d0:79:c1:f3:c0:da:b7:20:71:cf:d7:ff:38:
                    4f:20:29:e7:e9:7f:6c:87:d6:64:bc:e2:71:ce:cb:
                    0e:d2:e0:70:c7:20:95:a0:c5:e2:ef:4b:50:f9:cc:
                    77:3e:43:c5:51:bb:53:f1:6b:15:09:61:4e:3c:28:
                    6a:c7:21:d3:00:59:56:21:db:13:cb:78:4e:7e:a7:
                    f2:e5:2f:c3:b1:84:47:8d:17:55:66:4b:13:ad:15:
                    d3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A6:7B:D7:B5:43:C7:F6:1D:70:B3:CA:6E:3A:95:13:A9:37:64:61
            X509v3 Authority Key Identifier:
                keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:cb:f6:3e:88:b4:12:95:ce:2a:ad:b9:85:d2:2e:84:4c:7a:
         f8:2b:6f:8c:b1:10:c4:73:fd:a0:b7:9a:2c:69:59:ed:42:86:
         df:41:75:ec:c6:25:ae:71:34:0e:47:07:35:66:e4:a9:29:15:
         7e:ab:c5:dc:22:fe:bd:01:61:34:ac:d4:5b:79:9e:00:ed:ba:
         95:e8:df:3e:6b:a3:81:e6:66:cd:1c:24:3b:67:63:33:b2:a2:
         92:fc:b1:33:70:31:50:fa:f0:be:f2:43:2a:8b:1f:99:eb:09:
         8b:f0:2d:66:03:54:8c:56:fb:f3:b5:66:5b:c7:42:13:1b:e5:
         60:61:dc:32:51:35:7e:42:93:2b:06:71:0a:a3:d6:94:5f:47:
         76:ae:3a:37:80:45:12:fc:7b:52:bc:05:17:5c:30:51:54:e1:
         06:01:c2:90:e5:0a:69:91:b1:32:c6:8a:72:13:5a:a3:ae:9b:
         1e:92:48:ad:e5:4d:02:b1:da:af:08:fc:13:91:f1:46:c2:14:
         47:1d:9d:61:bd:e5:3b:c1:3e:56:2a:7d:f5:2f:26:a8:06:8a:
         23:7e:10:32:60:c3:06:07:13:67:64:21:30:c4:de:9b:c6:b9:
         66:c0:dd:f3:1b:70:f4:94:e6:d6:f8:a3:16:4b:c5:b2:fe:f9:
         d3:fb:4c:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5
M0FDNjkzNjgwHhcNMjYwODE5MDIyOTM0WhcNMjYwODI2MDIyOTM0WjAYMRYwFAYD
VQQDEw02YTg1MTUwZi00Zjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoSIZy0I9bmlHcGOJ8VEyl6Y8eyPaJHmAjIF6f7piKRjrwQ49izLQ5/bMb2AW
Z2mnOoe6MsCNkJtiHBmry922BhI3ZQd5VLFMs40YzoTrk44OmnJTni8ZBI7nM4bp
1c8IKYxmnueKYrYIMQkXBnJjbS5igzpNEt7fFxRoITlLVMfjNstolAs0bxgt+qcB
15yBcvZCUi7ETngFWkprteAma354/6z8kNB5wfPA2rcgcc/X/zhPICnn6X9sh9Zk
vOJxzssO0uBwxyCVoMXi70tQ+cx3PkPFUbtT8WsVCWFOPChqxyHTAFlWIdsTy3hO
fqfy5S/DsYRHjRdVZksTrRXT9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEime9e1
Q8f2HXCzym46lROpN2RhMB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx
QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr
MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1
ZmpjZzdGU3N2MWlUckdrMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAccv2Poi0EpXOKq25hdIuhEx6+CtvjLEQxHP9oLeaLGlZ7UKG30F17MYlrnE0
DkcHNWbkqSkVfqvF3CL+vQFhNKzUW3meAO26lejfPmujgeZmzRwkO2djM7Kikvyx
M3AxUPrwvvJDKosfmesJi/AtZgNUjFb787VmW8dCExvlYGHcMlE1fkKTKwZxCqPW
lF9Hdq46N4BFEvx7UrwFF1wwUVThBgHCkOUKaZGxMsaKchNao66bHpJIreVNArHa
rwj8E5HxRsIURx2dYb3lO8E+Vip99S8mqAaKI34QMmDDBgcTZ2QhMMTem8a5ZsDd
8xtw9JTm1vijFkvFsv750/tMvg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:21 2026 by rpki-client