Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File:                     HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier:          OLrsVn27wwrIz32Ch+mgn0pDPUnbt/FPXTHoR0xaTaw=
Subject key identifier:   A5:AD:8D:BF:FF:63:20:99:DA:1F:0B:80:A6:C8:A5:13:71:2E:96:49
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       06F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number:          06C7
Signing time:             Sun 28 Jun 2026 22:35:26 +0000
Manifest this update:     Sun 28 Jun 2026 22:35:25 +0000
Manifest next update:     Sun 05 Jul 2026 22:35:25 +0000
Files and hashes:         1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: mgpsFHnYUA2B06p4dX8hmVvIvEXhDfiFnfZ6kF8riK4=)
                          2: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
                          3: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
                          4: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
                          5: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
                          6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Jul 2026 22:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1780 (0x6f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Jun 28 22:35:25 2026 GMT
            Not After : Jul  5 22:35:25 2026 GMT
        Subject: CN=6a41a1ad-4965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a5:c2:3c:7c:9f:69:16:84:cf:b2:96:86:fe:
                    26:1a:d3:a9:57:9a:e9:22:3f:86:66:81:c9:54:13:
                    92:53:a1:ed:c1:38:f1:6e:b3:37:f3:bf:d7:33:e7:
                    4d:f0:ba:77:a7:8c:1f:f2:f5:fd:f6:19:52:de:49:
                    3c:6e:99:df:01:3b:f2:79:d2:8f:dc:15:02:da:f8:
                    bb:a3:4a:30:b6:7d:8c:80:62:a2:6e:90:af:1e:90:
                    7d:4d:cf:84:c4:68:94:52:0c:87:3f:9a:f8:f4:3e:
                    0d:81:3d:df:60:b3:23:00:ed:5b:59:03:9e:47:15:
                    2a:3c:31:75:d6:d9:12:b3:7b:96:75:66:6b:b2:f6:
                    e2:d7:13:e8:6c:6f:5c:9d:01:59:20:44:fd:05:00:
                    70:d7:30:62:d9:d8:25:37:a5:f2:73:f4:14:ed:b5:
                    1f:bf:22:be:15:90:fc:4c:55:7e:e8:56:67:25:85:
                    90:6f:75:81:fb:9f:74:97:64:f6:ee:83:ce:bf:c5:
                    a8:9b:d5:92:dd:f7:05:c3:c1:ad:63:0d:58:2e:17:
                    0c:2e:fc:9a:92:99:b3:5b:84:54:d1:d9:42:71:65:
                    4a:80:05:61:57:3e:ce:0e:52:76:1e:2d:39:c3:30:
                    03:ec:d6:50:8d:ef:59:4e:2c:70:3d:fb:4f:e0:fa:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AD:8D:BF:FF:63:20:99:DA:1F:0B:80:A6:C8:A5:13:71:2E:96:49
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9d:d6:69:1e:24:65:b5:49:ca:eb:31:19:f7:5b:03:19:8b:
         54:2f:fe:19:c8:1d:ff:53:c6:ae:ed:86:0d:06:9a:b5:cd:c9:
         1c:c9:59:67:c9:0e:40:36:c3:71:64:06:84:a8:ca:b7:ce:5c:
         05:b1:e1:78:17:7f:69:9b:28:b4:ad:59:dd:93:fd:8f:ae:d8:
         7a:bf:e2:7e:c5:fc:34:b0:14:ce:df:c4:3a:63:bc:ce:3d:9d:
         32:53:f8:0f:80:d6:0d:49:3b:19:fe:c9:45:91:d7:b4:78:4f:
         11:d1:88:b2:01:3e:07:65:09:49:34:15:c2:a1:3b:c0:87:f2:
         95:78:bd:cd:f9:e0:57:0e:c4:fc:9d:3b:88:96:f9:80:96:bf:
         ad:08:d4:e0:85:0d:75:6f:23:42:43:a3:f8:1f:ab:0d:d4:79:
         cc:f5:86:a7:7f:bd:89:6d:33:73:62:ce:d9:78:7e:a6:65:03:
         fd:39:cb:3a:a1:48:30:ca:00:41:09:a8:7c:46:b5:62:d8:83:
         3d:45:05:b4:4b:dc:93:4b:ea:08:0d:6f:45:99:b3:6d:62:bb:
         db:0e:ff:e3:8a:20:f6:7c:41:e7:09:a7:51:32:bc:5f:59:da:
         68:a7:a8:0a:46:39:8f:a9:06:d1:43:fc:54:3e:f3:c2:a1:8f:
         04:c6:38:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 08:01:30 2026 by rpki-client