Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
File:                     HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft (raw, json)
Hash identifier:          iiMWdtc1HqMSlXXoZjQ10vyimG5032qDaOHHEGH8s2w=
Subject key identifier:   18:6C:BB:AF:D4:4C:D5:2A:C3:51:73:35:7A:C6:4A:B3:FF:D1:E4:D9
Authority key identifier: 1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F
Certificate issuer:       /CN=A911BD6E/serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
Manifest number:          78
Signing time:             Fri 17 Jul 2026 09:13:35 +0000
Manifest this update:     Fri 17 Jul 2026 09:13:35 +0000
Manifest next update:     Fri 24 Jul 2026 09:13:35 +0000
Files and hashes:         1: HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl (hash: AiIVX/Qi5tguuK5uJbIEtmWzhrC9qM/yENR5O7hDQAo=)
                          2: C6369A92E29211F086FBD344456F56BC.roa (hash: /hMoFkZDEyrOtFoyUNiUcHKPDtAIaxeqfmQ19EP0GNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl
                          rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD6E, serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
        Validity
            Not Before: Jul 17 09:13:35 2026 GMT
            Not After : Jul 24 09:13:35 2026 GMT
        Subject: CN=6a59f23f-da12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:bf:d7:0d:fb:70:d9:f1:76:aa:0b:e3:3e:
                    74:cb:e2:cf:45:9a:85:c9:6d:21:33:ec:d4:8d:e6:
                    d8:5a:4a:49:bb:9f:2b:58:88:a4:34:ef:02:47:f0:
                    30:03:e4:fb:6d:1d:f3:bd:40:3a:c0:bf:70:c1:45:
                    95:1a:ac:55:52:e3:79:da:35:02:c4:22:46:66:16:
                    a4:b5:c3:c9:c6:c3:81:e1:21:3e:e8:70:1e:dd:71:
                    58:32:d2:dd:1f:43:b0:a5:7b:58:de:10:25:8f:66:
                    9c:b4:f0:90:47:59:5d:de:78:b5:3d:78:74:b6:2e:
                    10:fa:c0:b7:e3:9d:d8:1f:3a:be:32:7b:e3:cd:de:
                    a5:3c:26:74:60:c5:36:67:45:39:0a:be:08:25:6d:
                    b3:3a:84:4b:64:9d:7c:27:b1:e5:a3:e3:01:a8:48:
                    8a:60:0c:e7:b2:7a:6e:97:5f:b4:5b:2f:28:fb:5c:
                    77:5e:4d:3d:cd:e1:f2:91:62:91:29:93:6c:fe:c3:
                    d9:0f:e0:f5:78:a2:2d:1d:44:a3:ab:55:4c:c4:b6:
                    8c:e3:e7:20:ff:92:19:e6:0d:25:22:5b:30:52:4b:
                    1c:2d:8f:86:a5:3d:59:f0:b4:90:82:3e:8c:a6:05:
                    63:7f:b3:fa:61:ba:ec:cc:ae:d9:04:d8:4a:cd:9b:
                    f7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6C:BB:AF:D4:4C:D5:2A:C3:51:73:35:7A:C6:4A:B3:FF:D1:E4:D9
            X509v3 Authority Key Identifier:
                keyid:1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:38:2a:79:1f:29:5c:10:39:81:62:2c:d2:a9:2b:9c:82:66:
         ed:26:1c:27:da:0c:c2:5c:10:bd:6f:63:aa:42:20:ca:6a:e1:
         6d:51:e6:1f:ea:ed:1c:bc:39:2e:c7:a0:84:1f:89:fd:6b:29:
         75:ba:07:5c:9b:7c:fe:d4:29:ea:88:20:5e:0a:5e:2d:b8:86:
         ec:fe:96:4b:8c:d3:cd:5b:80:4b:34:6b:8b:41:c0:40:aa:cc:
         b8:61:86:f2:d5:0c:15:ea:48:81:33:56:b2:c5:53:86:8b:dc:
         cf:3a:b6:68:a0:01:ec:03:02:c5:db:6f:00:8e:15:b1:01:2b:
         4f:26:4d:f2:05:61:8f:88:c3:c5:9e:e5:00:9a:c8:8a:ee:ea:
         92:aa:e8:b5:92:04:27:7f:8f:bf:7a:a9:14:45:6a:53:3d:cb:
         b6:97:01:7f:63:77:da:bc:bd:28:94:5e:c6:58:3d:d1:4f:de:
         99:ee:a2:ee:5c:8f:3c:d2:9e:58:e0:c6:95:86:d4:fc:42:30:
         c3:07:63:b4:9e:3d:46:2e:a3:28:c1:43:5e:ca:8a:ba:1c:39:
         15:53:54:4e:86:df:25:f0:64:10:99:98:22:6e:77:0a:9b:3c:
         c8:62:c6:6b:02:86:f3:50:e8:d8:bd:bd:6a:2a:d8:d6:83:6b:
         b6:7b:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:16 2026 by rpki-client