Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
File:                     HUW1iuOmlSERtAmFTag5MXvugjM.mft (raw, json)
Hash identifier:          IBOyFbYxZwHKg7u8W521Vpb2jGOB5I1qIHBJQGlI9hc=
Subject key identifier:   77:50:1A:5E:E7:F8:C4:06:74:5F:68:5E:46:AF:6B:3F:69:5D:D3:73
Authority key identifier: 1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33
Certificate issuer:       /CN=A9120119/serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
Certificate serial:       11D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
Manifest number:          1A85
Signing time:             Mon 22 Jun 2026 17:08:49 +0000
Manifest this update:     Mon 22 Jun 2026 17:08:48 +0000
Manifest next update:     Mon 29 Jun 2026 17:08:48 +0000
Files and hashes:         1: HUW1iuOmlSERtAmFTag5MXvugjM.crl (hash: tt/jpXn6SG/pnS0L8XApeBgzpldOfEFzDA6NF3mT2uM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl
                          rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4564 (0x11d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120119, serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
        Validity
            Not Before: Jun 22 17:08:48 2026 GMT
            Not After : Jun 29 17:08:48 2026 GMT
        Subject: CN=6a396c20-d890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c3:28:98:e3:ba:d3:5c:25:4c:5f:39:01:fb:
                    a6:4c:96:93:97:f6:25:85:71:a9:bb:6d:9a:19:46:
                    bf:b8:13:71:30:a8:47:47:e1:8d:7e:8b:9e:50:11:
                    99:ec:2f:95:4d:59:02:17:61:64:56:4c:7c:e7:e3:
                    b8:23:82:15:c8:6e:e7:8e:03:67:c0:68:ff:d6:d4:
                    96:06:02:d0:bb:5a:06:71:36:c4:07:a6:6e:2f:c1:
                    a9:d9:93:cf:fa:58:37:6e:54:79:3c:72:e9:64:b7:
                    cd:4b:d3:1c:07:26:b4:0d:8d:1c:0b:6a:36:d6:5c:
                    8a:01:2e:4f:a4:0e:26:80:1a:89:8a:a9:ae:ef:31:
                    cd:1e:66:1b:24:4b:e6:f8:ae:e9:24:e2:70:b2:4b:
                    80:23:f4:23:b0:82:89:1a:d2:2b:fc:4e:21:09:89:
                    f6:81:af:51:74:60:9e:61:2d:75:94:1c:68:63:ee:
                    7b:9c:6a:18:5a:3c:76:0b:b3:33:cf:0c:3c:65:42:
                    79:14:43:96:e5:ab:2e:7f:95:6a:55:f2:30:52:72:
                    9d:12:fd:24:de:49:06:99:9b:17:8c:1a:38:db:b9:
                    bb:de:ca:a0:23:9c:cf:e9:ff:ad:89:49:be:fa:0b:
                    ac:f6:4f:96:6e:83:b0:51:19:70:bd:d8:8f:d7:fc:
                    47:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:50:1A:5E:E7:F8:C4:06:74:5F:68:5E:46:AF:6B:3F:69:5D:D3:73
            X509v3 Authority Key Identifier:
                keyid:1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:65:95:56:01:f1:af:7f:26:f4:f6:54:21:d8:92:1b:57:57:
         a6:75:8c:a2:36:ba:93:67:64:f3:c4:03:e4:c9:e5:9b:17:76:
         1a:b4:b6:c9:1b:ca:d6:b1:e8:f3:ed:17:10:1c:09:f2:1d:9d:
         17:2d:e7:09:06:f5:4e:a2:d3:89:01:1b:6f:25:15:ce:b5:1b:
         2c:38:67:d9:4b:00:16:88:85:34:69:1f:f8:6f:82:cb:fd:41:
         46:46:e5:f2:76:bb:dc:08:4b:aa:cb:8f:4c:9a:b5:d0:77:2a:
         b5:84:5f:73:cd:96:03:72:d8:72:b4:1a:c6:cf:e3:21:80:ef:
         8f:45:10:aa:00:f1:ab:4c:bf:b8:e4:e5:b1:ad:3f:3c:0d:9b:
         22:de:29:77:62:54:55:10:3e:c4:fb:f6:89:30:2d:69:0a:b5:
         cc:36:13:76:14:3b:5f:32:18:17:cb:f5:27:95:f0:d1:ac:21:
         15:1f:48:fc:c9:4c:9c:b6:71:b5:af:13:70:ad:ae:3f:93:9d:
         34:bb:db:e4:51:d0:bf:05:6a:94:1c:ed:e7:59:08:52:8b:3f:
         70:37:86:77:1b:28:3c:dc:45:65:55:1d:d7:b9:fe:8a:7c:20:
         ba:33:70:5c:c5:23:98:ff:bf:cc:95:c2:b9:53:ba:21:ae:20:
         60:d2:90:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:12 2026 by rpki-client