Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/HoZxK4RkFt7tWImiU22NAJ3B8i4.mft
File:                     HoZxK4RkFt7tWImiU22NAJ3B8i4.mft (raw, json)
Hash identifier:          YxWF6N5G/4bXG0ef+Ff6Ybx3d1BavS/836h9/NoY6eo=
Subject key identifier:   5E:EB:1A:8A:C6:DD:43:67:CA:F7:34:D6:BD:26:85:32:2E:62:DA:73
Authority key identifier: 1E:86:71:2B:84:64:16:DE:ED:58:89:A2:53:6D:8D:00:9D:C1:F2:2E
Certificate issuer:       /CN=A913237D/serialNumber=1E86712B846416DEED5889A2536D8D009DC1F22E
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoZxK4RkFt7tWImiU22NAJ3B8i4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/HoZxK4RkFt7tWImiU22NAJ3B8i4.mft
Manifest number:          2F
Signing time:             Tue 23 Jun 2026 08:59:59 +0000
Manifest this update:     Tue 23 Jun 2026 08:59:58 +0000
Manifest next update:     Tue 30 Jun 2026 08:59:58 +0000
Files and hashes:         1: HoZxK4RkFt7tWImiU22NAJ3B8i4.crl (hash: EkzUTvwVkmbYX7cR4XkGHCVgFUzPbqNuHvMBLtTc+bM=)
                          2: EA7000822F6911F18DA90D0DBA833773.roa (hash: l2vqASAiW/hXP7AnKD1leWCEKdnAxJCJTUCdMZ0hGYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/HoZxK4RkFt7tWImiU22NAJ3B8i4.crl
                          rsync://rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/HoZxK4RkFt7tWImiU22NAJ3B8i4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoZxK4RkFt7tWImiU22NAJ3B8i4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 08:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913237D, serialNumber=1E86712B846416DEED5889A2536D8D009DC1F22E
        Validity
            Not Before: Jun 23 08:59:58 2026 GMT
            Not After : Jun 30 08:59:58 2026 GMT
        Subject: CN=6a3a4b0e-2d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:75:06:f3:8d:2a:ce:35:34:f1:78:92:81:af:
                    55:25:43:35:2f:44:83:b2:ed:ed:15:5f:12:f6:bf:
                    bf:e9:36:bd:24:58:83:85:f9:53:58:53:0c:88:6e:
                    35:68:47:db:d7:25:8c:0a:77:eb:95:36:fe:ea:61:
                    dd:0b:10:bc:bd:70:0c:2e:91:69:97:b3:44:d5:a2:
                    dc:37:b5:f2:e8:f5:58:b5:67:df:c1:8b:f1:ae:17:
                    ab:1d:06:61:2e:4f:3f:e6:af:c9:5a:3b:a5:71:4f:
                    55:fa:57:20:51:35:2b:c4:95:bd:ab:23:54:62:60:
                    6c:4c:ad:98:a3:67:d1:98:9c:35:64:3f:93:27:1f:
                    a8:cf:fa:5e:59:1f:13:3c:73:76:9c:f5:d8:ca:11:
                    80:66:1d:a1:67:b7:49:16:0b:2b:83:f3:65:40:fe:
                    38:25:24:8f:1c:c6:ad:08:d7:dd:c5:2c:11:96:78:
                    43:24:4e:05:1f:2b:0f:e0:7d:4c:dc:c0:79:74:bf:
                    cf:fe:ea:60:01:92:ca:19:cf:c7:ad:6c:e4:79:8a:
                    43:66:2d:d5:51:a3:ef:38:3f:4d:78:d4:0e:a1:05:
                    fb:93:05:76:36:44:38:bf:cb:f0:a5:c0:2c:c7:f5:
                    97:d2:46:df:6a:da:eb:59:d5:a2:ca:ad:bd:fa:5e:
                    09:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EB:1A:8A:C6:DD:43:67:CA:F7:34:D6:BD:26:85:32:2E:62:DA:73
            X509v3 Authority Key Identifier:
                keyid:1E:86:71:2B:84:64:16:DE:ED:58:89:A2:53:6D:8D:00:9D:C1:F2:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/HoZxK4RkFt7tWImiU22NAJ3B8i4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoZxK4RkFt7tWImiU22NAJ3B8i4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913237D/CC99F2022CE911F1B4B6892EA4833773/HoZxK4RkFt7tWImiU22NAJ3B8i4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f1:b9:bd:97:7d:a4:11:5f:90:d7:26:00:d8:db:34:46:66:
         94:91:3f:42:ac:5e:e8:c4:f6:fe:3e:5e:e0:7b:24:60:ac:fa:
         47:24:aa:0c:3c:7a:4b:28:bb:c0:43:4a:e8:fc:a6:b7:12:b3:
         d5:08:4b:65:33:1d:90:31:06:b4:55:94:4a:47:e8:5d:08:ef:
         fa:1b:93:e0:aa:dd:12:3d:ce:15:57:d2:37:3d:47:cc:12:5c:
         7c:a4:7d:24:c5:2b:43:09:5c:04:fe:28:30:0f:be:61:de:fe:
         da:25:34:32:5b:a5:08:70:0c:cc:06:e3:5d:76:c3:d9:d5:53:
         45:d6:4f:80:fb:28:5e:c2:51:af:72:ad:68:d0:12:47:cc:c0:
         0c:75:36:6d:30:c8:82:5a:f1:bc:d0:f7:bd:a1:c6:15:5b:e8:
         00:9a:84:19:44:b7:7a:4c:7b:2d:41:97:59:47:82:b9:3e:cc:
         5d:2f:e1:7f:90:b7:6e:bb:a3:3d:60:57:94:6f:63:f4:27:b9:
         00:fd:b5:2b:c3:cd:7b:bb:a4:76:bf:90:a0:10:e5:6e:27:a6:
         9d:37:22:ce:64:ea:ad:8a:f1:94:ad:45:ee:51:9a:da:02:f9:
         e1:db:0d:0c:fd:1f:08:90:34:3b:6e:f6:ea:d5:2c:d5:ab:6e:
         ac:c2:d5:43
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MjM3RDExMC8GA1UEBRMoMUU4NjcxMkI4NDY0MTZERUVENTg4OUEyNTM2RDhEMDA5
REMxRjIyRTAeFw0yNjA2MjMwODU5NThaFw0yNjA2MzAwODU5NThaMBgxFjAUBgNV
BAMTDTZhM2E0YjBlLTJkNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpdQbzjSrONTTxeJKBr1UlQzUvRIOy7e0VXxL2v7/pNr0kWIOF+VNYUwyIbjVo
R9vXJYwKd+uVNv7qYd0LELy9cAwukWmXs0TVotw3tfLo9Vi1Z9/Bi/GuF6sdBmEu
Tz/mr8laO6VxT1X6VyBRNSvElb2rI1RiYGxMrZijZ9GYnDVkP5MnH6jP+l5ZHxM8
c3ac9djKEYBmHaFnt0kWCyuD82VA/jglJI8cxq0I193FLBGWeEMkTgUfKw/gfUzc
wHl0v8/+6mABksoZz8etbOR5ikNmLdVRo+84P0141A6hBfuTBXY2RDi/y/ClwCzH
9ZfSRt9q2utZ1aLKrb36XgmPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXusaisbd
Q2fK9zTWvSaFMi5i2nMwHwYDVR0jBBgwFoAUHoZxK4RkFt7tWImiU22NAJ3B8i4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyMzdEL0NDOTlGMjAyMkNF
OTExRjFCNEI2ODkyRUE0ODMzNzczL0hvWnhLNFJrRnQ3dFdJbWlVMjJOQUozQjhp
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSG9aeEs0UmtGdDd0V0ltaVUyMk5BSjNCOGk0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy
MzdEL0NDOTlGMjAyMkNFOTExRjFCNEI2ODkyRUE0ODMzNzczL0hvWnhLNFJrRnQ3
dFdJbWlVMjJOQUozQjhpNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBV8bm9l32kEV+Q1yYA2Ns0RmaUkT9CrF7oxPb+Pl7geyRgrPpHJKoMPHpLKLvA
Q0ro/Ka3ErPVCEtlMx2QMQa0VZRKR+hdCO/6G5Pgqt0SPc4VV9I3PUfMElx8pH0k
xStDCVwE/igwD75h3v7aJTQyW6UIcAzMBuNddsPZ1VNF1k+A+yhewlGvcq1o0BJH
zMAMdTZtMMiCWvG80Pe9ocYVW+gAmoQZRLd6THstQZdZR4K5PsxdL+F/kLduu6M9
YFeUb2P0J7kA/bUrw817u6R2v5CgEOVuJ6adNyLOZOqtivGUrUXuUZraAvnh2w0M
/R8IkDQ7bvbq1SzVq26swtVD
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:22 2026 by rpki-client