Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
File:                     hoEbsmeu-FQA2-cpcCMtQRotmuk.mft (raw, json)
Hash identifier:          4kYIIYeYtttSIXF5N930N3qjMr3a8ui3wdSV76+QpLg=
Subject key identifier:   C0:28:A9:25:EB:3F:19:16:0E:DC:FC:66:76:D2:0B:5F:8A:53:33:2A
Authority key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9
Certificate issuer:       /CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9
Certificate serial:       0C91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
Manifest number:          0C87
Signing time:             Sun 26 Jul 2026 18:59:09 +0000
Manifest this update:     Sun 26 Jul 2026 18:59:09 +0000
Manifest next update:     Sun 02 Aug 2026 18:59:09 +0000
Files and hashes:         1: hoEbsmeu-FQA2-cpcCMtQRotmuk.crl (hash: oJEbTUBIJdHuhNaroLbHRPHPsyRdnUVIk8DCX+9Gvac=)
                          2: CE9692E0222311EAAED0162CC4F9AE02.roa (hash: 7/zbJI0s52bYN/0ZUHhmBumHTk0n2XxIConlr3ZopBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl
                          rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 18:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3217 (0xc91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE7C, serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9
        Validity
            Not Before: Jul 26 18:59:09 2026 GMT
            Not After : Aug  2 18:59:09 2026 GMT
        Subject: CN=6a6658fd-e28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:83:88:12:ba:c4:e7:97:44:1f:63:ed:e0:f1:
                    3a:82:1c:a1:3c:71:c2:f7:5e:c5:ec:c0:af:04:cb:
                    2c:ac:01:c4:b4:66:f6:33:c9:9b:46:15:ee:26:13:
                    23:3b:7c:9a:08:22:4a:c6:dc:0c:32:22:d2:61:13:
                    b4:42:19:83:88:46:79:ed:43:19:61:ba:dd:e3:9f:
                    c2:12:7d:dc:c1:71:ab:17:87:68:23:80:6c:ea:a3:
                    ac:6c:63:ff:78:92:46:c2:f7:5f:0a:d8:38:ea:7a:
                    bb:24:dc:23:e9:7c:41:96:53:51:c5:7f:7b:17:90:
                    a8:2c:3a:46:73:c9:2c:ad:82:37:7b:12:67:47:40:
                    51:ab:69:aa:80:c9:58:03:a2:43:d4:94:8c:ef:c7:
                    85:b1:0d:c7:f9:7b:17:7a:9c:2c:59:4c:b9:72:ca:
                    c8:82:4d:3d:62:df:35:0c:8b:bb:46:b1:4a:8a:07:
                    4d:90:84:27:c0:fc:fd:bc:a0:17:00:d9:ad:3c:0a:
                    62:ee:89:d8:93:f9:15:7b:83:7a:b2:c4:82:21:66:
                    b2:ab:f2:07:d8:d0:3e:7c:b1:39:c6:bf:43:bb:d5:
                    db:c6:b2:4b:7b:2a:7e:fc:96:2d:40:37:92:0e:01:
                    d7:12:75:66:cd:cd:70:64:1c:e0:41:a6:bb:d1:33:
                    63:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:28:A9:25:EB:3F:19:16:0E:DC:FC:66:76:D2:0B:5F:8A:53:33:2A
            X509v3 Authority Key Identifier:
                keyid:86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:dc:25:94:6d:0b:2e:72:e6:a6:6c:75:f7:e6:7b:fc:8a:75:
         91:5c:b7:60:8d:f6:31:2d:62:7a:7d:ae:96:49:53:c5:e4:c9:
         b5:41:14:a6:8b:72:f4:76:be:1e:bd:fe:ad:ef:db:de:21:ea:
         88:c1:79:bb:09:11:47:5c:07:29:c8:81:aa:60:b5:9d:4f:17:
         d1:05:f4:01:d1:33:1c:15:18:5b:4a:a4:0a:f9:4f:7d:70:57:
         f1:33:6f:34:11:dc:64:f8:67:ad:d7:7f:bd:7e:f2:5f:9f:2f:
         ec:fe:3a:27:8a:84:5b:3b:1b:56:8d:b6:9a:29:a7:7a:91:be:
         cf:5e:d9:bd:26:5d:df:db:9f:94:61:23:dc:af:2b:f8:2d:00:
         41:8c:af:71:0c:8f:ff:01:b0:0a:09:04:a6:62:67:97:d0:ed:
         54:b4:6e:d1:33:28:8b:23:c9:89:41:04:d1:f5:6e:69:37:15:
         1a:5d:f7:d0:d2:34:28:08:2a:2b:8c:c5:68:61:91:b9:39:df:
         cf:ca:80:9a:ed:b5:db:a5:dc:7d:25:17:6c:5d:74:f5:65:85:
         1f:da:83:d7:86:a0:13:66:56:7b:3c:e9:b9:1b:30:07:0d:c2:
         83:09:92:ce:93:3a:38:f8:4d:6e:78:ec:48:01:1b:40:b6:c6:
         8b:63:d1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:59:39 2026 by rpki-client