Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
File:                     HVb-TaQriGb-lqKX93LugLUYpAo.mft (raw, json)
Hash identifier:          1rFPf++KiUI2FDdmRk2BUoG30O6bRLimzIOGhyrQvjA=
Subject key identifier:   71:9E:32:6A:6A:43:DA:59:26:C4:38:12:24:F7:91:52:82:F2:AE:B4
Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A
Certificate issuer:       /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
Certificate serial:       1CF3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
Manifest number:          1CC0
Signing time:             Mon 22 Jun 2026 16:08:15 +0000
Manifest this update:     Mon 22 Jun 2026 16:08:15 +0000
Manifest next update:     Mon 29 Jun 2026 16:08:15 +0000
Files and hashes:         1: HVb-TaQriGb-lqKX93LugLUYpAo.crl (hash: OcEGjY8ebBWIStboFqUxY1tDU2FChBR7u3fTT2w2Pko=)
                          2: 9933B21049D411E7AA790315C4F9AE02.roa (hash: QZA5NGT0T4vQbPj3DAMmG2s01npT1BslQYeDAKHKYHA=)
                          3: 619B0B285AE611E781C33D7CC4F9AE02.roa (hash: Vo4FMdvhqUNJju5kt7DaanHL7CNZUhUAdq9fjjfac6U=)
                          4: 486F81CE4B4B11E79F2FF37BC4F9AE02.roa (hash: Y9POkZEe3wRg+MXvb7ccC/944++smUYrxRZm5LhHG30=)
                          5: 9B315A5E46A011E7B9BAF254C4F9AE02.roa (hash: BkEu7fkd0bGNEKpbnL7JduPhIKFSApcB9L/XXPu53I4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl
                          rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 16:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7411 (0x1cf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
        Validity
            Not Before: Jun 22 16:08:15 2026 GMT
            Not After : Jun 29 16:08:15 2026 GMT
        Subject: CN=6a395def-c44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:f5:e9:f7:60:ff:b5:35:20:b0:ba:bb:57:
                    05:bf:8f:05:93:57:93:2b:04:28:3a:d8:7a:9f:7f:
                    6a:26:0b:9b:94:c9:f0:9b:f7:c7:25:b0:67:95:0c:
                    ce:e9:6b:40:49:5c:81:63:fe:98:43:e1:9e:be:35:
                    36:1f:fa:95:81:76:cf:f8:a8:1c:76:01:5c:63:6f:
                    a6:4c:71:8e:bd:94:ce:1b:6a:83:7f:79:a3:2a:12:
                    ec:36:9b:fa:a7:c3:3f:ec:d6:6a:ea:bb:f7:60:26:
                    14:69:a9:4d:98:63:9f:26:21:18:3a:86:e2:e2:56:
                    fb:aa:71:2b:48:6a:4b:ac:43:c5:b4:7c:94:d5:93:
                    e5:c8:0f:b3:a5:f6:41:1e:02:df:68:bb:39:e8:d4:
                    04:3d:e3:15:48:8e:cc:ff:ba:b1:a5:ba:2a:ec:c9:
                    cc:de:9b:fb:b4:12:1c:43:6e:26:b6:c7:70:bf:2c:
                    e9:b8:1b:be:e6:a3:66:e6:33:e0:12:c3:74:39:bd:
                    f9:a0:46:71:7b:a5:56:80:65:f0:af:28:8d:92:ee:
                    40:c4:4c:53:8c:33:5a:0d:55:9c:b0:33:d7:b8:05:
                    84:d6:8b:55:8f:c1:98:19:30:99:95:11:0e:98:66:
                    29:2a:69:f7:7a:58:90:2c:57:72:f4:ee:04:95:42:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9E:32:6A:6A:43:DA:59:26:C4:38:12:24:F7:91:52:82:F2:AE:B4
            X509v3 Authority Key Identifier:
                keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7c:b4:10:2d:29:38:21:76:f0:59:cc:c9:f7:a2:e2:5f:89:
         f3:31:16:78:c1:ff:11:1f:62:bb:14:b5:af:d7:ef:a1:fd:26:
         f1:6c:d0:73:cf:c4:82:39:d6:12:eb:21:c3:6d:1b:16:ad:4a:
         0f:1e:fd:5f:29:50:d1:38:c0:ff:5a:75:2a:1e:eb:28:1b:10:
         7c:83:83:4f:0e:c2:0c:42:ac:49:4a:62:a6:43:21:b5:4e:28:
         12:b9:ec:b1:9b:0d:a2:5d:d8:db:41:ee:79:fe:25:9d:9d:4f:
         ec:fd:9e:1e:a9:d8:e1:38:f5:f7:38:53:f6:87:c8:22:79:6b:
         f6:a1:f7:55:47:f9:dd:85:db:c4:0f:fa:84:4e:0a:6c:fa:62:
         93:c0:84:8a:4d:49:2c:9e:c7:7a:c7:96:8c:9b:b3:40:6b:d1:
         69:57:af:e3:ac:7a:e3:6d:44:09:df:ab:f1:0a:e1:36:0b:0f:
         f2:3b:7d:2a:24:b8:75:a5:ad:50:10:0a:cc:fa:97:47:25:66:
         d9:29:e1:30:4b:8d:b3:f8:14:85:1b:f4:70:b8:fa:82:bb:44:
         d0:a9:50:54:d9:8c:9b:e7:49:43:3a:32:cc:fb:9f:cc:7c:b3:
         cb:9e:ca:de:b3:4a:87:c1:70:8b:c2:81:95:8c:01:1d:ed:ad:
         ce:90:e8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 01:48:10 2026 by rpki-client