Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
File:                     usH6Gx5O5DACOyddInpdBDx_lqM.mft (raw, json)
Hash identifier:          DAOe1t34+Ba1uMcn6lhoYyRKGQmsP31F1DJgzjwWZMY=
Subject key identifier:   80:19:D2:F2:C7:FF:B8:8D:02:88:BC:E3:14:D4:9E:5E:AF:93:65:49
Authority key identifier: BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
Certificate issuer:       /CN=A913FE55/serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
Manifest number:          D1
Signing time:             Fri 17 Jul 2026 07:58:22 +0000
Manifest this update:     Fri 17 Jul 2026 07:58:22 +0000
Manifest next update:     Fri 24 Jul 2026 07:58:22 +0000
Files and hashes:         1: usH6Gx5O5DACOyddInpdBDx_lqM.crl (hash: VBgR3ZxqZSxy/2XNOi/kiojzZuZshQCuGzm862v19Ac=)
                          2: 7D7ECB70480611F08B614210C4F9AE02.roa (hash: g/BmmwSqaD4EfZ93cf72eFK7vSzwSBVeCvaWNZDY7B8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl
                          rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FE55, serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
        Validity
            Not Before: Jul 17 07:58:22 2026 GMT
            Not After : Jul 24 07:58:22 2026 GMT
        Subject: CN=6a59e09e-0bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:82:1b:aa:02:c0:47:cf:59:59:fc:71:b2:
                    49:5e:de:f1:3e:17:60:7f:df:9a:f5:78:d6:a8:b9:
                    81:72:20:e6:d0:6b:2a:b2:89:05:30:84:8c:9a:46:
                    43:32:99:ac:95:24:a1:69:b1:22:f5:8f:a6:3c:aa:
                    05:03:3b:36:74:19:0c:ea:02:23:6b:b9:61:c9:01:
                    83:de:5b:fa:78:53:51:c8:f4:84:94:b9:52:0d:87:
                    9d:cc:47:21:aa:cf:3d:8f:0c:5a:81:42:81:63:90:
                    1e:1c:b6:e3:23:7a:f6:de:a2:a4:38:d7:be:5d:c8:
                    88:e2:a2:c2:ae:e0:f2:4c:4d:61:31:8b:46:97:1f:
                    c6:f3:f4:50:3b:9f:d4:c1:e2:29:8f:6f:1a:af:a6:
                    57:e8:50:e8:53:02:17:12:4d:1e:2a:a4:3b:11:4b:
                    3c:e8:d4:8c:0b:ab:63:21:09:67:d3:78:60:69:46:
                    cd:50:ce:ec:be:52:ab:47:81:7c:d7:be:bd:58:7f:
                    6e:1c:38:df:02:27:78:bd:ca:a2:2a:0a:e2:8c:d2:
                    72:4c:94:23:ed:06:9c:1c:2d:b3:35:d2:2f:86:b1:
                    09:e7:a8:e5:a5:bb:47:a2:65:8c:9a:c5:81:cc:51:
                    be:26:50:18:51:e5:1a:89:2e:ff:dd:3a:80:42:91:
                    f1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:19:D2:F2:C7:FF:B8:8D:02:88:BC:E3:14:D4:9E:5E:AF:93:65:49
            X509v3 Authority Key Identifier:
                keyid:BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:be:15:a0:44:93:9b:80:f1:f0:b4:cb:69:7b:7f:61:d6:a5:
         58:cb:f3:5e:3b:6e:86:2e:85:74:03:b9:11:a1:6d:5e:e9:53:
         ca:ca:d9:81:d5:c2:ef:34:a0:15:4d:7e:62:be:41:b3:37:ec:
         a9:c5:89:07:64:79:78:70:52:81:aa:9b:64:f2:7d:3b:da:07:
         f6:e4:5c:e5:e6:1e:55:6b:31:79:1f:3d:65:74:7f:be:40:0f:
         cd:dc:68:19:81:59:ec:63:11:71:0f:0e:76:ea:c3:c4:c5:66:
         e5:bb:15:9a:b1:56:0d:14:7d:71:52:40:fe:c1:45:d8:43:e0:
         61:ad:43:16:55:7d:d4:7b:cd:9c:9f:26:d2:c1:b1:cf:51:a6:
         27:a4:f7:5d:d9:19:72:f7:8e:95:82:de:ab:8d:07:f8:8f:d6:
         72:11:33:ea:af:ec:79:9a:f2:10:4e:83:f3:fc:77:36:71:ba:
         e6:70:4f:4c:b1:c2:b2:61:d5:71:5f:f5:b4:ec:f1:f4:e6:78:
         4d:46:ef:db:ad:73:5d:64:e4:db:12:ac:91:07:7f:c7:fc:b5:
         c1:aa:19:83:4d:24:ca:00:bf:43:d7:94:3c:64:52:a0:0f:69:
         2b:4f:0f:ed:17:65:ea:1d:32:3c:37:6d:37:f5:d6:cf:b6:43:
         37:2b:b0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:38 2026 by rpki-client