Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
File:                     H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json)
Hash identifier:          vkLf7GKluz7z43HW2aDYUfXtCsNQKtj21uwyM0QbTkM=
Subject key identifier:   E0:AC:B4:7F:3F:23:F0:E4:80:42:2C:59:BF:40:5D:AC:20:19:01:D2
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Certificate issuer:       /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial:       0D14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
Manifest number:          0CFA
Signing time:             Thu 02 Jul 2026 18:30:01 +0000
Manifest this update:     Thu 02 Jul 2026 18:30:01 +0000
Manifest next update:     Thu 09 Jul 2026 18:30:01 +0000
Files and hashes:         1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: rGIOsMG8Dn71FMVZY7S8koDB/2OjkYK6LCLiZT8CsSY=)
                          2: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: 7CjBAuah6/o6TO56EaGyhTraMGUdKeiH/EG6F7J9nYY=)
                          3: 172E487A416911ECB6B11742C4F9AE02.roa (hash: lJfLPhd1kAAzDWL/Ne5AiMPNOkxSubYVAGKuzG/T5pk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
                          rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 Jul 2026 18:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3348 (0xd14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
        Validity
            Not Before: Jul  2 18:30:01 2026 GMT
            Not After : Jul  9 18:30:01 2026 GMT
        Subject: CN=6a46ae29-0eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:bf:de:b5:2c:c7:a8:72:46:68:8e:bf:83:
                    60:82:91:bb:1c:b2:b5:07:c7:a9:a1:e2:f4:7a:a2:
                    dc:55:72:c7:4f:77:fc:96:fe:f8:45:55:bb:a9:d3:
                    e2:37:6e:95:bd:04:fa:ea:1f:8f:7e:3b:b3:4a:3d:
                    20:c7:f6:7f:49:d6:f2:87:69:7a:95:20:92:36:61:
                    e8:e7:d4:54:b0:89:45:16:a8:e6:e2:c3:ea:a2:9b:
                    af:0b:16:2a:e3:74:99:19:5b:c7:ef:96:14:7a:24:
                    4e:b3:1b:28:df:aa:82:bb:90:4b:a4:20:49:a5:06:
                    29:72:ac:cf:ea:61:1c:9c:bb:d0:d9:62:76:3b:9e:
                    15:32:42:91:1b:4e:9d:ef:ec:a0:6f:81:57:ea:1d:
                    12:f9:ed:6c:73:ba:6b:1d:e6:e6:21:cc:36:ef:9b:
                    37:8c:ef:7f:89:53:ff:34:f4:41:bf:ec:9a:8d:d0:
                    ae:88:a8:ea:22:67:02:03:4b:1b:05:8b:c5:86:f8:
                    9d:85:ad:99:b1:87:67:95:2b:8a:d9:0c:20:5a:6f:
                    12:38:93:5c:2b:c4:93:42:32:85:29:f4:5b:77:2b:
                    eb:65:a5:86:8b:bc:bf:25:76:c5:b7:70:02:61:50:
                    6e:3f:52:81:3a:3b:b3:5b:28:4b:85:38:1d:22:c2:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AC:B4:7F:3F:23:F0:E4:80:42:2C:59:BF:40:5D:AC:20:19:01:D2
            X509v3 Authority Key Identifier:
                keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7a:aa:78:c6:ed:41:f4:e6:5b:b6:cd:55:b3:85:25:72:27:
         cc:e6:ab:20:31:59:11:fa:e2:b1:d8:7a:13:0f:29:48:fe:9d:
         57:c3:8c:0d:9a:56:de:83:b3:cb:20:34:c9:f8:a8:6d:a9:ed:
         4b:9a:be:dc:bb:05:18:25:24:03:b0:5c:47:93:b7:fc:ed:59:
         0c:4d:1c:d4:32:2e:14:ff:cd:b1:41:68:e2:fa:55:87:70:c1:
         dc:32:22:72:ab:16:c8:da:38:e3:d1:6f:39:d1:62:44:04:ba:
         74:c2:a1:e6:07:be:39:c6:07:e5:c7:f6:f7:0d:a3:ff:ba:c5:
         ff:2f:7a:ec:8f:ee:c4:fd:e1:e3:8d:b6:d0:93:3b:de:c6:a1:
         2c:22:55:9c:ea:56:eb:b2:8c:51:72:4e:3e:4e:51:ac:bf:3d:
         9f:13:c1:f5:ec:8e:79:c1:d3:9d:46:80:7a:0f:52:e4:f5:b8:
         e1:fd:e7:1f:52:85:29:2d:6c:08:5e:78:a4:1f:9f:d8:49:f7:
         b4:77:88:b4:68:57:10:b8:18:b9:44:f6:90:b2:3f:6c:21:39:
         86:53:94:d8:c1:eb:f2:a6:79:a1:11:a4:bc:f4:a7:ee:aa:0b:
         e7:38:87:1b:26:1a:95:79:8b:34:c0:c3:76:eb:66:dc:21:b5:
         95:d6:1f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 10:37:34 2026 by rpki-client