Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
File:                     r_hffvPaWIdDjdIGHy6e4LLdCn8.mft (raw, json)
Hash identifier:          7b+igfDa07jwjyBM6V4c3AAzsc0uNG7Lf/VKuCqAvWE=
Subject key identifier:   BC:07:F1:EC:0B:32:10:6A:B4:67:9B:26:35:D0:1D:A0:32:84:3D:16
Authority key identifier: AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F
Certificate issuer:       /CN=A914E5F6/serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F
Certificate serial:       0279
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
Manifest number:          026B
Signing time:             Mon 13 Jul 2026 02:20:59 +0000
Manifest this update:     Mon 13 Jul 2026 02:20:59 +0000
Manifest next update:     Mon 20 Jul 2026 02:20:59 +0000
Files and hashes:         1: r_hffvPaWIdDjdIGHy6e4LLdCn8.crl (hash: dqc3cdM0+UzCDmkQOczAlCVHWixNP1IQWGBnq55fz9c=)
                          2: 8E54F1C6D47711EEBC3E5019C4F9AE02.roa (hash: uPSJvajAQINjQlYTF7zaoX95KpMnomn9ZGEL6XXGiq0=)
                          3: D4D84D08DA9211ED99CD1D28C4F9AE02.roa (hash: yD5FYCPErZgPY0yX40dpogtlEWrDeZjOT8LtPpUMuck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl
                          rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Jul 2026 02:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E5F6, serialNumber=AFF85F7EF3DA5887438DD2061F2E9EE0B2DD0A7F
        Validity
            Not Before: Jul 13 02:20:59 2026 GMT
            Not After : Jul 20 02:20:59 2026 GMT
        Subject: CN=6a544b8b-15b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:1b:60:f5:ca:80:ce:d6:9f:46:0c:5e:52:
                    21:e2:4e:ea:34:a1:4d:80:1e:0c:9c:6d:75:c1:77:
                    3a:98:cd:50:42:6c:6e:0a:8b:8e:90:40:28:84:df:
                    45:ad:89:75:26:52:4f:87:4c:45:b0:5f:91:5f:59:
                    1f:48:a7:71:eb:2a:53:8e:6e:9b:0e:7f:0e:55:42:
                    08:62:c0:5e:93:e2:0d:24:3b:d7:77:ea:bb:a8:0f:
                    53:35:e8:e0:f3:15:03:df:6b:e7:37:64:82:b6:e9:
                    87:5e:28:30:d8:6f:1a:df:11:d5:19:9e:b6:09:f8:
                    1b:c0:f9:86:68:77:44:81:25:4b:e4:90:2d:f6:d7:
                    bb:1c:66:e5:da:a5:c4:1f:a6:1f:08:c3:a5:eb:88:
                    3f:40:af:cd:00:72:3a:31:43:14:17:73:3c:69:c0:
                    64:7b:01:f2:1b:0a:b7:59:50:27:b0:88:9e:e1:68:
                    d1:89:4f:fe:a9:d5:e3:2c:a6:2e:78:7d:01:f3:ee:
                    47:8a:9a:42:bc:43:0e:54:5c:0f:53:f6:e1:b1:33:
                    c0:de:69:a6:2a:e0:38:06:30:5b:3a:ad:56:d7:8a:
                    b0:5e:24:6e:c5:85:71:21:a1:5c:b0:c0:d9:fb:4e:
                    30:7d:b2:f9:26:c3:c6:30:b3:5a:7f:82:b0:20:2f:
                    84:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:07:F1:EC:0B:32:10:6A:B4:67:9B:26:35:D0:1D:A0:32:84:3D:16
            X509v3 Authority Key Identifier:
                keyid:AF:F8:5F:7E:F3:DA:58:87:43:8D:D2:06:1F:2E:9E:E0:B2:DD:0A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_hffvPaWIdDjdIGHy6e4LLdCn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5F6/BCA66B7EDA8E11ED835C3925C4F9AE02/r_hffvPaWIdDjdIGHy6e4LLdCn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f8:37:e9:32:4f:1e:71:75:f1:15:53:35:5d:19:5a:9b:3d:
         a6:fc:0e:ed:92:90:e7:7f:f5:10:bf:b5:3c:71:cd:d9:7d:c6:
         db:39:76:b6:42:7f:3f:45:0f:67:3a:fe:87:e9:46:00:96:64:
         29:45:97:a3:b4:41:48:83:e1:a7:af:45:17:c9:e4:fb:85:03:
         1b:4f:1f:51:d5:02:3e:0c:c9:4d:28:b9:94:dc:56:21:a0:2d:
         69:8f:41:45:f3:01:7a:c0:6a:f3:39:4a:e9:d8:dd:db:ac:fe:
         13:4e:e8:55:4a:bf:9e:e4:1c:33:3a:2b:e2:41:af:0f:4b:2d:
         7c:2f:64:31:2c:ea:95:c4:a6:42:be:c0:30:19:c1:3b:43:8f:
         d6:ae:9d:b8:32:22:87:a7:ef:46:93:78:39:d0:65:ad:75:b0:
         53:d1:95:39:ae:07:5d:de:d3:dc:f0:ff:1f:66:ca:68:7f:81:
         08:47:c1:8e:fa:aa:05:de:ba:96:0b:8a:c8:26:69:d0:ab:68:
         71:6a:55:fa:60:f5:47:69:2f:4e:7a:b2:0c:90:1f:26:42:da:
         e8:02:eb:98:ae:11:7a:8c:b4:53:a2:58:32:a9:1b:57:4a:a9:
         56:cf:c9:28:c3:bd:af:d2:46:b2:b1:bf:e1:6d:35:f2:df:4f:
         31:c3:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 01:47:26 2026 by rpki-client