Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
File:                     7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json)
Hash identifier:          vRhU5rFbvh79Hh9hnuXPqQJ1YhfKYTdg4kIwzaxTjmg=
Subject key identifier:   DB:0C:F3:89:88:13:1E:DA:21:83:CB:F0:4A:DE:17:40:36:F9:5A:FB
Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7
Certificate issuer:       /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
Certificate serial:       0AC9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
Manifest number:          0AC0
Signing time:             Tue 18 Aug 2026 19:44:46 +0000
Manifest this update:     Tue 18 Aug 2026 19:44:46 +0000
Manifest next update:     Tue 25 Aug 2026 19:44:46 +0000
Files and hashes:         1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: k5/ck2Ci2BLd19Rhr8bf5f7Ggl4NSg3ti0yvENijpGs=)
                          2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: fTC3RP5UwYJo/xgaymTCOGYfDdh0ORjauT4dKfVe+3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl
                          rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2761 (0xac9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7
        Validity
            Not Before: Aug 18 19:44:46 2026 GMT
            Not After : Aug 25 19:44:46 2026 GMT
        Subject: CN=6a84b62e-9915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:a2:d3:72:d0:13:31:20:a2:e6:dc:7e:77:
                    59:ea:95:9a:3d:6c:cf:ae:fc:b1:e1:61:20:55:2f:
                    a8:2d:42:52:b3:98:44:fc:4e:54:1a:f1:de:e9:1a:
                    0c:8f:99:10:ec:6d:10:2d:39:75:43:d0:a2:da:b8:
                    b4:7e:e6:5b:e9:f4:d4:59:eb:db:62:0e:cd:d2:68:
                    01:5d:59:c4:08:5d:b7:a9:68:21:1b:fc:b2:59:69:
                    cf:02:7a:c8:d3:4f:53:e6:ce:d6:9f:1d:46:b4:30:
                    05:ab:c6:5c:3b:1c:75:25:fe:72:77:78:dd:0e:8a:
                    5e:51:45:cb:b3:79:b5:ea:54:2e:2e:f3:5a:dd:a5:
                    54:70:21:98:47:55:06:6a:96:3f:be:c8:ee:87:9a:
                    1c:b9:5d:b9:08:57:29:7e:9a:28:ca:d3:89:ee:3f:
                    05:91:3a:95:d4:14:96:65:b1:05:ac:53:89:01:f4:
                    ec:b0:c5:76:70:92:9f:7d:0a:8f:ec:c4:d8:50:ab:
                    4a:9a:0a:7e:eb:08:49:a2:4b:53:b7:1a:ab:d2:3d:
                    78:5f:c4:a0:a3:73:f6:9e:98:08:1d:37:a5:bd:2e:
                    12:19:60:d8:ae:d1:51:2c:03:5d:3c:bd:3e:73:9f:
                    6d:4c:77:5b:b2:13:d7:a5:e0:0e:7e:4b:3a:65:a6:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0C:F3:89:88:13:1E:DA:21:83:CB:F0:4A:DE:17:40:36:F9:5A:FB
            X509v3 Authority Key Identifier:
                keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:62:f8:50:6e:2b:d6:a9:3d:30:68:4f:b8:ea:ec:67:9e:1b:
         de:fd:5e:3f:a3:b1:43:07:cc:96:aa:c0:57:ca:79:eb:27:8f:
         31:2d:08:78:5f:f7:ae:28:f0:ea:28:93:0f:24:9b:c7:73:3b:
         fe:a2:d9:59:b8:23:73:15:fc:dc:59:5c:9e:16:07:d4:bc:d3:
         93:66:dd:61:d3:a7:15:3f:fe:20:ae:b6:16:58:cf:14:d7:fe:
         af:c4:b5:d5:36:f9:4e:91:c5:cc:48:4a:eb:30:34:bb:68:4f:
         ae:7a:9e:58:b8:b8:6e:0a:83:a6:1c:96:00:52:f6:06:b4:fd:
         76:c3:0f:2d:0d:5c:00:7e:79:a6:96:20:00:42:25:d6:fc:6b:
         fa:b5:d7:21:8e:28:bf:a7:61:4a:d0:d0:8d:99:60:3e:67:c3:
         22:35:5b:c9:38:48:1f:0d:79:fd:6a:3c:3f:7d:f2:09:0a:30:
         fc:e6:f5:88:9b:87:cc:56:52:43:34:eb:48:70:4b:3b:36:b1:
         46:0d:88:e8:22:b1:37:50:cb:a5:59:02:8f:b5:32:c9:9d:91:
         0c:62:64:3b:73:0b:55:a6:ed:bf:da:90:e3:2e:9e:3d:f9:af:
         c0:f7:6d:be:17:ce:d5:1b:c6:6a:5a:19:b3:a6:7e:79:1a:b1:
         66:4f:7a:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ2NEYxMTAvBgNVBAUTKEVDNzA1QjJBRDZGQjEzRkQ2RkM0MjE0Qjk3NzI3MDQx
MTNFNjY4RDcwHhcNMjYwODE4MTk0NDQ2WhcNMjYwODI1MTk0NDQ2WjAYMRYwFAYD
VQQDEw02YTg0YjYyZS05OTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq8ai03LQEzEgoubcfndZ6pWaPWzPrvyx4WEgVS+oLUJSs5hE/E5UGvHe6RoM
j5kQ7G0QLTl1Q9Ci2ri0fuZb6fTUWevbYg7N0mgBXVnECF23qWghG/yyWWnPAnrI
009T5s7Wnx1GtDAFq8ZcOxx1Jf5yd3jdDopeUUXLs3m16lQuLvNa3aVUcCGYR1UG
apY/vsjuh5ocuV25CFcpfpooytOJ7j8FkTqV1BSWZbEFrFOJAfTssMV2cJKffQqP
7MTYUKtKmgp+6whJoktTtxqr0j14X8Sgo3P2npgIHTelvS4SGWDYrtFRLANdPL0+
c59tTHdbshPXpeAOfks6ZaaBJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNsM84mI
Ex7aIYPL8EreF0A2+Vr7MB8GA1UdIwQYMBaAFOxwWyrW+xP9b8QhS5dycEET5mjX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY0Ri9GMTE1QjY3MjdE
RUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0VfMXZ4Q0ZMbDNKd1FSUG1h
TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdIQmJLdGI3RV8xdnhDRkxsM0p3UVJQbWFOYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDY0Ri9GMTE1QjY3MjdERUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0Vf
MXZ4Q0ZMbDNKd1FSUG1hTmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALWL4UG4r1qk9MGhPuOrsZ54b3v1eP6OxQwfMlqrAV8p56yePMS0IeF/3rijw
6iiTDySbx3M7/qLZWbgjcxX83FlcnhYH1LzTk2bdYdOnFT/+IK62FljPFNf+r8S1
1Tb5TpHFzEhK6zA0u2hPrnqeWLi4bgqDphyWAFL2BrT9dsMPLQ1cAH55ppYgAEIl
1vxr+rXXIY4ov6dhStDQjZlgPmfDIjVbyThIHw15/Wo8P33yCQow/Ob1iJuHzFZS
QzTrSHBLOzaxRg2I6CKxN1DLpVkCj7UyyZ2RDGJkO3MLVabtv9qQ4y6ePfmvwPdt
vhfO1RvGaloZs6Z+eRqxZk96aA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:36 2026 by rpki-client