Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
File:                     -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json)
Hash identifier:          6/a+Cj3QX8HXk8PhXCJcLPy7ZBojgjzBGYFnb5rRelI=
Subject key identifier:   D6:53:B3:A4:14:92:43:D1:49:FD:36:C0:21:7D:E4:33:93:78:98:3E
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Certificate issuer:       /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial:       0BD4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
Manifest number:          0BC3
Signing time:             Sun 26 Jul 2026 19:26:59 +0000
Manifest this update:     Sun 26 Jul 2026 19:26:59 +0000
Manifest next update:     Sun 02 Aug 2026 19:26:59 +0000
Files and hashes:         1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: iSFJdewW1GazPcFMx8Twya0IuFTH30K5PX/qMvtpKRk=)
                          2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: eJeSjBWnfyztRwss0NRo6wVnGnHYGD5kAHWaTt/BWrE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
                          rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3028 (0xbd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
        Validity
            Not Before: Jul 26 19:26:59 2026 GMT
            Not After : Aug  2 19:26:59 2026 GMT
        Subject: CN=6a665f83-4158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:cc:77:3d:e1:da:d7:a1:19:3c:17:f5:56:
                    72:4c:e5:2e:05:d8:b0:66:3e:cc:a9:21:16:15:01:
                    04:05:67:a5:d7:5c:d1:d2:56:29:28:73:ee:9b:c9:
                    f5:75:84:e5:f6:99:01:85:00:0a:83:4a:18:73:4b:
                    7f:d4:22:e4:0f:0a:19:9b:1e:59:45:15:9d:fc:f3:
                    54:4d:98:38:22:8b:09:a9:c0:7b:b3:91:b4:a7:22:
                    26:66:f4:a1:ad:65:0a:23:01:0c:82:f6:67:89:ff:
                    00:54:00:4d:3e:d4:0e:f5:73:1b:9f:c1:96:d5:c4:
                    68:f0:ac:a1:33:13:f0:28:78:bf:bd:8f:56:ae:f4:
                    fc:3c:c6:63:86:2c:e9:08:8a:b0:fe:22:8c:86:a1:
                    3a:7f:f7:b2:e5:c2:a2:9d:4f:4d:79:5a:26:40:70:
                    3e:f2:83:2b:c7:5b:35:c9:c8:79:4a:19:d9:1a:33:
                    06:d4:48:62:4b:17:20:c6:5e:d7:b7:bf:83:ce:29:
                    39:0c:d7:53:df:20:b6:43:cb:69:5a:5e:60:51:de:
                    67:b3:e8:b0:88:82:dc:b9:95:83:93:58:06:3c:a0:
                    05:6c:05:58:5d:9b:ae:09:f3:b8:62:f9:dd:a4:b6:
                    cd:9b:0c:59:cc:2b:54:15:3a:25:82:c8:22:4b:81:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:53:B3:A4:14:92:43:D1:49:FD:36:C0:21:7D:E4:33:93:78:98:3E
            X509v3 Authority Key Identifier:
                keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:ee:79:77:be:1b:f2:1d:c8:94:04:53:a0:7b:52:eb:4e:
         38:d4:c5:49:42:6f:91:23:bf:ab:51:59:9d:dc:31:56:9a:3a:
         c2:fa:6a:fb:26:07:1e:cf:e9:bf:14:9f:62:6b:37:75:5a:b2:
         f7:d0:56:40:6d:73:85:78:78:03:4f:01:ce:b6:cf:ee:2f:b7:
         ac:66:61:d3:98:bb:44:d3:52:0e:46:cb:a1:7f:ed:1f:59:83:
         72:b2:42:dd:9e:3a:30:c1:f1:c0:bc:25:e4:81:dc:ca:31:a0:
         32:30:88:9e:27:ec:f9:bb:d6:83:9d:ef:4b:d7:5f:81:87:69:
         74:d9:2c:f0:a1:8f:b6:45:1c:ff:18:65:60:f1:be:16:50:cc:
         58:63:0b:05:b2:d8:a4:dd:93:c1:8c:ce:26:34:b8:fe:48:b7:
         00:62:ae:0e:2e:3f:5d:83:18:f3:08:2a:fd:9a:60:a9:e1:db:
         6a:5a:69:55:58:d1:e6:53:9f:b8:5a:54:55:fc:aa:84:42:b4:
         61:54:27:15:1f:be:98:05:97:35:b8:bf:7f:06:64:1a:a9:b1:
         06:59:a5:68:73:96:7d:86:f7:9d:31:da:75:73:8b:b6:42:29:
         60:94:f5:19:1a:28:16:9b:e4:56:80:3c:e4:ff:9a:d9:67:a5:
         46:df:65:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 19:01:24 2026 by rpki-client