Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft
File:                     ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft (raw, json)
Hash identifier:          aaFr8daHiO6S81D6DyZw5RXsedJB8f7ssHaR6oan7+I=
Subject key identifier:   66:CE:B5:59:9D:98:D2:F1:95:7B:69:3A:2D:75:05:37:54:BD:26:FF
Authority key identifier: 86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9
Certificate issuer:       /CN=A916E64F/serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9
Certificate serial:       17FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft
Manifest number:          17EF
Signing time:             Tue 18 Aug 2026 16:41:53 +0000
Manifest this update:     Tue 18 Aug 2026 16:41:52 +0000
Manifest next update:     Tue 25 Aug 2026 16:41:52 +0000
Files and hashes:         1: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl (hash: mEDXC7YZFXg+nAEDM+Cvt8F5RYyZejKQ5P9AFfGl2ec=)
                          2: 89317668E87B11E785247983C4F9AE02.roa (hash: WoT/UgFr2xPvfCqBZ9PJ+h1sxdlnvxIa74Oqq+fRyVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl
                          rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6141 (0x17fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E64F, serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9
        Validity
            Not Before: Aug 18 16:41:52 2026 GMT
            Not After : Aug 25 16:41:52 2026 GMT
        Subject: CN=6a848b51-804c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8c:e6:2e:b6:07:c7:12:f9:20:d3:e9:75:63:
                    da:31:b9:f9:6f:43:a8:9a:47:e7:e4:cd:78:ed:67:
                    01:5f:84:fe:4a:56:21:c9:68:1a:ed:65:01:c7:37:
                    2b:0a:c9:b9:84:66:44:18:3c:62:0c:7d:e6:e5:c1:
                    80:92:c6:40:66:9f:23:25:d9:37:00:51:d9:c8:fb:
                    52:1e:70:1b:9a:67:47:06:aa:16:a0:df:d9:db:77:
                    17:40:24:f0:63:0b:2a:ff:1a:94:f3:24:40:4d:93:
                    29:b4:7e:f9:6d:79:05:8a:a2:8a:e7:7d:1a:51:18:
                    74:8c:09:cd:fd:e2:3b:3f:4b:3d:c9:c2:0d:ea:a7:
                    5b:d5:55:9c:51:c6:ff:2a:1f:e9:6a:92:c8:f9:4f:
                    65:e0:88:b8:4c:e8:09:a2:e9:78:5e:5e:33:d6:b0:
                    0b:58:5e:4a:ee:c2:17:16:c0:db:5d:f4:34:a4:cb:
                    fb:f2:bd:80:46:eb:a4:71:14:cc:6b:7c:97:1b:8b:
                    7a:bc:9c:b4:c3:5a:d5:b8:3b:50:5f:28:de:40:81:
                    f7:ec:1a:b4:b4:47:a3:5a:4c:ee:5c:9e:83:6f:c5:
                    4f:3e:0f:5f:b7:dd:f1:79:dc:5d:86:57:0b:16:c3:
                    32:e4:3b:c0:fc:97:9c:9e:e4:8b:fb:e6:53:a3:7b:
                    c7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CE:B5:59:9D:98:D2:F1:95:7B:69:3A:2D:75:05:37:54:BD:26:FF
            X509v3 Authority Key Identifier:
                keyid:86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:db:14:49:e1:88:21:8d:80:c6:61:e7:bb:c1:3b:91:b8:90:
         8d:69:05:a0:66:a0:23:3a:43:89:4a:89:f6:4d:c6:ae:6e:be:
         e1:6d:c3:77:65:a4:5f:03:bb:31:71:3b:b4:aa:a9:1a:0d:2e:
         3b:24:16:78:b1:22:c9:ee:b1:26:f1:a6:d6:4d:3c:8c:91:83:
         73:61:fe:6e:ac:a6:01:f2:75:5b:f0:fb:ad:6b:77:3b:17:1b:
         63:14:ae:2d:fb:c4:63:86:81:6c:83:6c:9b:f3:a0:38:53:bc:
         9d:87:28:5c:77:04:ce:96:43:1c:9a:24:f8:f2:28:e0:f8:2c:
         57:d7:99:74:fe:04:57:e1:6d:b7:24:99:f5:a1:45:49:59:b1:
         ae:c8:e0:6b:78:62:06:92:85:cd:19:4a:f2:de:9a:0f:6b:23:
         b6:1f:42:43:4a:c6:a7:00:21:59:29:8b:e8:ab:a0:32:49:e6:
         c1:7d:b8:41:14:94:58:0a:a4:61:e7:53:3c:2e:53:5c:b1:c5:
         5b:e9:77:5c:c4:8a:a8:90:19:d1:25:b9:43:70:73:e1:60:41:
         ac:7d:8f:52:19:14:6b:27:ae:5d:78:12:6e:43:8d:20:57:9d:
         1b:25:ce:d9:4e:06:49:c9:44:1e:7b:20:c8:33:38:d3:34:5c:
         f9:1f:14:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:54 2026 by rpki-client