Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
File:                     HG_z7AmClLQtl58ltpYFkj4czu8.mft (raw, json)
Hash identifier:          eZWlUHciQq0WyQMn+2PAcI5DXc6S+XP1XYTGEefoejQ=
Subject key identifier:   CB:03:E5:51:60:4D:8B:AC:C8:E1:C0:B4:73:77:C6:7D:98:39:AA:F7
Authority key identifier: 1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF
Certificate issuer:       /CN=A917C81C/serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
Manifest number:          75
Signing time:             Thu 16 Jul 2026 23:24:11 +0000
Manifest this update:     Thu 16 Jul 2026 23:24:11 +0000
Manifest next update:     Thu 23 Jul 2026 23:24:11 +0000
Files and hashes:         1: HG_z7AmClLQtl58ltpYFkj4czu8.crl (hash: A6+Sg4oz8HQxeqW92gUZ3ZkmVRUT4kUaqPXvBjGnzgQ=)
                          2: EB9160CCDFD811F08F00FF64536F56BC.roa (hash: F8WI3I+cVK027+UsBVl1Tcfy5kv9U/Wvm6A/E5S0bZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl
                          rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 23:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C81C, serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
        Validity
            Not Before: Jul 16 23:24:11 2026 GMT
            Not After : Jul 23 23:24:11 2026 GMT
        Subject: CN=6a59681b-68ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0e:5e:46:46:d3:1b:6f:73:b5:c6:83:6d:cf:
                    bf:84:5f:6a:98:a9:30:4a:d7:c4:b7:4d:f6:d1:08:
                    53:a1:1a:0f:93:c3:a1:3d:ef:5d:84:c5:40:fa:62:
                    43:0c:17:6f:00:53:a7:fa:93:a9:7d:d9:79:cd:76:
                    1a:31:5b:dd:b7:97:bd:23:52:02:ac:f5:30:1f:0b:
                    9d:11:5c:4c:85:b5:98:86:38:05:c5:88:4e:16:15:
                    46:45:83:67:9a:7f:b3:a3:4b:40:c9:ce:ad:ae:ac:
                    98:69:bb:a1:b7:9e:15:7e:8a:d6:7b:15:fa:33:14:
                    c9:94:43:f4:e5:c0:7b:e2:fa:5f:72:02:36:f1:64:
                    15:99:1c:75:c9:ba:17:be:e6:7e:95:0c:0c:45:0d:
                    be:8c:3d:e9:56:f3:f5:c7:58:11:7a:48:ad:19:c3:
                    b5:e5:85:9c:1d:91:97:50:69:7e:05:1a:8c:3b:90:
                    97:61:be:27:27:7b:40:51:30:5e:4b:86:2c:fb:17:
                    4a:35:7d:79:62:a2:73:f4:25:aa:31:c6:1e:cd:aa:
                    12:4a:73:6b:be:7e:6d:a4:a2:3a:f8:93:fd:19:7a:
                    a3:4a:58:ff:29:57:b3:18:fe:fb:14:9d:8b:a7:a3:
                    d1:61:37:23:1b:6a:69:b4:29:74:a5:40:fc:54:33:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:03:E5:51:60:4D:8B:AC:C8:E1:C0:B4:73:77:C6:7D:98:39:AA:F7
            X509v3 Authority Key Identifier:
                keyid:1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ad:b5:ee:ab:d8:c0:1b:0d:53:9c:32:e4:4a:97:a8:f2:c0:
         5c:56:16:66:26:31:31:f0:77:b4:dc:53:fd:fd:f5:7b:79:11:
         ab:63:29:e9:5f:61:03:43:09:07:25:0b:eb:85:3b:34:fc:08:
         2c:80:25:4f:4b:8e:87:9f:a3:3a:2b:26:f9:00:c3:09:20:02:
         04:35:b3:0d:76:08:f6:05:a0:53:d6:72:db:05:97:05:47:62:
         24:1a:9b:9a:8f:55:9f:15:ff:0d:a4:94:2c:20:27:dc:fd:a2:
         c6:1f:13:c6:a5:6b:dc:9d:b5:3f:bf:9f:3f:db:5d:cb:14:ba:
         47:5f:d9:f3:95:ad:ef:6a:9e:6d:3c:78:1f:54:01:23:ae:86:
         62:1e:d2:b9:49:9a:7e:62:92:84:2e:93:e1:36:e2:66:80:fc:
         1d:c6:3e:33:2d:66:92:8c:e3:ca:e7:d4:0e:60:d9:71:b2:ef:
         ab:b3:38:3b:4e:2c:72:3b:25:bf:9a:ad:7f:38:a9:e8:0a:40:
         42:53:fb:35:d0:99:04:c3:0a:94:0a:84:d6:d2:4a:9e:78:2a:
         89:ac:3d:cd:66:fd:ed:09:3b:65:66:2b:e2:e7:92:ea:78:6c:
         53:9d:e0:a0:8e:32:0a:4c:bb:37:5c:93:40:61:a2:cd:73:75:
         e6:1f:89:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:49 2026 by rpki-client