Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
File:                     HSpVFaipmzCyHRhxvPr9J-saEyo.mft (raw, json)
Hash identifier:          4iBRdfnZWyPQRfha/cGkbaoRuMepaQqR0v14jR7TKlo=
Subject key identifier:   9A:A0:24:46:DD:E4:92:98:29:53:03:E4:62:3E:C6:E8:36:E3:0D:D6
Authority key identifier: 1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
Certificate issuer:       /CN=A9185B30/serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
Certificate serial:       0328
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
Manifest number:          0322
Signing time:             Tue 23 Jun 2026 01:13:36 +0000
Manifest this update:     Tue 23 Jun 2026 01:13:35 +0000
Manifest next update:     Tue 30 Jun 2026 01:13:35 +0000
Files and hashes:         1: HSpVFaipmzCyHRhxvPr9J-saEyo.crl (hash: FuMDxVaHGoLTcpcQGlXEAGSCrTZTSAi3aExP+WsVsx4=)
                          2: D6E7D65C192E11ED927BF512C4F9AE02.roa (hash: DVr0amxAWZgoxiAH+g9huvxmF7FumJsE61KGOjDJl5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl
                          rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 01:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808 (0x328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B30, serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
        Validity
            Not Before: Jun 23 01:13:35 2026 GMT
            Not After : Jun 30 01:13:35 2026 GMT
        Subject: CN=6a39ddc0-8596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:2f:8c:cc:08:07:0b:0a:13:79:45:f6:ee:
                    7f:70:66:8b:73:08:b0:08:62:ad:35:19:be:16:3b:
                    4c:4e:da:31:09:d7:70:58:ff:4e:cc:a0:5b:70:be:
                    7b:8b:c1:82:e9:11:a3:b6:2a:e7:9e:75:3d:b3:52:
                    f3:3c:34:1f:34:c9:c0:45:45:7e:81:0f:42:07:e6:
                    4c:ab:5a:39:74:3e:36:99:b9:8c:d3:53:90:4d:af:
                    3d:c6:38:a4:05:f6:19:2d:5f:c3:7f:37:f4:ec:61:
                    4d:02:97:96:bb:bd:25:76:7d:6d:70:4c:f7:e9:38:
                    8c:4e:fa:2d:ad:d9:a4:d0:be:1d:ac:4f:7a:d3:25:
                    f4:ed:93:d5:a3:81:8f:44:9c:8e:b7:0f:96:b7:40:
                    21:00:1d:3e:00:b2:c9:3c:57:54:2e:48:eb:22:6a:
                    54:c4:64:3c:43:07:b3:dd:14:56:29:79:05:5a:bf:
                    aa:16:6a:5b:1a:b1:c3:d4:a1:c8:c7:bd:29:2f:b7:
                    dd:16:19:60:d9:44:59:66:0d:8f:f8:f2:68:14:f1:
                    10:08:94:af:aa:94:fd:9f:30:7e:ab:49:08:10:46:
                    63:e9:50:d1:c6:25:16:e6:fd:ea:35:d5:8f:b0:c9:
                    6d:28:4a:7b:31:cd:79:df:34:b9:71:df:aa:93:2d:
                    a6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A0:24:46:DD:E4:92:98:29:53:03:E4:62:3E:C6:E8:36:E3:0D:D6
            X509v3 Authority Key Identifier:
                keyid:1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:53:c2:be:d8:0a:b6:4c:04:60:16:32:ee:49:c2:82:6a:11:
         b4:0a:f0:6b:4c:e6:73:83:0b:94:83:57:3a:1c:b9:31:23:dc:
         72:e6:92:27:29:33:20:ad:c6:57:8d:62:64:5f:ec:08:91:62:
         17:9f:ac:a7:b5:95:56:a7:05:34:57:69:31:d2:8f:f9:09:64:
         20:32:bd:c1:09:51:68:14:37:e2:c8:6e:eb:89:b2:c1:78:79:
         9d:ce:28:72:16:54:73:cc:db:a3:4b:18:e8:f2:d5:9d:6e:68:
         dc:f5:ed:12:fe:ba:4b:62:83:78:88:60:0b:0a:34:9a:b9:b5:
         88:a3:3e:1d:64:cc:94:85:50:12:d2:79:62:13:4c:d6:8f:42:
         56:50:22:c2:21:b8:7d:54:d0:a7:56:e3:3d:9b:e8:77:5e:cc:
         92:f6:cb:78:7e:1f:42:99:e6:bf:89:9a:a7:81:43:ea:d8:23:
         2e:8e:9c:e2:6d:74:b8:31:52:21:da:f8:0d:71:8b:a1:45:85:
         b5:d2:d0:7f:33:a7:f3:ea:70:8b:c2:b7:1b:b2:62:f8:3d:ad:
         e5:e2:fc:de:80:c9:46:90:fe:44:39:ad:e9:89:6b:68:77:52:
         7c:11:d3:56:63:63:67:34:27:8f:07:68:6d:fd:bf:7b:6d:34:
         9a:28:5d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:57 2026 by rpki-client