Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft
File:                     hnoHFJZqnX2LIC37HeIhPALANic.mft (raw, json)
Hash identifier:          v6EDFotVLRiFFIwsqiu9eKc2UdbWPqDuFAFqW7ZThmg=
Subject key identifier:   8C:62:0F:36:8A:CE:A9:84:1C:6B:98:5B:8E:1B:29:01:C0:66:17:67
Authority key identifier: 86:7A:07:14:96:6A:9D:7D:8B:20:2D:FB:1D:E2:21:3C:02:C0:36:27
Certificate issuer:       /CN=A919FD74/serialNumber=867A0714966A9D7D8B202DFB1DE2213C02C03627
Certificate serial:       0CCB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft
Manifest number:          0CBF
Signing time:             Tue 18 Aug 2026 18:46:02 +0000
Manifest this update:     Tue 18 Aug 2026 18:46:02 +0000
Manifest next update:     Tue 25 Aug 2026 18:46:02 +0000
Files and hashes:         1: hnoHFJZqnX2LIC37HeIhPALANic.crl (hash: lzAJOwUmz3fONh/culyAKS7fyWClt68usJBYeFVsldk=)
                          2: D1DB990C1A3811EAB6F9C83DC4F9AE02.roa (hash: 7Dz9hu6gjsKF7rOCaXHWUeixpnR4qVyHb9xN6ykXLfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.crl
                          rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3275 (0xccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FD74, serialNumber=867A0714966A9D7D8B202DFB1DE2213C02C03627
        Validity
            Not Before: Aug 18 18:46:02 2026 GMT
            Not After : Aug 25 18:46:02 2026 GMT
        Subject: CN=6a84a86a-6d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8e:c1:f3:15:07:89:be:03:8a:4d:f8:20:ff:
                    29:84:03:5d:09:a5:a8:cd:d6:42:41:df:d2:21:eb:
                    8f:8a:f3:2a:8b:2e:2d:7c:0a:cb:5f:b6:ab:0b:76:
                    a4:ab:18:99:ad:02:79:11:8c:e4:4f:3a:8c:28:ad:
                    ea:13:51:16:6c:30:41:a4:01:01:0b:d7:e3:d9:89:
                    4e:31:e1:a1:66:27:03:ae:30:85:1a:d7:98:9b:8f:
                    ce:b4:54:f5:31:54:c1:18:7d:56:cf:48:eb:2f:21:
                    34:6f:6e:af:e7:54:e5:0e:91:08:7c:71:fe:32:46:
                    df:02:1c:54:fd:f6:51:55:84:03:74:be:f1:d7:38:
                    f5:19:10:13:ed:94:2b:64:0f:f7:d1:e6:69:16:ef:
                    82:fd:d4:90:bd:d8:ed:0d:23:ab:94:5c:d4:6c:9c:
                    12:f1:33:94:da:9b:7b:66:2e:36:24:bd:f4:c1:56:
                    7b:8d:59:2e:95:de:20:02:41:15:e1:6a:4c:1a:8c:
                    cc:10:38:8f:10:0b:2a:43:0f:0b:ab:43:17:a6:f6:
                    fb:91:24:c7:26:cf:01:d6:29:f7:1e:34:2e:22:9d:
                    00:da:af:58:57:0e:6b:e0:70:92:4f:b7:7f:73:10:
                    75:b4:fc:db:4b:fd:e5:59:49:57:af:19:ee:bf:44:
                    5e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:62:0F:36:8A:CE:A9:84:1C:6B:98:5B:8E:1B:29:01:C0:66:17:67
            X509v3 Authority Key Identifier:
                keyid:86:7A:07:14:96:6A:9D:7D:8B:20:2D:FB:1D:E2:21:3C:02:C0:36:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:42:13:73:e3:fa:68:d3:5b:3c:24:c3:2f:49:bb:94:4b:5f:
         fc:f9:9f:fa:f3:56:97:e6:31:4f:f1:61:18:05:ac:0c:c4:cc:
         a6:53:4f:cc:ca:f9:47:18:d2:c1:ae:20:2e:26:02:60:c0:89:
         9f:77:07:93:ce:02:63:00:ad:84:9b:77:26:96:24:15:02:80:
         33:28:0d:42:8e:ea:40:4d:a7:a3:00:ac:73:b4:54:a2:cf:56:
         6c:cb:ac:fb:84:67:68:3d:d9:28:35:0f:e7:de:da:0b:72:1d:
         e7:ab:49:ac:2f:2a:8f:e6:14:99:c8:3a:27:51:f1:2b:4f:30:
         ae:4f:fa:11:58:2c:ec:a6:15:73:5d:6f:5c:34:a0:a9:f9:49:
         18:cc:c6:48:0e:f4:eb:92:46:d2:e6:7c:55:97:31:eb:68:50:
         5f:9e:4b:cf:5d:6a:b8:35:9a:9b:c8:76:0b:aa:ed:90:c1:6b:
         67:d3:06:df:96:8b:4b:8e:a0:96:77:a5:46:25:50:e6:93:67:
         58:66:f9:9d:73:38:34:6f:18:28:b3:91:e0:9c:38:e6:3d:12:
         84:62:f8:ea:e8:71:7a:3d:03:7a:db:70:a1:be:63:1e:ff:f5:
         2f:02:4d:4c:27:eb:42:b0:93:ee:67:27:bd:e3:eb:c5:b4:ed:
         1c:c3:58:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:43 2026 by rpki-client