Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
File:                     USSgTiOq3aRNlKsNSrLAt7IL_HU.mft (raw, json)
Hash identifier:          Ns62MpxdC61geH627Oy4hAfVgxQB3QymbnwMURZcS0M=
Subject key identifier:   64:D7:CF:E0:98:19:97:AF:C6:11:35:A8:AB:86:0A:3A:0B:A2:A4:AD
Authority key identifier: 51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
Certificate issuer:       /CN=A91A8151/serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Certificate serial:       0D1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
Manifest number:          0D0C
Signing time:             Tue 18 Aug 2026 18:36:34 +0000
Manifest this update:     Tue 18 Aug 2026 18:36:33 +0000
Manifest next update:     Tue 25 Aug 2026 18:36:33 +0000
Files and hashes:         1: USSgTiOq3aRNlKsNSrLAt7IL_HU.crl (hash: P0GadhhZKW77bxVfc5cFYyV6/vyPfm/uVHImp/IGxgw=)
                          2: 4279BBD80C5811EA93151657C4F9AE02.roa (hash: PrV4ug4ETTz8/DXoyTLeeGqeqc63WS+hKxc+croiqpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl
                          rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3354 (0xd1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8151, serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
        Validity
            Not Before: Aug 18 18:36:33 2026 GMT
            Not After : Aug 25 18:36:33 2026 GMT
        Subject: CN=6a84a632-5aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:de:1d:d6:69:fd:46:85:5a:d3:11:e5:e3:
                    1c:16:dc:f4:c4:70:15:01:68:74:ab:1e:7a:c1:00:
                    13:f8:71:fd:5f:f0:a5:f8:df:34:cb:a4:ab:2b:2a:
                    77:10:f5:69:2e:40:b4:b5:8c:c4:ee:18:37:9b:93:
                    9d:ea:b5:04:52:4f:97:3b:f5:0d:b3:3c:3e:35:6e:
                    5a:f4:ad:d2:41:b6:bd:da:94:93:53:48:76:20:88:
                    c2:dc:2e:0c:ca:28:20:75:f7:dc:90:b9:92:bb:68:
                    09:2d:4b:ad:d3:71:fb:c7:74:9d:37:d9:58:64:96:
                    df:12:0f:fb:96:44:48:04:80:89:82:0f:75:8a:af:
                    ed:31:36:01:e8:73:80:c0:81:73:d7:30:d6:14:91:
                    85:98:92:fc:cc:1e:64:be:9d:1b:12:6c:66:1b:cc:
                    56:a0:94:d6:e7:65:ee:d8:35:8d:65:bd:77:77:05:
                    88:21:8f:7d:46:aa:7b:79:ab:0c:35:b8:f2:6f:f1:
                    44:46:7e:87:9a:d1:04:20:af:eb:d5:61:c5:6d:5d:
                    77:63:e7:3a:da:d4:85:68:1d:ff:1c:9e:26:bc:00:
                    8c:59:b2:2a:55:75:d3:0a:df:bb:13:bb:aa:09:47:
                    0a:ea:11:8a:1e:28:63:59:a1:da:ba:18:17:57:65:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D7:CF:E0:98:19:97:AF:C6:11:35:A8:AB:86:0A:3A:0B:A2:A4:AD
            X509v3 Authority Key Identifier:
                keyid:51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ba:85:d2:25:1d:15:f5:d7:39:8b:b0:9d:99:a0:7b:d6:34:
         7b:ef:a2:a2:54:4a:e8:a8:37:8e:86:ee:e5:a3:60:10:00:fa:
         71:d6:72:5c:9d:bf:39:f5:a6:e3:86:06:53:af:39:a6:d2:24:
         c0:08:83:66:03:f6:8d:1c:77:2a:6d:1b:08:3f:05:44:8f:7e:
         37:98:b8:2d:6e:30:6c:d6:21:df:0f:4f:e6:01:67:f0:76:3a:
         4c:4d:66:9d:3a:40:e5:76:1a:c9:d2:10:b6:94:3c:37:19:d7:
         ab:ca:c5:dd:7d:7c:01:8e:35:b0:98:d1:23:2f:1b:bd:0c:ae:
         89:27:5f:ca:da:99:0c:a6:ec:a3:57:14:cd:c3:b3:75:e6:da:
         ec:f3:6b:1a:d1:c0:8b:b1:d4:03:ea:12:6a:65:7b:46:28:cb:
         8d:9d:24:5d:ad:3e:db:d3:34:bf:16:f7:61:ae:bf:dd:ac:e2:
         bc:f6:04:20:43:d2:62:2c:26:e2:5c:44:6b:64:e1:25:9d:20:
         e1:bf:96:98:76:e1:d4:39:89:d8:59:73:19:e5:87:92:4f:d3:
         b5:36:00:fb:72:34:ac:1d:a3:52:7b:53:69:69:46:f2:18:ae:
         52:1a:2b:3e:bb:8e:f8:67:3f:94:49:c8:9b:6a:f8:ea:b6:44:
         e5:07:99:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:50 2026 by rpki-client