Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B4A/57598D54868011F19D1E7A5F66A30FBC/HP_Eg6VKG7DmavxzrIcZI8bMZYI.mft
File:                     HP_Eg6VKG7DmavxzrIcZI8bMZYI.mft (raw, json)
Hash identifier:          mOy5Pd9wz1HKjMcrbZpt3JiL7HEDKe8BtxXGAQ21vQM=
Subject key identifier:   F7:57:66:47:E1:00:BD:E9:73:A0:DF:DE:E1:7E:31:C1:7E:78:96:EF
Authority key identifier: 1C:FF:C4:83:A5:4A:1B:B0:E6:6A:FC:73:AC:87:19:23:C6:CC:65:82
Certificate issuer:       /CN=A91D2B4A/serialNumber=1CFFC483A54A1BB0E66AFC73AC871923C6CC6582
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HP_Eg6VKG7DmavxzrIcZI8bMZYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B4A/57598D54868011F19D1E7A5F66A30FBC/HP_Eg6VKG7DmavxzrIcZI8bMZYI.mft
Manifest number:          15
Signing time:             Tue 25 Aug 2026 08:56:45 +0000
Manifest this update:     Tue 25 Aug 2026 08:56:44 +0000
Manifest next update:     Tue 01 Sep 2026 08:56:44 +0000
Files and hashes:         1: HP_Eg6VKG7DmavxzrIcZI8bMZYI.crl (hash: 6qV8aAiFlsKisDzKmLwU+br+T5CVws0QAKALJWkFGm4=)
                          2: F96399A2890811F1B9FCBC754C11F970.roa (hash: p/HyZOExWpAExKinNeG+Ud+HfKM8Y6EPhK7+0I/TK/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B4A/57598D54868011F19D1E7A5F66A30FBC/HP_Eg6VKG7DmavxzrIcZI8bMZYI.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B4A/57598D54868011F19D1E7A5F66A30FBC/HP_Eg6VKG7DmavxzrIcZI8bMZYI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HP_Eg6VKG7DmavxzrIcZI8bMZYI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 08:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B4A, serialNumber=1CFFC483A54A1BB0E66AFC73AC871923C6CC6582
        Validity
            Not Before: Aug 25 08:56:44 2026 GMT
            Not After : Sep  1 08:56:44 2026 GMT
        Subject: CN=6a8d58cd-0b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:36:05:55:6c:2c:e9:10:38:eb:c3:6b:5e:
                    84:54:71:5b:88:fb:df:4b:b9:49:4c:69:f0:e8:2e:
                    3c:96:70:53:27:22:e0:cb:4a:36:48:8c:18:ff:76:
                    00:e8:91:9b:d1:8f:55:da:f2:21:f2:70:6f:98:4d:
                    66:71:71:c3:e9:c0:e1:9c:f0:5a:47:f4:3f:8e:3f:
                    62:d1:a7:1d:61:44:81:b1:f2:9f:fd:5f:45:cf:55:
                    d6:ad:f9:11:23:52:b6:ee:01:92:e4:6f:4d:74:49:
                    e6:56:c7:3f:61:10:ac:12:bb:db:41:fd:da:40:82:
                    9b:67:ee:e4:45:f6:74:e3:bd:43:04:45:b5:fe:25:
                    5c:45:2d:43:5f:ec:db:cb:f0:07:22:24:ea:1c:9a:
                    82:43:91:7b:f5:03:a6:d1:24:9e:12:92:7c:f5:21:
                    49:32:fe:e0:c6:63:92:58:ed:e1:f0:90:bf:00:d5:
                    e3:3f:77:4d:ad:90:68:1b:b8:94:aa:f6:ce:78:48:
                    8d:ce:da:76:01:ac:1f:83:19:29:d5:26:e1:95:e2:
                    a7:d0:42:1d:e0:af:bf:d0:77:f9:17:08:a4:84:d2:
                    01:b9:2f:ae:e1:8c:93:c6:3e:6e:53:2b:e0:88:6f:
                    3e:f7:65:bf:53:d3:f2:50:91:42:ad:bf:ac:b9:b2:
                    ad:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:57:66:47:E1:00:BD:E9:73:A0:DF:DE:E1:7E:31:C1:7E:78:96:EF
            X509v3 Authority Key Identifier:
                keyid:1C:FF:C4:83:A5:4A:1B:B0:E6:6A:FC:73:AC:87:19:23:C6:CC:65:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B4A/57598D54868011F19D1E7A5F66A30FBC/HP_Eg6VKG7DmavxzrIcZI8bMZYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HP_Eg6VKG7DmavxzrIcZI8bMZYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B4A/57598D54868011F19D1E7A5F66A30FBC/HP_Eg6VKG7DmavxzrIcZI8bMZYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ae:8d:92:da:f7:ba:b3:8b:0f:6d:b3:ab:ca:c6:84:b6:23:
         fd:2e:fb:9b:c0:8f:94:80:c4:5c:bf:5d:e9:00:57:35:86:63:
         0c:1c:05:be:bb:c3:4a:1d:0d:89:01:4f:78:a9:79:4a:51:f8:
         64:14:2b:e9:9e:6f:0c:d6:c3:54:d1:4c:37:d4:78:a1:85:f5:
         bb:ed:24:28:15:c7:db:44:50:f4:2e:69:ff:2c:17:91:02:6d:
         79:44:75:a5:b6:35:3f:13:6e:1f:90:4b:89:ac:db:23:da:af:
         97:ea:67:bb:35:3b:08:ba:56:a9:ef:b8:f0:59:1c:39:69:62:
         19:3f:4d:ce:a3:ba:cb:a5:11:eb:8c:a2:4d:fd:cc:58:d0:a3:
         3b:bc:0d:fb:9c:b8:ad:9c:4f:69:33:61:93:a4:53:eb:12:e5:
         1f:fb:4e:53:21:d1:dd:41:47:77:8e:99:e7:cf:ee:20:9c:03:
         f5:ee:ca:87:e6:3c:02:e6:3b:1f:3e:e6:52:d3:19:38:a5:58:
         f5:46:40:20:13:7e:5a:45:08:74:eb:b9:f5:48:d6:1b:f5:fb:
         8d:e8:86:16:bb:83:69:76:43:a1:43:1f:db:69:d2:71:e9:77:
         5c:39:68:4d:9a:75:32:72:20:7c:1a:99:79:e8:38:94:58:c5:
         92:d9:da:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:53:11 2026 by rpki-client