Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
File:                     HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json)
Hash identifier:          CxfQEAXs0smxl+oxHffXloQWEiDlQ3+woXwHhcohqwo=
Subject key identifier:   45:1A:50:06:68:9E:DF:4A:AC:46:9A:56:92:FA:A5:BD:D7:59:3B:F7
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Certificate issuer:       /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial:       099C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
Manifest number:          0972
Signing time:             Mon 20 Jul 2026 20:31:30 +0000
Manifest this update:     Mon 20 Jul 2026 20:31:29 +0000
Manifest next update:     Mon 27 Jul 2026 20:31:29 +0000
Files and hashes:         1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: A5YGLNbth2uoPV6YVhwEm+XLZ5r2TfI//tECyipc5pc=)
                          2: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: rixxFEhhporEowEcKJ0zMfY5DGdFHoWYuPowdcyFr5A=)
                          3: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: UJmyzSzozDENX7jF+64gEj4E6QBieKxXCaJ+JGRYbs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
                          rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 20:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2460 (0x99c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
        Validity
            Not Before: Jul 20 20:31:29 2026 GMT
            Not After : Jul 27 20:31:29 2026 GMT
        Subject: CN=6a5e85a2-3a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bf:69:f8:ad:f5:8b:33:b2:16:7c:96:b2:9d:
                    6f:17:a2:4b:78:1d:54:cc:da:3c:bb:5f:47:9f:a7:
                    cf:46:5e:d9:fd:e5:b4:48:d6:77:9d:29:68:df:14:
                    52:49:e0:c9:cb:a2:9d:46:b7:82:16:4e:e9:ff:d7:
                    97:c1:4f:90:89:fa:be:2d:5d:88:c8:b7:9d:0a:f5:
                    b8:8b:cb:6d:ce:a5:3b:21:56:17:bf:61:96:50:43:
                    7b:fe:37:13:13:4e:04:10:d3:33:89:8b:58:f7:68:
                    77:82:73:27:79:a5:13:a2:1b:0c:0f:ca:4e:2c:b5:
                    9d:5b:49:6a:f1:2a:df:2b:44:b2:0b:af:c7:af:64:
                    9c:75:80:06:91:b5:89:e8:f1:07:f4:81:cb:3a:d8:
                    65:32:77:ac:18:7d:ec:32:45:2a:12:47:4c:96:41:
                    bc:e2:23:96:41:bd:20:78:0a:98:0c:2a:2e:54:27:
                    4b:c1:a6:72:a8:6d:e2:23:99:e8:3b:43:7b:ad:ff:
                    aa:ea:f6:97:98:96:5e:37:a2:43:ef:09:0c:53:27:
                    7c:1f:10:82:1b:5c:f0:64:82:fb:5f:18:cf:27:47:
                    b3:f9:49:46:53:60:76:76:3d:98:c8:c6:ee:8e:3a:
                    65:56:f9:09:6c:75:96:47:b7:f7:67:62:20:16:39:
                    42:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1A:50:06:68:9E:DF:4A:AC:46:9A:56:92:FA:A5:BD:D7:59:3B:F7
            X509v3 Authority Key Identifier:
                keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2d:9c:6b:c7:78:54:60:20:34:65:10:a9:16:67:28:fa:46:
         6c:03:f4:81:d6:92:d6:c2:84:f8:51:14:49:f2:87:73:6c:53:
         d2:da:34:12:0c:26:b8:df:15:3f:83:86:53:51:ee:ae:cc:34:
         66:a5:de:e8:b8:88:6d:2a:2b:fe:31:55:24:9b:ae:55:42:f9:
         29:15:fc:c9:81:a8:b0:4d:c2:1b:7a:8d:9b:40:9e:4a:93:f9:
         51:b3:02:6c:6a:43:a6:b3:ee:a8:f4:a7:ea:7d:ca:8b:89:bb:
         df:2c:ab:63:86:88:ff:dd:2e:e8:ba:4b:d0:64:df:55:7b:c3:
         6c:4a:8d:d3:e0:94:36:cf:18:df:d3:00:4d:62:e4:8d:b6:86:
         a0:32:10:4b:91:d6:2b:f9:d4:c2:e2:82:0a:6c:2b:3a:3c:15:
         77:82:45:29:14:ad:d8:f0:c4:67:26:82:dc:02:39:c4:97:b2:
         37:f3:28:5c:02:57:a5:4b:02:64:f8:c8:5b:fd:00:2d:11:bb:
         9b:e1:7e:f3:e8:24:1a:57:60:b4:a0:98:81:0c:0e:ef:4b:1b:
         22:1f:3d:52:c2:60:57:e9:a9:44:57:55:f0:b3:c5:ad:e8:29:
         7b:e7:10:9b:63:16:26:ab:9a:be:0e:9f:2d:3d:96:ba:fa:7f:
         d6:9b:b6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:46:33 2026 by rpki-client