Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
File:                     hcB2_Z7Aaao764dTTpR6icQ9lso.mft (raw, json)
Hash identifier:          f520wz9kly4RFt7pauEyohhdVf8yz5ErH45zf1D0qQU=
Subject key identifier:   AA:18:9C:46:06:0D:71:95:96:48:76:5C:A0:E6:EF:72:57:CE:A3:31
Authority key identifier: 85:C0:76:FD:9E:C0:69:AA:3B:EB:87:53:4E:94:7A:89:C4:3D:96:CA
Certificate issuer:       /CN=A91E5EB9/serialNumber=85C076FD9EC069AA3BEB87534E947A89C43D96CA
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
Manifest number:          09
Signing time:             Fri 17 Jul 2026 10:30:21 +0000
Manifest this update:     Fri 17 Jul 2026 10:30:21 +0000
Manifest next update:     Fri 24 Jul 2026 10:30:21 +0000
Files and hashes:         1: hcB2_Z7Aaao764dTTpR6icQ9lso.crl (hash: 4anxzLMkeC7xGaWfWP1lDAPcc+4D0RUgbgjtyb4OJoQ=)
                          2: 6681AA1A751811F1800E092372A30FBC.roa (hash: 5JMpNNlty75w+8UJcE4/wOIgirIQlenHvY9/D//OZuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.crl
                          rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EB9, serialNumber=85C076FD9EC069AA3BEB87534E947A89C43D96CA
        Validity
            Not Before: Jul 17 10:30:21 2026 GMT
            Not After : Jul 24 10:30:21 2026 GMT
        Subject: CN=6a5a043d-86f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:58:af:3b:2b:10:5f:be:f0:93:cf:08:f7:
                    ea:0e:b7:04:cc:30:03:fe:4e:d4:e7:b9:98:94:4a:
                    76:0c:8a:f0:a1:10:ba:06:c4:af:00:23:0c:69:fe:
                    78:d1:b5:d9:9f:5e:bb:6c:4c:88:4c:16:4a:db:76:
                    c4:d9:87:ca:cd:06:74:fd:2d:50:cb:f1:d9:43:dd:
                    4d:02:37:25:d5:7f:e8:45:4d:3b:56:8a:67:2f:4b:
                    11:f0:b3:1d:89:3e:41:34:61:3d:ce:02:ce:d7:64:
                    59:83:6c:0e:b2:f9:9d:5d:74:bf:2d:8c:26:97:2b:
                    b2:94:3a:12:dc:e5:ad:8a:c0:d3:b6:6a:5e:5a:f1:
                    60:be:3b:f4:40:19:a2:e6:b3:b2:d5:00:d5:e1:20:
                    62:f7:48:23:58:53:a0:6a:21:ac:c2:53:d6:ed:04:
                    4e:6f:43:80:09:b1:31:54:67:78:88:5f:fb:19:98:
                    21:ed:10:0e:73:69:77:33:9a:fa:06:3d:73:e8:27:
                    65:25:a3:6c:bd:73:4c:fc:51:06:cb:c4:d4:83:b4:
                    1b:ea:fc:10:49:20:8d:b2:99:6f:54:18:92:4b:dd:
                    f7:1d:2e:1e:71:b1:89:ea:9c:9d:d6:9e:93:ad:65:
                    bc:c0:5b:a9:a1:19:77:28:72:6b:75:9c:f5:42:cc:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:18:9C:46:06:0D:71:95:96:48:76:5C:A0:E6:EF:72:57:CE:A3:31
            X509v3 Authority Key Identifier:
                keyid:85:C0:76:FD:9E:C0:69:AA:3B:EB:87:53:4E:94:7A:89:C4:3D:96:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:59:83:29:1e:10:af:8a:c1:9e:9c:b1:19:ff:4a:a7:2a:d8:
         26:73:23:19:42:7d:6f:17:2c:57:4a:2e:4d:f0:94:09:d8:e0:
         87:94:96:b7:06:8c:25:bc:31:1f:8e:9f:4b:a6:4b:72:00:21:
         55:65:22:12:b9:c7:32:cb:c0:82:bd:cd:be:db:d1:9e:50:57:
         42:b9:a4:0d:b7:8a:2b:37:fd:06:b5:34:09:f4:aa:44:d0:20:
         d3:0c:f0:b1:c8:91:dc:9e:a1:05:54:78:d6:10:90:8f:6d:f0:
         4e:cc:04:e8:76:ed:8d:de:b5:58:ea:a5:bc:4a:69:90:a8:a9:
         ad:b7:05:e0:3e:39:e0:5d:68:e5:94:b3:0d:49:11:d5:aa:13:
         ae:c5:93:2d:5a:fe:4f:20:f5:5d:4f:ae:12:f2:5c:3f:47:91:
         a9:db:6b:06:23:87:79:53:50:1e:7b:6a:7a:84:1c:b2:d7:f8:
         65:a6:f1:ad:8d:b7:17:06:e2:07:72:08:b9:92:db:69:ad:62:
         13:1b:f1:1e:9a:cb:d1:f0:0b:d9:e5:30:59:d8:f5:a7:a9:ac:
         79:d8:3e:3b:8f:c5:10:af:b4:d6:59:56:f3:dd:4f:91:60:2d:
         4f:07:06:ba:39:69:2d:ab:f2:06:f3:4d:16:78:60:a9:30:57:
         ba:af:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:09:35 2026 by rpki-client