Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File:                     HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier:          JiHch7QJT0emcL5MOJvBAhcQ8ksG7wCfQ4wHNYfgFig=
Subject key identifier:   65:08:9E:58:F8:6D:15:A4:D1:2E:07:9C:6D:EC:45:98:E6:0B:D4:F5
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       0700
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number:          06D3
Signing time:             Wed 22 Jul 2026 22:57:37 +0000
Manifest this update:     Wed 22 Jul 2026 22:57:37 +0000
Manifest next update:     Wed 29 Jul 2026 22:57:37 +0000
Files and hashes:         1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: lXkqGBmyeD0OaFJpn46KV66cJvEuoqAqpZYXaLhy9NU=)
                          2: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
                          3: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
                          4: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
                          5: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
                          6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Jul 22 22:57:37 2026 GMT
            Not After : Jul 29 22:57:37 2026 GMT
        Subject: CN=6a614ae1-d762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:78:5c:b0:aa:1b:32:06:09:54:4f:35:7b:35:
                    b1:19:bd:06:d0:89:63:d7:cf:6d:8b:ab:1b:4f:7e:
                    c9:e5:26:7c:41:a7:f8:3e:17:1e:65:f7:34:9b:df:
                    6d:8c:23:43:aa:ac:0e:67:51:d3:a7:71:6a:d2:d1:
                    d3:d6:b4:51:0e:e5:ec:7e:6d:8b:07:48:b1:bc:1b:
                    be:6a:5e:af:1f:aa:03:8a:3c:9d:f2:59:e2:1f:5f:
                    ba:df:f7:a0:5b:0e:30:7d:a1:c3:18:27:31:ed:eb:
                    6f:be:a7:c2:e0:06:fa:57:95:94:1a:ba:a9:aa:0e:
                    35:dd:7f:a6:01:18:fb:3c:c9:bd:ca:14:02:2a:1d:
                    fb:69:71:05:cd:c6:bf:a8:b7:8e:58:ce:40:e9:32:
                    9f:4f:fd:28:73:19:a8:58:6b:ba:03:2d:dc:32:ec:
                    aa:42:82:49:3f:e6:39:d3:cf:40:6c:02:d2:81:51:
                    23:2f:82:10:44:9e:84:ce:50:f2:ac:35:ba:93:6b:
                    b3:d6:2c:8f:f8:4b:1a:8e:3f:47:71:52:67:d0:5d:
                    48:35:d6:c7:de:85:42:e7:69:04:bf:1b:a6:61:dc:
                    47:62:16:6d:9e:2a:c5:ef:08:6c:c5:57:af:cf:4a:
                    a4:20:9a:ed:13:83:c5:d1:38:e3:78:0a:2a:22:56:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:08:9E:58:F8:6D:15:A4:D1:2E:07:9C:6D:EC:45:98:E6:0B:D4:F5
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:88:7d:9b:38:67:15:b4:02:a9:13:eb:60:3d:a1:b7:b2:b2:
         bf:13:b2:38:b9:f1:4b:bf:f5:7b:4a:ea:55:79:62:2a:67:0b:
         6b:5a:3e:2b:d3:2d:4e:4a:48:5f:37:08:20:b9:94:87:54:42:
         9f:0b:ac:24:2b:47:e3:81:f4:e6:74:01:f9:f2:a4:b6:4f:46:
         d1:f0:1a:22:bd:bd:1e:c4:86:a4:b9:1e:db:43:36:28:89:ef:
         b5:4d:f2:a5:57:5b:4e:b6:cb:31:5c:e8:76:77:06:e5:cf:44:
         e9:c1:7d:23:54:c3:bf:c8:cf:56:27:ee:4d:6a:6b:57:82:33:
         52:4a:54:5e:19:73:e5:8e:bd:3b:e7:8e:3e:9e:26:ab:e8:0c:
         d4:36:2d:1a:2a:d6:ee:bf:1a:5a:c9:da:c4:5d:b6:dc:06:0a:
         b0:aa:d3:85:c6:94:f2:46:a8:51:ee:6f:21:d8:99:23:62:14:
         55:d8:ed:2c:11:9d:9d:04:1c:e2:94:5d:9b:87:04:fa:fc:61:
         4f:14:7f:b3:34:ac:c7:42:37:b9:26:27:84:dd:1d:2f:53:55:
         98:2a:d3:c4:39:04:b7:42:55:ff:3b:3d:32:98:8c:48:70:10:
         06:e5:7a:92:e4:1b:35:28:59:5e:43:e9:66:49:25:9d:dd:11:
         dd:c9:2e:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB
RjM3RDgzMTIwHhcNMjYwNzIyMjI1NzM3WhcNMjYwNzI5MjI1NzM3WjAYMRYwFAYD
VQQDEw02YTYxNGFlMS1kNzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3XhcsKobMgYJVE81ezWxGb0G0Ilj189ti6sbT37J5SZ8Qaf4PhceZfc0m99t
jCNDqqwOZ1HTp3Fq0tHT1rRRDuXsfm2LB0ixvBu+al6vH6oDijyd8lniH1+63/eg
Ww4wfaHDGCcx7etvvqfC4Ab6V5WUGrqpqg413X+mARj7PMm9yhQCKh37aXEFzca/
qLeOWM5A6TKfT/0ocxmoWGu6Ay3cMuyqQoJJP+Y5089AbALSgVEjL4IQRJ6EzlDy
rDW6k2uz1iyP+Esajj9HcVJn0F1INdbH3oVC52kEvxumYdxHYhZtnirF7whsxVev
z0qkIJrtE4PF0TjjeAoqIlYtTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGUInlj4
bRWk0S4HnG3sRZjmC9T1MB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD
QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp
ODBBSWpSTjAzUzJ2TjlneEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACoh9mzhnFbQCqRPrYD2ht7KyvxOyOLnxS7/1e0rqVXliKmcLa1o+K9MtTkpI
XzcIILmUh1RCnwusJCtH44H05nQB+fKktk9G0fAaIr29HsSGpLke20M2KInvtU3y
pVdbTrbLMVzodncG5c9E6cF9I1TDv8jPVifuTWprV4IzUkpUXhlz5Y69O+eOPp4m
q+gM1DYtGirW7r8aWsnaxF223AYKsKrThcaU8kaoUe5vIdiZI2IUVdjtLBGdnQQc
4pRdm4cE+vxhTxR/szSsx0I3uSYnhN0dL1NVmCrTxDkEt0JV/zs9MpiMSHAQBuV6
kuQbNShZXkPpZkklnd0R3ckukg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:11 2026 by rpki-client