Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
File:                     hEIqhfpOTNTW7plGMaPQ8OboLTo.mft (raw, json)
Hash identifier:          HOJpm526OZU/VdTE+E/UOuWZIe9XkaHa1rqwNOG0weU=
Subject key identifier:   C4:C9:CB:C5:29:57:0C:60:AC:8A:83:47:27:4D:E8:C0:7E:91:35:B9
Authority key identifier: 84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A
Certificate issuer:       /CN=A911C61C/serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A
Certificate serial:       043A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
Manifest number:          0432
Signing time:             Thu 23 Jul 2026 01:09:25 +0000
Manifest this update:     Thu 23 Jul 2026 01:09:24 +0000
Manifest next update:     Thu 30 Jul 2026 01:09:24 +0000
Files and hashes:         1: hEIqhfpOTNTW7plGMaPQ8OboLTo.crl (hash: +q4phaeWxjAIbYMqVxDmpKEwnLBIxmpd1515nQqk7dc=)
                          2: 214E0454B58A11ECAF32FE29C4F9AE02.roa (hash: DeN5+WLuYB95EX5XxNOKqEvwckp++ai7lfprhRYcj3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl
                          rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082 (0x43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C61C, serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A
        Validity
            Not Before: Jul 23 01:09:24 2026 GMT
            Not After : Jul 30 01:09:24 2026 GMT
        Subject: CN=6a6169c4-3d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:d9:f2:c1:b4:45:de:3b:da:a7:c2:0f:3d:
                    0c:cb:ec:43:28:3b:70:cd:3f:86:99:24:26:cb:43:
                    fb:42:9f:21:98:a2:71:2d:30:63:a6:e3:b2:90:5e:
                    e5:df:60:ac:55:6d:cf:d5:26:67:aa:b7:92:6c:67:
                    89:63:ee:ae:46:e8:b7:17:8f:14:ea:c7:3a:9a:66:
                    05:52:c6:be:fa:81:26:97:65:cb:97:f7:bc:d4:ef:
                    f7:79:31:a7:bb:bc:97:c9:ab:f3:cf:bd:d8:ad:a6:
                    e1:db:cb:72:c2:91:f8:ba:ec:83:77:77:a7:d4:b2:
                    58:e8:92:22:c8:6a:04:3c:73:90:67:f7:62:a3:bb:
                    9b:7c:27:ed:7d:67:05:6c:96:d1:b3:6c:6c:6a:d0:
                    08:a3:dd:d4:1f:58:f2:95:e0:20:6b:e5:e3:71:7a:
                    aa:3d:7f:89:f4:f2:71:cf:24:73:b0:9d:f0:37:b7:
                    74:47:50:d9:46:79:dd:a7:24:a0:3a:63:aa:72:14:
                    11:c7:32:4a:72:c9:5c:57:41:53:d2:4e:34:1e:ed:
                    3b:d0:ea:94:3b:b2:86:68:65:37:e5:d1:47:3a:8c:
                    ca:65:26:6c:78:a5:e6:90:b4:04:23:6e:d1:94:91:
                    85:5c:29:38:9a:94:63:06:f7:43:fb:c5:04:68:8c:
                    37:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C9:CB:C5:29:57:0C:60:AC:8A:83:47:27:4D:E8:C0:7E:91:35:B9
            X509v3 Authority Key Identifier:
                keyid:84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:da:e4:e2:4d:70:f3:b7:92:5f:75:4d:ca:d8:08:f5:dd:e1:
         88:3d:1d:18:8f:7f:75:45:96:14:cd:2e:f7:6b:57:25:01:c8:
         7a:d6:ab:40:c6:0f:44:9a:75:2c:30:6f:35:39:e8:03:8f:ac:
         51:95:2e:37:91:2c:05:54:c4:9d:8c:c0:43:6f:77:80:f2:45:
         91:11:6d:b4:8a:6f:70:ec:b5:7a:a6:74:33:75:53:67:14:22:
         a3:fc:06:91:da:ab:1d:fc:35:12:4d:89:46:81:24:da:bd:c4:
         60:5b:dc:d8:2a:c8:ea:79:31:66:b3:20:fa:d0:9f:d5:92:ee:
         4d:8f:50:4e:14:f6:d0:29:90:62:51:76:c1:86:a4:b5:c5:5c:
         49:c2:4d:cc:70:d2:ec:55:d3:a7:4b:48:7a:47:bd:ed:93:92:
         80:0c:df:e4:ad:8b:0b:db:13:19:e4:38:1d:6b:44:c8:75:63:
         e4:ba:93:6d:29:f4:53:d2:18:65:ed:89:36:e6:44:64:d0:c9:
         b5:54:ab:9d:e0:bb:e3:d6:46:a2:a9:98:c5:8a:46:be:84:14:
         52:06:e0:a4:3c:7b:35:77:36:45:45:30:6c:e3:c8:d9:79:86:
         36:fa:53:d8:0e:1f:cb:8d:56:4c:d6:6a:8f:4d:a5:01:04:45:
         ab:09:ba:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:02 2026 by rpki-client