Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
File:                     HUW1iuOmlSERtAmFTag5MXvugjM.mft (raw, json)
Hash identifier:          UmD8UzG6lAjMVKtROGkC1ggKBjlx1OeYKZmox9R8eVo=
Subject key identifier:   AC:B0:48:B1:99:6C:0D:5A:B4:07:7E:7C:F9:09:F3:3D:98:04:5B:68
Authority key identifier: 1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33
Certificate issuer:       /CN=A9120119/serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
Certificate serial:       11E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
Manifest number:          1AA3
Signing time:             Wed 22 Jul 2026 17:17:14 +0000
Manifest this update:     Wed 22 Jul 2026 17:17:13 +0000
Manifest next update:     Wed 29 Jul 2026 17:17:13 +0000
Files and hashes:         1: HUW1iuOmlSERtAmFTag5MXvugjM.crl (hash: Ndlahoqw1G9LpENEAfWlIc9P7exdO/uxISCT3IP30hY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl
                          rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4579 (0x11e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120119, serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
        Validity
            Not Before: Jul 22 17:17:13 2026 GMT
            Not After : Jul 29 17:17:13 2026 GMT
        Subject: CN=6a60fb1a-9db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:71:17:cf:db:b7:d9:e6:5c:47:70:30:05:
                    e4:a1:a9:23:ce:33:ab:49:a8:fc:28:38:08:44:10:
                    ff:32:61:2b:fd:e2:a2:d8:5e:c8:7e:72:be:2a:58:
                    87:57:20:41:60:e7:30:9d:f5:55:93:3b:bb:e8:ef:
                    c3:55:c3:5c:0b:6a:30:df:84:e1:91:e5:04:1f:b7:
                    23:14:71:bf:68:9a:9a:20:ac:7e:65:17:97:80:af:
                    73:3b:7b:cb:a9:46:cb:c4:af:38:de:2e:e8:36:b4:
                    d5:23:2a:ec:82:b5:3c:00:a9:d7:44:a3:d2:2e:e0:
                    a8:db:97:c9:9b:b0:02:60:12:79:9e:41:e7:eb:0b:
                    53:2e:8a:c7:25:54:ea:57:75:34:c0:3b:a6:d9:9a:
                    2f:b5:ec:33:32:04:28:1d:76:e5:06:05:ea:1e:47:
                    c1:82:b7:c8:52:3f:78:03:b0:c0:d9:c6:44:c0:f7:
                    95:6b:8a:a0:55:5a:42:f3:d8:81:9d:51:22:29:7c:
                    79:13:1b:e9:c3:d7:5f:2a:72:69:63:88:13:f9:b1:
                    f5:6c:0c:f4:86:7b:54:ce:b0:3f:c2:6a:a5:42:bc:
                    70:06:19:42:a2:67:7f:bf:b8:f9:c7:1a:69:48:d1:
                    ec:75:ec:bc:05:6b:40:5f:1b:d2:75:a6:6a:bd:0b:
                    74:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B0:48:B1:99:6C:0D:5A:B4:07:7E:7C:F9:09:F3:3D:98:04:5B:68
            X509v3 Authority Key Identifier:
                keyid:1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:21:6b:14:e0:4c:4e:1a:d7:ad:7c:85:39:78:17:81:85:eb:
         eb:d9:d7:68:7d:2c:3c:4f:3a:05:d1:b7:15:ec:00:2a:6b:ad:
         c9:7f:ae:3f:5e:d5:91:b1:27:5e:ea:21:55:92:50:05:4b:3d:
         dc:7f:81:a1:21:0c:c7:5a:4d:98:a6:f8:19:11:c3:e9:1d:e9:
         c8:53:64:4e:11:bd:75:9c:07:e2:a5:0f:c8:a0:13:4d:b9:c5:
         8f:ed:a9:31:53:72:fe:92:ea:20:ed:bf:bf:d1:2c:b6:57:4b:
         47:fc:6c:47:80:42:8b:08:ad:10:9a:e3:71:ee:c1:60:05:35:
         14:01:f0:79:97:40:a5:b4:4c:ae:ee:ea:45:97:d2:61:99:28:
         31:de:97:c2:ab:41:b3:1b:8b:a4:cc:5e:13:34:f2:81:bb:bd:
         c3:49:52:b8:32:de:dd:ce:32:49:38:a5:df:45:9d:e6:cb:47:
         67:d6:09:11:02:de:e3:c6:4d:68:85:2b:05:1f:ce:39:37:36:
         3f:d5:87:44:d9:41:73:ed:23:93:7f:eb:ac:ee:cd:97:57:3a:
         59:1b:1f:7b:44:1b:16:e9:bb:6e:93:e3:10:56:c7:14:19:24:
         3e:9e:75:ca:87:f0:b6:c0:d0:d4:9d:b1:7c:8f:e7:be:f6:d3:
         69:fd:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:15 2026 by rpki-client