Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
File:                     hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json)
Hash identifier:          nIu/S3KDR6tzxX9g7EnlXV9nPCvwipSzq+ZJIXhx2Mw=
Subject key identifier:   39:D6:F1:76:75:4B:38:36:A4:83:D8:39:CE:88:1B:CE:E1:C5:F8:B8
Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8
Certificate issuer:       /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8
Certificate serial:       074A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
Manifest number:          0742
Signing time:             Wed 22 Jul 2026 22:27:37 +0000
Manifest this update:     Wed 22 Jul 2026 22:27:37 +0000
Manifest next update:     Wed 29 Jul 2026 22:27:37 +0000
Files and hashes:         1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: WtNezdsQKUJOiq0aTM/iz3MCCX30wJaGljMGftIFgkg=)
                          2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: oGpaoJnN0XSnyU8TN0NZVM9McHxZfbUaTEUnM8LnSNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1866 (0x74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8
        Validity
            Not Before: Jul 22 22:27:37 2026 GMT
            Not After : Jul 29 22:27:37 2026 GMT
        Subject: CN=6a6143d9-25a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:73:c8:23:5c:ae:ec:c1:72:38:d7:86:34:
                    09:aa:87:3c:21:fe:1b:38:a5:79:db:c4:9c:20:42:
                    b7:f3:10:0d:07:a4:51:16:64:17:df:8f:33:22:0b:
                    24:a6:fc:da:65:0c:33:b8:66:4e:e4:c5:bf:25:cd:
                    0b:01:d7:c4:98:59:dc:99:f9:7b:f7:bd:d6:60:15:
                    e2:ae:2a:cc:34:0d:28:4b:47:a7:10:92:e0:41:ea:
                    c0:6c:0a:ef:66:8b:a8:02:cc:d8:76:1b:bb:3d:18:
                    a6:64:fb:28:03:3c:0f:ed:fb:f1:f6:20:e4:f6:73:
                    55:59:9f:28:61:52:40:db:f7:83:d6:69:9e:51:90:
                    6a:fe:76:59:da:d8:65:22:3f:0f:06:a3:8f:3b:62:
                    65:92:29:c5:0d:2b:56:02:9b:4f:21:a3:7b:71:ad:
                    d2:3b:2d:21:5e:0f:58:6a:ee:e8:fb:6b:93:7c:4b:
                    f3:dc:52:16:ca:1b:fd:e0:c9:eb:0e:37:f1:95:08:
                    9f:89:7d:2d:c4:88:78:42:2f:a7:35:ba:02:d9:60:
                    67:8e:1f:d3:cd:ae:eb:e8:9a:0a:a5:8d:9b:4d:9b:
                    86:1a:6f:db:35:63:ff:35:57:1e:5b:e8:a0:cc:a4:
                    88:27:bb:e5:98:d6:8e:56:12:f0:e9:64:26:29:b5:
                    b0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D6:F1:76:75:4B:38:36:A4:83:D8:39:CE:88:1B:CE:E1:C5:F8:B8
            X509v3 Authority Key Identifier:
                keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:82:6a:41:ad:54:f7:29:3b:6b:b8:81:73:3c:61:45:99:ce:
         a9:05:ae:ae:18:bf:e6:f4:0f:f0:67:fd:cf:a3:7b:33:00:ef:
         7b:6e:b9:f1:e7:77:ad:7d:23:a1:c8:42:98:64:0e:03:56:3b:
         b2:e3:91:b4:05:c7:a5:de:7d:f7:c8:c1:81:8f:c0:4c:94:e4:
         1f:69:b1:80:48:0e:d6:46:c3:dd:35:42:e0:56:9f:db:a3:ca:
         95:7b:c8:50:24:f8:46:fa:f2:36:04:da:ef:71:ab:ca:c7:6c:
         22:7b:23:26:a8:10:94:09:36:0d:4a:30:87:65:8e:a9:08:df:
         8f:b9:e5:70:4b:9b:70:b5:9e:2d:03:e5:92:9c:2d:02:c4:91:
         77:6c:3f:63:53:27:d7:d0:0f:41:61:06:24:cf:e4:1f:d6:83:
         df:38:87:66:f7:19:a2:09:04:d8:26:ca:4a:d9:70:48:78:2f:
         f7:66:35:17:cd:29:e2:7a:69:91:98:96:9d:ed:bf:df:b6:3a:
         ce:74:81:59:70:e1:9b:66:1d:2b:3f:df:ae:14:1f:18:0d:40:
         ea:57:73:91:2a:79:4b:fe:2f:e1:41:eb:8a:5b:c0:0f:c2:09:
         fe:d4:6b:c7:90:67:12:46:17:d0:00:a4:26:35:09:9c:6a:9d:
         c8:46:c2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:09:37 2026 by rpki-client