Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
File:                     MHhieRqQd5CGxXf5OTGDidaLcag.mft (raw, json)
Hash identifier:          YEH5Z/F7yEYZx6d9XpsuFJ9+NTPTSrSROszZXq/4fP8=
Subject key identifier:   A9:F3:01:E6:59:C0:C0:3E:4A:48:E8:D0:32:04:94:93:BF:2C:1D:23
Authority key identifier: 30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8
Certificate issuer:       /CN=A912DC94/serialNumber=307862791A90779086C577F939318389D68B71A8
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
Manifest number:          13
Signing time:             Thu 23 Jul 2026 11:08:03 +0000
Manifest this update:     Thu 23 Jul 2026 11:08:02 +0000
Manifest next update:     Thu 30 Jul 2026 11:08:02 +0000
Files and hashes:         1: MHhieRqQd5CGxXf5OTGDidaLcag.crl (hash: KalForKcTHZgSioLwD4vGDf0BhP0YbwdeN3HYGNbdb0=)
                          2: 4F16B51A6AB811F18EBFB70E6347A888.roa (hash: g04zLld4UYO3F+kCZ6KaWBxSqXKNmClRuSZYSKekq78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl
                          rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DC94, serialNumber=307862791A90779086C577F939318389D68B71A8
        Validity
            Not Before: Jul 23 11:08:02 2026 GMT
            Not After : Jul 30 11:08:02 2026 GMT
        Subject: CN=6a61f613-c0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c3:49:4e:ef:87:c4:e4:79:fe:be:77:65:e9:
                    e5:a0:1c:aa:dc:ac:69:38:0f:ba:bd:49:d5:b9:9e:
                    28:3c:f8:c2:bf:5f:36:59:e1:dd:f9:e7:98:35:47:
                    e1:08:23:e9:3b:b2:9d:05:a1:94:34:4c:11:f5:33:
                    70:c3:4d:68:eb:24:40:dc:2c:5c:97:01:26:c5:16:
                    6f:cd:6a:51:79:f9:b4:75:ea:ba:50:99:1b:95:6e:
                    b8:59:0a:f7:43:1d:25:b3:2e:a4:73:db:df:e3:84:
                    0d:51:93:a3:e2:8c:cc:af:50:eb:13:93:99:9a:e0:
                    27:f3:7e:d4:94:1d:1a:8b:2c:23:db:83:a5:a5:74:
                    8f:83:ed:06:1d:95:63:c2:d8:35:1c:eb:69:ec:59:
                    db:16:94:eb:b6:fa:fe:03:73:67:58:f2:f5:e9:c2:
                    e6:3e:c8:34:93:bb:c3:d0:a6:34:e2:d8:fa:ae:cc:
                    b7:56:ec:dd:ad:a2:3e:cc:59:1f:3a:72:00:36:49:
                    1b:df:b2:52:1e:4f:65:9c:b4:b5:bd:3c:59:55:7f:
                    44:bc:82:c9:71:78:80:39:2b:59:49:5c:19:ef:16:
                    77:a3:46:29:4e:27:53:52:bd:69:e1:1b:6a:7e:f8:
                    80:67:dd:11:7e:a6:5a:3f:a6:52:e6:8b:96:46:b3:
                    14:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F3:01:E6:59:C0:C0:3E:4A:48:E8:D0:32:04:94:93:BF:2C:1D:23
            X509v3 Authority Key Identifier:
                keyid:30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3a:1b:98:4a:4c:6c:47:4d:77:36:50:72:82:2c:a6:3a:52:
         b8:7d:6a:9a:15:ac:2e:ea:4b:67:fc:f3:e6:a5:87:92:b7:ab:
         bf:7a:5b:6d:be:ec:55:ad:a8:f3:24:1b:f0:e0:d8:40:b1:e6:
         5f:26:3f:43:bb:09:90:a5:11:f8:0b:55:f3:23:de:aa:3d:d0:
         09:80:5c:8a:7c:9e:78:f6:e9:f7:4e:dd:9f:f5:45:48:0e:a9:
         b0:5f:78:e8:84:ef:14:1c:31:54:58:dd:85:e2:5f:d7:25:b3:
         57:ec:14:97:74:50:71:b5:3d:03:81:4f:95:a4:e4:6a:07:b2:
         01:c6:e3:43:85:a4:bd:0e:ce:32:b3:b1:78:9d:4d:aa:de:88:
         2c:e9:44:bb:c3:58:91:95:c3:ac:2d:8b:cc:6a:f3:e0:3e:4f:
         21:78:2e:39:a5:e6:a7:e0:35:0d:29:42:51:2f:33:5e:de:b1:
         3f:3e:a0:9c:d4:3f:39:3c:f0:a4:f4:53:c3:ad:89:95:88:83:
         c1:1c:5c:ee:89:e8:81:30:51:d9:8c:2a:2c:3f:27:d9:a1:e4:
         1a:1a:2e:7a:dd:5b:44:d8:af:5c:9f:ce:9f:9b:c7:d2:10:5d:
         51:83:93:47:b1:92:0b:25:bc:e9:81:18:c7:05:08:2e:a2:29:
         6e:55:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:29:08 2026 by rpki-client