Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
File:                     HVb-TaQriGb-lqKX93LugLUYpAo.mft (raw, json)
Hash identifier:          MDyTbt2IcMKfEeyE33qRZuxT97XzUZiNYQvFgUmyM7U=
Subject key identifier:   F9:AF:05:30:F0:2A:A4:E2:63:47:17:1E:C5:28:E6:92:7F:4E:46:03
Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A
Certificate issuer:       /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
Certificate serial:       1D02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
Manifest number:          1CCF
Signing time:             Wed 22 Jul 2026 16:14:26 +0000
Manifest this update:     Wed 22 Jul 2026 16:14:26 +0000
Manifest next update:     Wed 29 Jul 2026 16:14:26 +0000
Files and hashes:         1: HVb-TaQriGb-lqKX93LugLUYpAo.crl (hash: LWxylFQ328UUbfkTcyvzPkci4CEq0aSbCz8aHMsQ2HU=)
                          2: 619B0B285AE611E781C33D7CC4F9AE02.roa (hash: Vo4FMdvhqUNJju5kt7DaanHL7CNZUhUAdq9fjjfac6U=)
                          3: 486F81CE4B4B11E79F2FF37BC4F9AE02.roa (hash: Y9POkZEe3wRg+MXvb7ccC/944++smUYrxRZm5LhHG30=)
                          4: 9B315A5E46A011E7B9BAF254C4F9AE02.roa (hash: BkEu7fkd0bGNEKpbnL7JduPhIKFSApcB9L/XXPu53I4=)
                          5: 9933B21049D411E7AA790315C4F9AE02.roa (hash: QZA5NGT0T4vQbPj3DAMmG2s01npT1BslQYeDAKHKYHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl
                          rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7426 (0x1d02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
        Validity
            Not Before: Jul 22 16:14:26 2026 GMT
            Not After : Jul 29 16:14:26 2026 GMT
        Subject: CN=6a60ec62-7d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:c6:ed:7f:c2:59:30:70:f3:e8:1d:24:7a:
                    ff:cf:96:1f:2d:db:47:0d:39:dc:3b:2d:e5:0e:69:
                    95:80:77:eb:b2:88:d0:a9:98:4a:00:67:54:42:de:
                    09:9a:34:b4:dc:8e:19:4d:ec:b2:09:99:f3:8d:37:
                    75:12:f5:70:05:15:c8:fc:10:e6:aa:87:04:64:9c:
                    62:ad:0e:48:94:c6:f6:cc:a2:00:48:b1:02:d3:1a:
                    8b:fc:c1:35:66:14:02:e6:03:b4:82:78:a6:0e:57:
                    fd:eb:a1:77:f7:41:31:b3:b7:35:0f:b0:55:b3:84:
                    e1:b4:b0:54:37:01:49:f4:10:d5:01:c0:cd:94:24:
                    55:23:88:85:74:1e:a0:22:a9:82:45:46:3b:f4:fa:
                    12:30:53:fb:65:f7:13:2f:26:0c:d4:57:71:3c:90:
                    59:3c:b3:56:37:be:11:90:3c:42:bc:49:f1:ac:46:
                    fc:d4:44:15:43:66:56:e1:62:a5:60:bd:00:b9:06:
                    98:33:b2:8f:da:56:62:e5:b2:d3:82:bb:b6:01:8d:
                    a3:e4:bd:f0:a9:e7:1a:4a:95:ff:43:7a:da:c5:9c:
                    e5:5a:3d:78:90:5d:9b:2e:ff:94:54:cb:00:ac:e9:
                    c4:8c:36:9d:00:32:9e:ab:6a:e9:58:9e:ce:50:9f:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AF:05:30:F0:2A:A4:E2:63:47:17:1E:C5:28:E6:92:7F:4E:46:03
            X509v3 Authority Key Identifier:
                keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:32:e3:33:46:1d:67:c5:5b:55:a6:a2:56:4b:fb:92:90:ae:
         38:88:bd:07:eb:7f:18:2a:09:ab:13:4d:52:e4:29:8d:e5:0d:
         48:ed:86:16:fa:95:7a:aa:c1:52:20:9b:6f:e2:f9:2b:e3:83:
         9b:93:a6:6e:5d:7a:ac:be:c0:c7:b2:b7:f8:12:53:7a:1d:1a:
         7d:f8:0e:02:99:94:67:86:95:11:57:66:74:aa:ef:58:9a:3a:
         0f:8a:16:6f:2c:33:21:c0:7c:92:02:51:23:9b:e8:f0:99:b0:
         c7:62:34:f9:b6:34:0b:21:67:77:52:a8:11:64:67:a1:ac:db:
         4e:c0:02:00:30:f8:70:7d:fd:1f:c4:ef:63:eb:1d:2d:7a:7e:
         f9:9a:cf:66:a6:38:9e:b2:40:66:46:51:f1:c7:ef:17:36:5d:
         b5:df:e2:7d:d0:11:1e:e3:7c:e6:a5:ec:90:56:5a:9f:af:b8:
         b2:e7:88:14:df:de:19:62:77:a1:40:8a:eb:5b:ac:d2:e5:67:
         f2:a3:a3:83:50:36:d2:82:7c:13:f7:70:02:53:71:42:9e:5c:
         1b:e3:47:ee:c9:9c:3e:74:0c:17:78:46:f5:61:c4:6e:f0:45:
         53:44:60:76:d9:ea:cd:fe:a3:e0:71:2e:51:ca:cf:06:c3:6d:
         eb:1d:d2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:16 2026 by rpki-client