Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
File:                     hHBzG4maje6yn-pRuQ3BWNvaKvA.mft (raw, json)
Hash identifier:          G/hWPZFC07LLrGp2lTeOOV3FSPNpFsYqiL+o7SkHAi0=
Subject key identifier:   5A:0E:EE:88:E2:29:4D:53:2D:86:8D:45:0A:C7:F9:7E:87:F1:90:00
Authority key identifier: 84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0
Certificate issuer:       /CN=A914AF32/serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
Certificate serial:       1468
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
Manifest number:          1451
Signing time:             Wed 22 Jul 2026 16:59:35 +0000
Manifest this update:     Wed 22 Jul 2026 16:59:34 +0000
Manifest next update:     Wed 29 Jul 2026 16:59:34 +0000
Files and hashes:         1: hHBzG4maje6yn-pRuQ3BWNvaKvA.crl (hash: LZboZuXa90i+KLrVkF8ou6Sl8upSlBQLv2HEbFZ5Ixk=)
                          2: 813A255423A611F09025FC11C4F9AE02.roa (hash: RaOIdSyJbLBmHHTBAcqvM2xNuH84JM4tWrC9RYmAhrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl
                          rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5224 (0x1468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AF32, serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
        Validity
            Not Before: Jul 22 16:59:34 2026 GMT
            Not After : Jul 29 16:59:34 2026 GMT
        Subject: CN=6a60f6f7-eed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:87:79:79:d0:f7:73:96:2d:d2:f7:c4:82:
                    c7:14:5e:f3:0b:38:3d:a4:c4:ec:41:51:17:fd:68:
                    24:08:e5:aa:18:d3:ca:be:2a:39:dd:d7:44:c8:f8:
                    4c:7c:bf:f1:f8:ac:fe:fe:2d:32:1f:0e:39:25:ee:
                    e9:fb:53:41:32:26:f4:be:8f:68:4d:79:5b:30:f9:
                    03:f0:09:3d:fb:04:ed:32:e4:b3:a5:a6:66:b7:33:
                    74:a4:51:3c:2f:92:cb:3b:02:97:58:4b:d4:29:ee:
                    07:55:95:c9:f5:e7:b8:3b:ce:41:04:64:0a:44:52:
                    04:a4:df:e8:af:af:05:f1:0a:2c:1a:32:45:e9:53:
                    89:61:57:76:72:31:20:55:10:f8:d5:1c:1f:d8:d4:
                    20:60:87:00:c9:5e:a2:02:b1:14:eb:bd:02:02:0b:
                    a6:a1:7e:6f:72:dd:86:dd:39:12:d9:9d:94:4c:c6:
                    e4:95:6f:0d:6a:81:19:5b:e1:d6:4f:00:57:c6:d1:
                    e3:da:0d:e0:8d:cc:2f:a5:1f:44:63:af:5b:b9:c0:
                    fb:19:03:57:74:24:fc:f4:75:4e:c4:96:f1:cf:82:
                    ea:0b:7e:1e:45:4f:b1:14:bf:5e:fb:fb:44:2c:b9:
                    ea:67:36:75:a9:ad:f4:6e:31:9f:92:1f:65:48:65:
                    fc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0E:EE:88:E2:29:4D:53:2D:86:8D:45:0A:C7:F9:7E:87:F1:90:00
            X509v3 Authority Key Identifier:
                keyid:84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:0a:d8:93:6f:05:bd:8d:31:56:92:5d:88:94:c3:e3:e7:d3:
         31:20:6b:7b:f7:61:f4:9f:9b:e1:a7:56:20:42:21:9b:eb:05:
         87:9e:c8:82:ea:d2:9f:08:47:8b:3c:4c:5b:41:a7:a5:1a:16:
         7d:1f:e4:5b:fb:5a:ee:df:76:6e:c6:c5:75:11:d3:30:89:6e:
         c4:a4:78:d0:7d:67:cf:3e:05:c2:c0:3e:e9:d8:16:29:be:c5:
         52:c9:a0:70:e9:6c:22:d3:47:23:e1:60:4b:85:54:c4:ec:a0:
         75:57:7d:d9:ae:32:df:d1:25:8f:0f:ff:6c:be:5e:f9:40:e2:
         9d:53:cb:68:f0:b6:e2:08:d6:c0:be:fe:fa:d9:cc:54:14:90:
         21:04:0b:a7:38:71:45:72:27:c9:dd:82:80:c1:72:11:0b:32:
         71:d8:39:68:04:da:d1:3a:eb:a5:eb:cf:80:2f:dc:f5:6b:9d:
         3e:17:25:ff:53:0d:7d:b0:e3:87:6b:42:43:49:09:2d:3a:40:
         33:5f:84:da:94:5b:9f:c6:71:ff:6e:a6:ed:5c:bc:03:76:4b:
         f3:79:08:51:5c:34:6c:fe:5e:b5:ff:f2:46:54:35:11:52:fc:
         e0:9a:b4:fd:9a:0f:98:b7:56:25:b1:62:1e:53:16:0c:70:72:
         58:da:ff:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:47 2026 by rpki-client