Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
File:                     EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json)
Hash identifier:          DZ8j0n7tNIZceYfzFIpkty4L6j2s/PEwCtobSzq9oZo=
Subject key identifier:   C3:86:0A:4F:D7:67:6A:AE:9C:69:FD:3A:FC:D8:30:A9:94:C4:3B:EB
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Certificate issuer:       /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
Manifest number:          0204
Signing time:             Thu 23 Jul 2026 04:21:58 +0000
Manifest this update:     Thu 23 Jul 2026 04:21:57 +0000
Manifest next update:     Thu 30 Jul 2026 04:21:57 +0000
Files and hashes:         1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: arcxsrEsIICjtpn/0z15GHRgxL+Gp7/cQ4GvjFd+03o=)
                          2: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: FJ+repPrmYSlijYjI+MRSa3mhNIvAfvhuyQif/Z3/Zo=)
                          3: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: e7JyAV4y4Fpitct0PBwFzDuy1w2upP2xYQlut6RJaeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
                          rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
        Validity
            Not Before: Jul 23 04:21:57 2026 GMT
            Not After : Jul 30 04:21:57 2026 GMT
        Subject: CN=6a6196e6-a63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:65:00:43:43:2d:bc:5a:35:ca:64:89:28:74:
                    d9:02:fc:9b:ac:80:f2:5d:6b:71:63:e5:d5:10:86:
                    2e:9d:78:4d:6d:91:24:a8:85:9e:b0:7b:ac:2e:d3:
                    27:18:b5:b1:07:fe:19:b8:fd:c1:11:29:bd:da:ad:
                    cc:d4:83:cd:0a:a8:52:ac:fc:66:2c:83:7a:72:95:
                    95:16:79:e2:f5:9c:c6:f1:21:f8:fb:1d:1e:1c:35:
                    62:13:43:3f:f5:50:79:5a:16:f1:e8:39:12:cd:a9:
                    af:db:78:81:df:b9:ae:a1:96:db:e6:82:a9:71:42:
                    6e:2a:45:3e:98:7f:6d:e0:66:7b:91:64:8e:c4:af:
                    f0:e4:54:02:dc:9c:81:bb:78:0e:b7:95:aa:b9:2d:
                    35:48:b0:fd:37:a1:2c:31:41:86:45:0c:1a:c5:66:
                    a5:74:91:24:8f:41:14:25:f5:e8:e8:ad:a2:26:7f:
                    14:f1:01:26:94:13:07:6f:94:57:2d:58:cc:6a:01:
                    78:fd:2a:6e:75:df:93:d7:82:90:a6:cd:fc:bf:9b:
                    b8:2a:5f:07:08:ef:25:ec:0a:2b:79:c6:db:32:e6:
                    c3:85:bd:2f:bc:cd:35:ed:b2:dc:b7:d0:b1:fe:21:
                    d4:78:9e:ad:2a:2d:97:50:52:d2:68:d6:bc:32:08:
                    3d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:86:0A:4F:D7:67:6A:AE:9C:69:FD:3A:FC:D8:30:A9:94:C4:3B:EB
            X509v3 Authority Key Identifier:
                keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:23:39:8e:07:c6:79:16:88:5e:cc:c3:72:2c:10:41:07:bf:
         18:ef:f0:f1:59:de:76:87:24:d9:e2:cf:b7:3c:1c:39:12:9a:
         0f:74:7b:ba:06:26:f4:33:5e:17:b5:73:ce:40:e7:b7:3f:04:
         80:22:60:e6:e4:ca:08:bb:80:ce:18:6a:4c:31:0f:3d:bf:5d:
         c2:67:30:2f:f7:d4:6f:26:e9:e2:fd:e8:aa:05:71:32:26:b9:
         4b:4f:f6:9b:2e:64:9f:c5:48:2e:40:a4:94:ba:e3:c4:eb:e8:
         39:ba:35:9d:85:26:e7:57:ee:68:70:db:62:9d:15:dd:3c:be:
         96:ca:cd:05:82:90:3c:f4:82:d4:1f:a3:b9:78:53:06:2f:d5:
         82:4d:98:02:81:a1:51:50:82:6d:ea:5c:ed:bc:72:2f:37:a5:
         38:5f:fb:ce:c3:d5:e8:61:14:d2:80:51:ef:01:3c:88:56:69:
         6a:0a:f3:d6:b0:d2:ef:26:f0:2d:8f:51:ac:53:54:28:b5:85:
         aa:de:32:9e:db:bc:ac:58:97:32:33:bc:56:43:51:74:18:15:
         40:9e:9a:f9:0d:6d:fa:56:aa:31:fd:6e:35:48:bd:c7:a4:f1:
         3f:b3:77:41:25:43:e4:2d:75:01:70:d6:f6:de:00:04:78:08:
         36:93:78:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:18 2026 by rpki-client