Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft
File:                     hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft (raw, json)
Hash identifier:          n5jciGTNi/l2Ab+xg69z/PsPqdBDhxA+dWnkILiUQpw=
Subject key identifier:   4F:3E:BE:35:75:8C:55:33:1C:6B:D4:83:E0:9C:4E:B7:CF:31:FA:46
Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4
Certificate issuer:       /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4
Certificate serial:       1B02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft
Manifest number:          1AF6
Signing time:             Wed 22 Jul 2026 16:22:55 +0000
Manifest this update:     Wed 22 Jul 2026 16:22:55 +0000
Manifest next update:     Wed 29 Jul 2026 16:22:55 +0000
Files and hashes:         1: hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl (hash: 9zZW1UVUPFEbsxFXJeETBea2OLDromdjbfzxbm0YFzQ=)
                          2: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (hash: nM/cR32Kk8Z50H56cLn2XFpHm3KmnpYu/XbItfnfxPM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl
                          rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6914 (0x1b02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4
        Validity
            Not Before: Jul 22 16:22:55 2026 GMT
            Not After : Jul 29 16:22:55 2026 GMT
        Subject: CN=6a60ee5f-1dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:42:23:be:8f:5e:99:9b:02:f7:9b:9b:a7:18:
                    65:e3:6d:34:a7:f5:26:11:1f:01:ab:7e:01:83:48:
                    51:ee:9b:c2:bb:f9:f4:50:10:ea:26:8d:6f:b1:20:
                    cf:99:88:4e:68:09:0e:b9:c8:d9:d9:37:cf:58:54:
                    0c:6f:ce:1b:23:db:d6:c4:ba:dc:68:65:be:eb:3c:
                    f2:f5:ed:2e:fc:23:75:5d:2a:10:13:43:b1:fc:5e:
                    47:20:6b:35:29:85:c4:08:63:36:05:e5:8a:5e:71:
                    02:47:f7:ba:1c:8f:73:83:79:66:de:d2:e7:02:06:
                    08:1b:e1:97:df:8d:16:09:c6:03:15:7f:d0:88:d3:
                    eb:27:03:21:51:6c:6a:55:6d:02:04:2d:ec:62:6b:
                    e9:2c:3d:f9:7e:14:19:91:34:8c:08:b1:3e:71:89:
                    2a:05:e1:90:ea:6e:c1:92:a5:95:ec:2e:a4:6a:d2:
                    59:c3:98:41:04:b1:c2:97:38:33:05:06:d4:c3:56:
                    79:bb:be:e9:86:1c:76:b0:27:e3:32:7e:c8:02:f6:
                    06:4e:37:51:76:19:05:e1:2c:dd:ae:60:a8:a3:be:
                    e8:95:4c:db:59:c8:c4:25:2b:57:a9:8c:56:0f:76:
                    2f:95:24:55:1b:a2:90:05:6f:04:ee:9a:e6:e4:10:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3E:BE:35:75:8C:55:33:1C:6B:D4:83:E0:9C:4E:B7:CF:31:FA:46
            X509v3 Authority Key Identifier:
                keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:db:20:bf:21:17:e5:c9:78:b5:c5:87:17:3c:7d:c0:11:
         1d:11:5e:40:72:a0:12:7f:7e:3f:38:89:ae:78:7d:35:62:df:
         c4:d7:9a:2a:60:54:e6:06:e0:86:f5:7b:82:da:ad:78:f4:54:
         7c:91:10:a9:81:b9:35:72:b7:72:7e:54:a7:fb:24:8c:43:4f:
         b9:02:c7:03:3c:cd:87:3f:e8:1a:b3:6e:a1:a6:98:6e:a2:ac:
         9b:77:43:9d:46:a4:a9:a2:c4:29:ca:d0:74:bc:84:ac:03:c3:
         7c:c8:15:a0:23:bb:53:cc:cb:22:06:6f:97:2e:d5:f8:b6:b8:
         c7:a7:06:10:e2:47:ee:52:45:b3:31:b2:40:01:39:ac:6b:88:
         41:fa:d0:9a:0f:28:9e:9d:2e:fe:7d:5e:17:4b:ae:69:93:53:
         28:b5:14:da:78:ae:c5:aa:cd:c1:e9:48:57:ff:9a:af:26:58:
         03:5b:fd:5e:4d:95:37:f4:1c:1a:dc:5e:7e:01:b9:5b:6d:e7:
         5c:5c:9a:31:d5:7e:f0:d8:73:bf:2a:1e:17:06:32:ca:2b:2b:
         13:9b:73:c1:6c:6d:f0:89:61:73:30:8c:6f:d5:23:57:87:22:
         72:f3:4e:a6:96:7b:d8:14:87:56:a4:a0:61:27:04:1e:14:fc:
         6b:5b:04:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:05 2026 by rpki-client