Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
File:                     HjKemPZ2kum1dgI6L7xVfVfdVWw.mft (raw, json)
Hash identifier:          +VEsMyznhZErh1Us2VYAWm1L/++3UaH1Zz3V/WM6qEA=
Subject key identifier:   31:18:24:D5:35:1E:5F:5C:A4:56:42:69:6E:F6:C2:DA:5C:35:CB:ED
Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
Certificate issuer:       /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Certificate serial:       0E96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
Manifest number:          0E50
Signing time:             Wed 22 Jul 2026 17:59:05 +0000
Manifest this update:     Wed 22 Jul 2026 17:59:04 +0000
Manifest next update:     Wed 29 Jul 2026 17:59:04 +0000
Files and hashes:         1: HjKemPZ2kum1dgI6L7xVfVfdVWw.crl (hash: Rj/FRsr7mz/NGmIdVAHFCKcz+av+nQthw47174hXvQY=)
                          2: FD120CC2D94411EDA95E3613C4F9AE02.roa (hash: I6uNdzqOJkpVqoIsCJtM/LW7p85XLPeVISRh21FNOaE=)
                          3: D0551B50046411F09760073DC4F9AE02.roa (hash: JF98zUiYfD63waJbzjs77cTdpfkwhQ0ndKwrtYlw7VI=)
                          4: 8F7DDD8889B811EE9E7ABE26C4F9AE02.roa (hash: 2cFCTlNDIlFSidle/7a/SIVrcL9hkecXR8zTHPDN7pw=)
                          5: 87BB6D70822711ED94C3212CC4F9AE02.roa (hash: NM4ahWOPO+ilsHy5HGWnTut3f/HXCR5WoP1fo7WCekM=)
                          6: F2826A504FCF11EB88444467C4F9AE02.roa (hash: mfbNnHkGQfEzmbx5mnkWRdxSzdOXfwYbg2Dz8Uggeow=)
                          7: 50063EE8822A11EDB2081A49C4F9AE02.roa (hash: 8EN8240RkeXll20v+ZKEM2l0H0r1O4pLdIwi1aSMet0=)
                          8: 79B042BAF3BD11EE961D7A7AC4F9AE02.roa (hash: SKc7rTK6TrshCb8g4KIsNcbpMMrJrhQX8+vln7hiYKM=)
                          9: 4EF1DE0E822A11EDB2081A49C4F9AE02.roa (hash: zgSxrM3JDm57m2vX62mOv6kyES6AEYoM+0Yal9gdLNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
                          rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3734 (0xe96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
        Validity
            Not Before: Jul 22 17:59:04 2026 GMT
            Not After : Jul 29 17:59:04 2026 GMT
        Subject: CN=6a6104e9-091f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:7a:f6:bd:bd:ca:3b:27:63:dd:89:c9:6b:
                    1d:96:9c:7d:d9:2e:03:a8:98:4e:fa:36:1c:d1:c6:
                    5f:eb:2f:aa:b5:91:c7:c5:1a:8f:af:ef:b6:9f:ad:
                    63:19:a9:77:9d:e4:60:ad:50:28:af:e5:aa:ab:cd:
                    3b:a6:90:50:f3:98:5b:15:c8:d0:72:7f:26:c7:fe:
                    da:13:53:0f:8d:f9:f5:ba:8e:d1:83:6f:62:4f:62:
                    93:fb:7f:8e:69:ef:0f:49:dc:d5:69:89:84:c6:0d:
                    9b:85:c1:c7:81:0e:2a:54:dc:b2:6a:a3:ca:7d:3e:
                    26:a4:72:f3:0c:96:b3:f2:4f:df:8e:e0:c4:8c:4d:
                    17:26:da:60:99:46:33:60:d6:cb:98:67:32:f1:eb:
                    41:7a:1b:61:54:2c:70:23:61:d0:5a:81:18:e7:ad:
                    1e:4e:50:59:c4:ef:92:4e:0f:20:2e:10:3a:07:44:
                    d3:dd:a6:04:d2:57:b8:71:b0:99:c5:78:bb:26:f4:
                    c9:aa:74:62:1f:3e:dc:82:fb:a5:a5:ef:f7:bb:68:
                    02:76:cd:76:7b:31:f3:e9:5d:42:d3:55:08:9f:05:
                    05:0f:1a:d0:a0:a3:66:2c:09:39:52:73:c7:82:63:
                    0b:81:8e:1e:95:1f:ca:10:74:26:b4:12:a9:57:32:
                    c2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:18:24:D5:35:1E:5F:5C:A4:56:42:69:6E:F6:C2:DA:5C:35:CB:ED
            X509v3 Authority Key Identifier:
                keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:8a:45:3b:71:79:53:3e:16:51:5c:02:00:c9:1d:33:1e:25:
         4e:f6:02:35:1b:30:96:15:17:7f:74:c6:71:94:6b:83:ac:ba:
         44:8b:89:c5:65:07:7b:1b:9f:61:da:df:d7:64:ed:e9:66:8b:
         6a:10:51:43:84:53:24:eb:e0:8b:6f:3f:a9:e5:4c:a3:e8:33:
         f6:c5:f4:bb:5c:26:19:c9:1f:ec:46:29:24:cc:d0:3e:a0:70:
         c2:56:a0:b5:ed:1b:8f:15:3a:b1:3d:84:7f:b6:ff:0b:b3:5a:
         4b:f3:4e:fb:6a:ef:d6:fa:b0:46:ee:95:84:e9:15:78:dd:40:
         b9:f2:3e:25:d1:c2:8c:0b:d4:ce:7a:78:eb:ed:4f:de:ec:65:
         65:c7:12:d4:73:02:bb:c5:d4:78:62:84:db:28:6a:2f:87:d1:
         14:a6:ec:26:91:02:32:80:a5:e3:c0:41:b7:4f:80:5b:6f:13:
         c5:0f:a3:30:20:59:9d:76:0e:7d:76:f6:fb:3b:7d:50:95:0f:
         76:ca:61:f1:b9:31:db:5a:82:b4:9b:77:fb:d5:1b:af:61:5a:
         05:c9:8a:0a:2f:cc:19:b3:19:06:7c:8e:28:a8:a6:55:b7:c9:
         fb:dc:da:36:c5:4c:e2:c7:23:61:cc:56:de:8c:fa:cf:39:27:
         13:50:d2:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE
NTdERDU1NkMwHhcNMjYwNzIyMTc1OTA0WhcNMjYwNzI5MTc1OTA0WjAYMRYwFAYD
VQQDEw02YTYxMDRlOS0wOTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4969r29yjsnY92JyWsdlpx92S4DqJhO+jYc0cZf6y+qtZHHxRqPr++2n61j
Gal3neRgrVAor+Wqq807ppBQ85hbFcjQcn8mx/7aE1MPjfn1uo7Rg29iT2KT+3+O
ae8PSdzVaYmExg2bhcHHgQ4qVNyyaqPKfT4mpHLzDJaz8k/fjuDEjE0XJtpgmUYz
YNbLmGcy8etBehthVCxwI2HQWoEY560eTlBZxO+STg8gLhA6B0TT3aYE0le4cbCZ
xXi7JvTJqnRiHz7cgvulpe/3u2gCds12ezHz6V1C01UInwUFDxrQoKNmLAk5UnPH
gmMLgY4elR/KEHQmtBKpVzLC1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDEYJNU1
Hl9cpFZCaW72wtpcNcvtMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF
MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW
V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjhGNi8zN0QwM0RGNkNFMjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1
bTFkZ0k2TDd4VmZWZmRWV3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbIpFO3F5Uz4WUVwCAMkdMx4lTvYCNRswlhUXf3TGcZRrg6y6RIuJxWUHexuf
Ydrf12Tt6WaLahBRQ4RTJOvgi28/qeVMo+gz9sX0u1wmGckf7EYpJMzQPqBwwlag
te0bjxU6sT2Ef7b/C7NaS/NO+2rv1vqwRu6VhOkVeN1AufI+JdHCjAvUznp46+1P
3uxlZccS1HMCu8XUeGKE2yhqL4fRFKbsJpECMoCl48BBt0+AW28TxQ+jMCBZnXYO
fXb2+zt9UJUPdsph8bkx21qCtJt3+9Ubr2FaBcmKCi/MGbMZBnyOKKimVbfJ+9za
NsVM4scjYcxW3oz6zzknE1DSfw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:30 2026 by rpki-client