Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
File:                     hTkiUckhyp9RnbkRxagKd9_jVMQ.mft (raw, json)
Hash identifier:          1yLvCVgpwS/1ofXXD8OhteRxtYK69tKGX4zR8DzswL4=
Subject key identifier:   A2:62:35:74:82:E0:C9:2F:F3:EB:7E:A3:02:F2:46:13:1F:36:90:20
Authority key identifier: 85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
Certificate issuer:       /CN=A915B358/serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
Manifest number:          6B
Signing time:             Thu 23 Jul 2026 09:59:39 +0000
Manifest this update:     Thu 23 Jul 2026 09:59:39 +0000
Manifest next update:     Thu 30 Jul 2026 09:59:39 +0000
Files and hashes:         1: hTkiUckhyp9RnbkRxagKd9_jVMQ.crl (hash: l3uOITiRhmZvBV6SHI3hNuBlKrVxijLJQ4Hc7T045sc=)
                          2: B1078FAAF1C411F0A342834F396F56BC.roa (hash: +jzkYrDbV9l56QxlBYuE37I0us4Fnv7wiflNV5QShGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl
                          rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:59:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B358, serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
        Validity
            Not Before: Jul 23 09:59:39 2026 GMT
            Not After : Jul 30 09:59:39 2026 GMT
        Subject: CN=6a61e60b-3ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d4:31:ff:55:5b:3f:83:d4:75:2b:e8:8d:3f:
                    7e:8b:29:06:46:e3:31:6a:c9:07:fe:d4:22:24:15:
                    7f:84:bf:04:7a:38:2c:1c:08:fb:ae:05:7b:9f:7b:
                    19:47:26:4c:9d:64:41:0d:b8:ec:50:6f:7f:c3:17:
                    bd:82:2e:7a:18:76:1a:6d:1f:4b:d9:64:9a:b8:39:
                    52:65:04:ec:f0:53:24:4c:53:dc:f3:d2:36:f8:22:
                    05:bf:9b:5b:62:8d:21:e7:13:e6:ae:82:90:8c:55:
                    5f:99:de:28:13:21:b8:dd:82:2c:e3:8d:06:13:21:
                    48:0c:aa:aa:88:c5:e7:73:29:69:73:a4:c4:2f:d6:
                    8a:0e:00:90:37:9b:99:dd:3d:eb:4c:0d:1d:45:62:
                    c3:e2:66:02:7d:42:fd:59:90:e5:68:e8:6e:fc:70:
                    a7:cf:aa:25:3c:96:5d:7b:74:fa:cc:fe:0d:b5:0c:
                    0f:8f:a7:a5:38:e1:f6:7e:fc:e5:a2:4f:d4:28:8f:
                    77:47:61:9e:3a:0d:9d:43:98:ff:fc:90:64:d3:da:
                    03:f5:e5:ef:b6:a8:84:6a:3a:9f:0a:24:be:ec:a3:
                    43:27:81:1c:68:0a:5c:97:34:88:17:ac:35:90:73:
                    a3:90:a5:60:93:34:0d:43:54:27:da:aa:3d:e7:1a:
                    6b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:62:35:74:82:E0:C9:2F:F3:EB:7E:A3:02:F2:46:13:1F:36:90:20
            X509v3 Authority Key Identifier:
                keyid:85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c8:6b:99:2e:75:b4:25:52:aa:a8:83:16:85:fe:c2:fb:c2:
         f0:4c:19:5c:d7:3a:1e:8f:94:b1:04:48:22:8e:61:0b:de:46:
         cc:53:f4:fe:c1:99:1b:3c:c6:d5:42:0b:9e:de:4d:48:91:b8:
         68:c4:ad:88:81:ae:56:c7:3a:11:84:a8:4f:19:93:15:9d:ab:
         5a:81:56:d0:c8:c8:99:2b:43:51:8c:69:a1:18:ea:8b:e9:c1:
         f5:0f:d9:48:44:73:a0:9b:40:40:63:90:55:b7:b0:32:56:db:
         7d:c1:47:c8:6e:7e:bc:e9:a1:3a:51:ce:37:cd:9d:4c:6a:d0:
         85:5b:f9:9c:2b:43:6a:2f:72:ad:02:0f:8b:1c:8d:45:fb:4c:
         b3:3d:1c:3d:5e:e6:44:6e:93:5b:13:62:dc:6a:40:df:5d:a4:
         70:94:fd:88:96:1e:c8:e6:92:12:74:02:ff:85:7f:d0:4e:8e:
         51:7c:4b:e0:b5:13:8a:a2:13:cc:c6:9a:79:1f:7d:9c:4f:cc:
         1c:8b:cc:c9:c0:4b:40:3d:20:9c:a8:56:10:67:00:8f:5a:2f:
         c1:04:98:fb:9d:a6:32:d7:26:81:ee:fc:3a:61:6d:35:8b:37:
         f5:09:7b:10:69:b3:ae:9e:ca:7b:6c:32:0a:dd:3f:30:79:86:
         15:86:34:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:56 2026 by rpki-client