Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
File:                     HvMMTFYEpW7LPq7n8sqX63gQUHA.mft (raw, json)
Hash identifier:          pZO0wENkcruI0TeSHmi1/Pp+h+vw3EF7DgA0rVyQN4Y=
Subject key identifier:   CB:F1:35:3B:5C:E1:77:B6:2E:56:5E:9E:9A:C8:6D:38:ED:13:5E:6A
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Certificate issuer:       /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
Manifest number:          0229
Signing time:             Thu 23 Jul 2026 04:06:08 +0000
Manifest this update:     Thu 23 Jul 2026 04:06:08 +0000
Manifest next update:     Thu 30 Jul 2026 04:06:08 +0000
Files and hashes:         1: HvMMTFYEpW7LPq7n8sqX63gQUHA.crl (hash: RCCnDnjUH8Sp9ReIO4PyoGKIFEiz6BpAP9GjfIzWLsk=)
                          2: E19EC38C532711EF9E83C841C4F9AE02.roa (hash: +rjbca/NG9q7zWTrWpjMJftRcPfM//W/HUIpnTX4nPE=)
                          3: D994A1B2500C11EE83562B60C4F9AE02.roa (hash: RQ/EfLMrrJ/X3PS3AL1VNJyNJGsjiJ0HkUJPHHuU2ZI=)
                          4: F9F53948599011EEB54F7158C4F9AE02.roa (hash: GXFMT6PzwPtBUSZwV4Os9TF+cE8bPf2hVfP0jiPGj7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
                          rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
        Validity
            Not Before: Jul 23 04:06:08 2026 GMT
            Not After : Jul 30 04:06:08 2026 GMT
        Subject: CN=6a619330-ea9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7e:ae:d5:1a:ba:c6:c7:48:af:ba:19:be:ef:
                    b2:d0:14:71:24:12:74:dc:51:0a:e9:a4:ac:79:a4:
                    97:f5:15:cd:d1:7b:39:72:f7:89:62:23:e3:bb:5f:
                    72:55:66:e2:70:d0:a4:c4:ea:e3:f7:69:63:d6:48:
                    19:9b:28:bb:54:19:dd:d8:24:10:0d:d6:6d:ea:51:
                    2b:8c:c8:43:61:17:7e:fb:ca:e4:ed:8c:5b:63:aa:
                    45:18:83:9c:0e:e9:87:72:e7:e3:1c:72:f7:64:c1:
                    ad:1b:7f:a1:11:9c:00:47:8a:ee:2f:cd:1d:3b:34:
                    b4:01:f6:c2:79:65:e2:8a:d1:db:ee:6b:7d:a1:e1:
                    dc:e7:ff:30:37:fe:9a:a2:23:1f:30:88:2c:21:9a:
                    1e:df:5f:e0:62:5d:55:af:50:81:6c:b3:8a:b5:9f:
                    2f:83:c6:ec:d7:bb:b3:aa:82:0d:d7:6f:f8:da:1c:
                    31:8a:6c:a8:31:7b:8d:f9:18:d3:0b:5f:4f:7f:50:
                    ae:de:a4:70:a7:61:bf:b4:81:24:66:5b:1c:df:8e:
                    b2:1a:7b:cc:f2:13:ac:d3:e8:32:2b:2f:cc:74:78:
                    f7:84:f7:f9:b0:cf:41:5a:a3:9d:b3:7c:34:02:f4:
                    7a:ce:67:cf:67:ba:4a:48:de:e1:96:50:69:d2:0d:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F1:35:3B:5C:E1:77:B6:2E:56:5E:9E:9A:C8:6D:38:ED:13:5E:6A
            X509v3 Authority Key Identifier:
                keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b7:52:d7:2b:f5:dc:a9:2e:62:52:e4:09:38:52:7f:96:df:
         cc:86:6b:79:2c:2e:80:70:a2:32:e7:e6:cc:b6:08:e0:5a:dc:
         12:02:50:14:51:d2:cd:46:fe:1d:2f:ae:dc:ed:79:13:40:19:
         79:f4:bc:1f:34:7a:26:09:6e:db:57:50:56:21:2e:c8:86:c2:
         bf:86:5f:9d:cf:b8:3a:94:a7:25:a9:34:57:e6:59:0e:b0:cb:
         8f:12:46:76:1a:6a:6e:f3:80:c7:7d:34:63:ce:8d:48:ff:f2:
         af:c2:d3:be:b1:f9:07:d8:6a:f8:44:3b:97:99:a7:d1:ef:28:
         39:2b:d8:20:17:56:cd:c7:39:26:97:79:c3:f8:ef:48:ce:9b:
         fe:7c:84:0a:93:88:0b:df:40:bc:53:d0:ed:eb:1e:68:f2:23:
         f0:ec:bb:09:22:aa:6d:a8:9f:34:8d:09:05:e0:25:8e:ff:50:
         63:af:7d:56:eb:89:d2:b3:4c:f7:e6:91:4f:8a:e4:c8:cf:d3:
         2a:7b:55:21:1b:80:e3:81:fe:3c:52:32:b1:a7:e8:21:bc:69:
         73:70:bc:0e:73:48:1d:5d:9b:22:fc:2b:b8:d2:5c:32:f0:f8:
         6f:52:17:5a:fd:fb:f9:8b:ad:bf:f5:97:23:88:53:c8:34:31:
         50:7b:13:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:26:36 2026 by rpki-client