Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
File:                     hNqJJ83vUDOW9ScgGU65MSCdPzo.mft (raw, json)
Hash identifier:          HfE4IC08nWwNjeEDCB7eAluRw/nYrncFcc1C7AVnSUc=
Subject key identifier:   F2:62:7F:22:AA:E3:38:4F:08:5F:13:DE:60:AD:3D:ED:AC:E6:5E:70
Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A
Certificate issuer:       /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
Certificate serial:       03F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
Manifest number:          03DD
Signing time:             Thu 23 Jul 2026 01:26:55 +0000
Manifest this update:     Thu 23 Jul 2026 01:26:55 +0000
Manifest next update:     Thu 30 Jul 2026 01:26:55 +0000
Files and hashes:         1: hNqJJ83vUDOW9ScgGU65MSCdPzo.crl (hash: oeQt/D9CptJB66/69oOn3xF3BWjq41VD6KMCSYttBVg=)
                          2: 00F0B7EEA87411EF88F5C638C4F9AE02.roa (hash: elymg/oKLo36bQB76f3/BjLy1dUOOeqORBslgCNGm4w=)
                          3: 3EABAF20D8E311EC8F274181C4F9AE02.roa (hash: PpySkmXHDFAMdn8q7qJMbkbAjwFyZ6Dte8VkGbnBdUI=)
                          4: 6910E952A86A11EF89DA976DC4F9AE02.roa (hash: VgHpUmv5XapUWkoHMwq6CHIEaAxNeoc/taSmWAxGkC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl
                          rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F051, serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
        Validity
            Not Before: Jul 23 01:26:55 2026 GMT
            Not After : Jul 30 01:26:55 2026 GMT
        Subject: CN=6a616ddf-f1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:54:d0:cc:9f:86:a9:bc:4a:00:6d:9d:54:
                    62:43:79:8e:d3:06:6e:d9:11:e9:14:32:ce:a0:e5:
                    1a:5c:30:2d:a8:a5:71:ff:ac:75:7f:72:b2:84:41:
                    db:50:53:4c:45:5e:42:32:cb:23:e7:db:de:e3:f9:
                    a1:7b:a2:1e:bb:67:47:5b:43:6d:cd:d4:e7:5c:b6:
                    e9:c9:2f:e5:b3:11:0d:48:1c:19:7e:84:30:cf:03:
                    6e:f7:6f:a5:b9:72:bf:ec:a7:7a:86:c0:b3:2a:70:
                    b5:1a:68:96:8e:99:41:3b:bb:e5:74:1b:af:d9:e7:
                    eb:9a:8a:9e:4f:7d:c5:1d:ff:42:0c:c8:59:f3:1b:
                    3f:c8:86:3b:f3:28:dc:c2:40:d9:4a:78:41:31:3e:
                    35:00:73:18:f5:0c:ea:1d:52:0e:63:1f:c1:24:63:
                    dd:d3:6a:e8:21:df:8f:9e:4f:44:66:5d:7e:1e:0f:
                    f8:b4:4d:82:61:b6:5b:8c:ed:3d:35:09:de:07:71:
                    89:16:37:30:de:93:57:20:6c:e6:f1:77:b7:90:8e:
                    8d:7a:30:a2:bd:95:2b:17:c0:d6:5f:b6:30:01:27:
                    ed:54:e3:88:5a:c9:45:18:d0:12:12:4e:1a:ee:eb:
                    5f:7f:c9:c3:5a:21:f4:af:da:a8:0a:60:c6:da:cf:
                    90:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:62:7F:22:AA:E3:38:4F:08:5F:13:DE:60:AD:3D:ED:AC:E6:5E:70
            X509v3 Authority Key Identifier:
                keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:df:23:d8:e7:51:0e:9b:73:ec:fd:0f:65:b3:8c:53:a4:90:
         29:b8:7d:f4:e6:69:87:a3:5c:c2:12:36:24:47:b0:38:24:45:
         34:02:0d:c1:85:f5:98:80:8e:60:9e:35:aa:ff:81:cc:3f:ac:
         6e:1f:de:83:84:f1:49:74:29:44:b7:36:6a:61:f1:97:45:3f:
         a5:02:e3:3f:03:75:11:72:da:1d:7f:fd:1b:b1:e9:10:19:eb:
         5f:15:47:44:9f:c6:28:a2:87:48:1c:b3:3e:dd:56:0b:ec:fe:
         8d:78:d0:ac:2c:92:3a:84:af:ae:a8:5b:1d:95:fc:25:a3:97:
         b9:7f:e0:97:8b:af:0d:ad:8a:8e:a5:16:c8:6f:a9:df:48:8d:
         b8:98:e6:24:00:70:3a:d1:5b:93:b3:d0:66:e5:a8:87:ee:cf:
         78:af:9d:41:ab:09:0a:1a:ab:1b:a2:94:8f:ec:3f:f2:c6:88:
         94:12:f7:fe:a8:74:ff:6b:f6:a5:bc:0b:c2:fc:dc:53:22:bf:
         df:95:d8:72:36:86:16:53:a9:14:cb:55:53:bc:2d:27:a9:91:
         f3:76:b2:37:86:28:a7:fe:8b:ad:15:07:84:1e:1d:ff:52:ca:
         4f:78:e1:3b:58:27:b2:d8:cd:83:14:be:c1:19:dc:b7:7f:90:
         9a:18:3a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:32 2026 by rpki-client