Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
File:                     h-gMDkYzEKnTA4zgE88YU3SlxyI.mft (raw, json)
Hash identifier:          eK7EjuDtbc6H8/6100kHWPMTwevpvufs00jZFnjAUE0=
Subject key identifier:   58:47:6C:28:73:55:74:CD:2E:C6:C8:BB:E6:57:C8:9F:F1:E7:DF:BD
Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
Certificate issuer:       /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Certificate serial:       06BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
Manifest number:          06AB
Signing time:             Wed 22 Jul 2026 23:08:20 +0000
Manifest this update:     Wed 22 Jul 2026 23:08:20 +0000
Manifest next update:     Wed 29 Jul 2026 23:08:20 +0000
Files and hashes:         1: h-gMDkYzEKnTA4zgE88YU3SlxyI.crl (hash: W/xDeLeeSQ21KIgmi9vsvXixL4vJ4jZ8d7gnslI/RvA=)
                          2: C850F3BA89A511EEB6692E43C4F9AE02.roa (hash: 9/omkIpCPqIeBe3uMYLBYEVI2CH4WNDcld2XzAT23Mc=)
                          3: C49CE482BEA411EB85828650C4F9AE02.roa (hash: YRVF06vQab+9NFZ7dGOQFnvASdYRW+VxNdESL/wwkLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
                          rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1723 (0x6bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918524B, serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
        Validity
            Not Before: Jul 22 23:08:20 2026 GMT
            Not After : Jul 29 23:08:20 2026 GMT
        Subject: CN=6a614d64-52da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:81:7f:28:d2:71:55:f0:00:09:e4:2b:89:
                    a1:51:77:3c:7b:20:1f:3d:4e:2b:7a:29:a5:db:b9:
                    24:42:ce:ac:1c:52:fb:50:88:59:60:7c:ca:2a:b9:
                    44:f1:2e:06:1b:c1:0e:03:56:9c:ad:ff:d2:bd:34:
                    f3:a0:ef:0e:fc:b8:7e:67:97:9d:1a:d4:30:74:9f:
                    9a:2e:d7:69:62:64:ad:b1:30:a6:c4:2e:b4:8d:7b:
                    64:9b:11:05:76:40:97:7c:44:69:a3:b5:2a:65:ee:
                    6f:82:0c:98:d8:78:9a:8c:27:22:1f:92:1d:5b:92:
                    e7:6e:d0:da:ee:b8:23:33:73:d2:67:db:13:fc:5d:
                    b0:4d:8a:cd:fc:f5:2b:90:46:c0:8b:2b:90:b5:2a:
                    76:59:ce:f4:e8:dc:99:85:14:30:04:3a:50:de:2f:
                    47:7f:f8:2c:18:8a:d7:ab:61:64:d0:2f:66:82:22:
                    01:7b:ab:60:11:2f:0f:51:3b:69:a3:08:e0:52:c0:
                    50:f1:5c:9f:49:2d:5c:eb:9f:98:9e:80:ca:5a:08:
                    f1:9b:83:c7:f6:dc:94:6d:53:05:58:84:b4:d5:c0:
                    37:3c:d0:64:19:2f:a1:bb:6c:2c:f4:eb:7d:f6:28:
                    11:1d:87:b9:72:41:25:54:fe:6a:35:fe:99:84:85:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:47:6C:28:73:55:74:CD:2E:C6:C8:BB:E6:57:C8:9F:F1:E7:DF:BD
            X509v3 Authority Key Identifier:
                keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a1:19:74:d5:33:24:11:a7:34:bd:5c:84:cc:e7:be:73:c3:
         da:4d:27:e0:04:e0:6b:db:f2:8c:7b:26:11:e1:de:0f:33:6a:
         2f:f2:dd:27:52:e1:68:97:ba:f0:25:a3:eb:2f:17:8d:87:80:
         63:5c:2e:68:35:98:98:cd:2e:f0:aa:2c:82:bb:2b:5f:ac:31:
         58:5f:be:43:8c:ff:0e:ea:d6:a1:d2:da:6b:c6:9c:63:58:34:
         54:70:05:87:ed:17:0d:4c:3e:1b:4e:d2:b5:cc:72:02:1e:74:
         29:f3:e0:11:e4:78:07:1f:54:a8:0f:d8:fb:13:f8:6a:6d:53:
         8e:2b:a0:66:9f:17:7e:11:e7:6c:0a:ca:0d:41:cb:93:2f:f7:
         8e:32:dc:90:88:59:ff:ff:26:a3:c3:a4:e7:2e:96:7b:65:fb:
         8e:f1:d0:c6:80:ba:33:59:81:2a:fd:9c:8f:35:5f:93:a4:de:
         04:6b:c3:8e:ae:79:c3:ce:42:da:1f:bd:6e:89:3a:eb:59:34:
         c7:6c:24:cc:0c:a8:d3:a7:1a:a9:92:13:a1:be:65:db:38:f1:
         18:03:68:37:74:0f:0d:0a:7f:1d:7d:d1:1c:d1:45:89:24:90:
         9b:d0:6d:a4:74:dc:1a:18:4f:c4:5d:0c:db:98:76:3d:ed:95:
         dd:95:e7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:59:52 2026 by rpki-client