Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
File:                     HSpVFaipmzCyHRhxvPr9J-saEyo.mft (raw, json)
Hash identifier:          U04eb0L8BHHeqIftsmv4mrEjfs8rUoIhC27ifkePk3s=
Subject key identifier:   D2:CF:29:6B:F1:D4:A4:24:25:09:74:51:6F:EA:B7:E6:9F:FA:F3:B0
Authority key identifier: 1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A
Certificate issuer:       /CN=A9185B30/serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
Certificate serial:       0337
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
Manifest number:          0331
Signing time:             Thu 23 Jul 2026 02:01:18 +0000
Manifest this update:     Thu 23 Jul 2026 02:01:17 +0000
Manifest next update:     Thu 30 Jul 2026 02:01:17 +0000
Files and hashes:         1: HSpVFaipmzCyHRhxvPr9J-saEyo.crl (hash: Itlj8UmlfrSQKNC+4mGY8AAtjcHpNPEDSON+NGluS80=)
                          2: D6E7D65C192E11ED927BF512C4F9AE02.roa (hash: DVr0amxAWZgoxiAH+g9huvxmF7FumJsE61KGOjDJl5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl
                          rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B30, serialNumber=1D2A5515A8A99B30B21D1871BCFAFD27EB1A132A
        Validity
            Not Before: Jul 23 02:01:17 2026 GMT
            Not After : Jul 30 02:01:17 2026 GMT
        Subject: CN=6a6175ee-da07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:ec:c2:fd:f8:2b:60:6d:08:5a:2a:ef:9c:
                    e1:2d:c4:43:97:20:8a:74:db:73:47:cb:50:39:99:
                    10:7b:0b:e9:19:33:11:a8:00:0d:8e:82:28:c5:50:
                    87:06:8f:dc:b1:11:13:f1:e6:ee:1d:b8:13:47:36:
                    11:03:da:f8:7a:d9:d0:25:5e:c6:66:2a:d9:a0:e8:
                    aa:92:1b:ed:aa:2b:e8:bd:4b:3b:29:1e:7d:b5:79:
                    1e:b0:9c:92:c1:47:c9:71:18:b0:bc:a2:49:8c:22:
                    9d:36:2a:6a:03:eb:54:94:e2:88:80:9a:d1:1a:ae:
                    1d:c9:fb:69:58:be:7b:25:78:99:3e:05:7f:93:bb:
                    fe:a2:d6:ce:9c:74:9c:39:61:20:fa:aa:f5:f3:fc:
                    c1:2a:16:13:00:cc:6f:ca:3a:6d:b3:ef:17:8d:cd:
                    3f:9b:ad:e8:76:e8:d0:b4:18:23:4b:8c:a7:93:2f:
                    e5:95:33:ee:f9:bc:0b:72:85:8b:36:7b:ce:9c:92:
                    ac:e0:1e:84:ea:03:ab:54:06:a3:3a:ec:8d:1d:ef:
                    9d:cf:d5:ef:a5:d0:f0:9e:55:ca:56:e2:e8:24:51:
                    1c:8d:8b:99:7d:e0:09:9f:1b:0c:81:1c:aa:69:ff:
                    ab:23:05:9e:77:8d:fd:f8:78:59:2d:ae:32:94:d9:
                    83:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CF:29:6B:F1:D4:A4:24:25:09:74:51:6F:EA:B7:E6:9F:FA:F3:B0
            X509v3 Authority Key Identifier:
                keyid:1D:2A:55:15:A8:A9:9B:30:B2:1D:18:71:BC:FA:FD:27:EB:1A:13:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HSpVFaipmzCyHRhxvPr9J-saEyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B30/8977C674192A11ED815FA35FC4F9AE02/HSpVFaipmzCyHRhxvPr9J-saEyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:29:85:4f:6a:87:2e:c9:f5:c7:22:09:22:10:bd:55:91:a3:
         82:78:3b:34:d9:9d:72:72:d6:ff:77:9a:b5:f6:c5:ce:31:73:
         2a:3c:8d:60:26:63:64:87:1e:68:10:31:2e:61:a0:da:ba:b0:
         93:32:89:81:83:a4:1b:95:46:a1:b6:11:76:89:8b:d5:21:ab:
         84:f9:b8:92:b5:b1:a3:b2:04:d5:47:c4:d6:4a:b8:07:1f:73:
         22:e2:f4:1a:80:7a:0f:b3:55:0b:ac:63:63:74:8a:79:62:aa:
         67:da:f4:e9:a6:d4:d3:8f:4f:bc:b7:31:af:4b:f5:a7:33:62:
         a4:b4:b6:e3:a3:dd:28:7f:68:df:4f:9e:04:22:55:b7:1b:a1:
         40:23:50:70:65:ce:ca:6f:95:ca:09:2e:a4:9b:59:2e:73:5e:
         69:cb:7c:4c:65:45:10:ef:29:d0:a2:34:56:fc:d1:c8:81:1a:
         44:f6:77:ac:7e:55:f5:94:50:d4:84:bb:9b:6c:28:06:d5:4c:
         fd:dc:64:8d:66:3f:f9:50:57:37:36:db:78:65:12:61:50:dc:
         9d:b2:18:ab:d0:5b:c2:5e:25:cf:ce:ce:be:f7:93:9c:09:54:
         6a:3b:21:6d:fd:cc:77:4b:c2:5c:bf:9b:17:11:98:42:07:1e:
         df:46:01:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVCMzAxMTAvBgNVBAUTKDFEMkE1NTE1QThBOTlCMzBCMjFEMTg3MUJDRkFGRDI3
RUIxQTEzMkEwHhcNMjYwNzIzMDIwMTE3WhcNMjYwNzMwMDIwMTE3WjAYMRYwFAYD
VQQDEw02YTYxNzVlZS1kYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtj3swv34K2BtCFoq75zhLcRDlyCKdNtzR8tQOZkQewvpGTMRqAANjoIoxVCH
Bo/csRET8ebuHbgTRzYRA9r4etnQJV7GZirZoOiqkhvtqivovUs7KR59tXkesJyS
wUfJcRiwvKJJjCKdNipqA+tUlOKIgJrRGq4dyftpWL57JXiZPgV/k7v+otbOnHSc
OWEg+qr18/zBKhYTAMxvyjpts+8Xjc0/m63odujQtBgjS4ynky/llTPu+bwLcoWL
NnvOnJKs4B6E6gOrVAajOuyNHe+dz9XvpdDwnlXKVuLoJFEcjYuZfeAJnxsMgRyq
af+rIwWed439+HhZLa4ylNmD0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNLPKWvx
1KQkJQl0UW/qt+af+vOwMB8GA1UdIwQYMBaAFB0qVRWoqZswsh0Ycbz6/SfrGhMq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUIzMC84OTc3QzY3NDE5
MkExMUVEODE1RkEzNUZDNEY5QUUwMi9IU3BWRmFpcG16Q3lIUmh4dlByOUotc2FF
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hTcFZGYWlwbXpDeUhSaHh2UHI5Si1zYUV5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUIzMC84OTc3QzY3NDE5MkExMUVEODE1RkEzNUZDNEY5QUUwMi9IU3BWRmFpcG16
Q3lIUmh4dlByOUotc2FFeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlSmFT2qHLsn1xyIJIhC9VZGjgng7NNmdcnLW/3eatfbFzjFzKjyNYCZjZIce
aBAxLmGg2rqwkzKJgYOkG5VGobYRdomL1SGrhPm4krWxo7IE1UfE1kq4Bx9zIuL0
GoB6D7NVC6xjY3SKeWKqZ9r06abU049PvLcxr0v1pzNipLS246PdKH9o30+eBCJV
txuhQCNQcGXOym+VygkupJtZLnNeact8TGVFEO8p0KI0VvzRyIEaRPZ3rH5V9ZRQ
1IS7m2woBtVM/dxkjWY/+VBXNzbbeGUSYVDcnbIYq9Bbwl4lz87OvveTnAlUajsh
bf3Md0vCXL+bFxGYQgce30YBKA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:44:23 2026 by rpki-client