Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
File:                     HN4SRMu7llQubIsJo9rBwbRDaNc.mft (raw, json)
Hash identifier:          +YtGL9P1G573OSO8+akb9+PZj81ywtBByBZ5VoM7GnE=
Subject key identifier:   79:54:8D:43:7A:51:E7:18:BE:58:E5:AC:E1:44:C2:91:54:39:E9:57
Authority key identifier: 1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
Certificate issuer:       /CN=A918A498/serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
Manifest number:          0104
Signing time:             Thu 23 Jul 2026 07:49:48 +0000
Manifest this update:     Thu 23 Jul 2026 07:49:47 +0000
Manifest next update:     Thu 30 Jul 2026 07:49:47 +0000
Files and hashes:         1: HN4SRMu7llQubIsJo9rBwbRDaNc.crl (hash: WEdaxL6pjdajLKY4FdjuCa17/8s9+pfRf7oPhmt52Ps=)
                          2: 62C86698F80A11EFA400AC2FC4F9AE02.roa (hash: U4LLMJ0m7hitnKHAojnOcr6u6PFK2WR9WUoRdlPrdFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl
                          rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A498, serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
        Validity
            Not Before: Jul 23 07:49:47 2026 GMT
            Not After : Jul 30 07:49:47 2026 GMT
        Subject: CN=6a61c79c-dd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:db:42:a6:17:72:df:df:b6:94:14:4c:c3:3b:
                    9f:99:c2:c8:66:9c:8b:4d:dd:1e:e8:b7:11:e4:71:
                    70:77:d5:9e:7f:cc:ef:bf:c0:a2:21:d4:47:6a:cd:
                    52:f8:ef:a7:6a:bc:d5:f8:da:1a:c1:9d:a1:5d:64:
                    93:c8:5e:77:f6:2b:65:42:d9:3e:b2:fe:3e:44:54:
                    1d:69:6e:77:7f:c7:f1:d5:ab:f7:a8:06:ba:38:51:
                    a9:c8:c3:05:ef:c7:7f:47:43:be:c1:e7:97:11:f9:
                    a6:92:66:17:fe:98:52:0f:15:69:58:3d:d7:a3:09:
                    85:20:36:e2:ab:9a:8a:db:46:6c:3e:11:f5:88:ee:
                    57:c7:54:e4:c1:24:f9:bb:e1:30:f4:d9:a9:fc:94:
                    ba:28:58:79:1a:1e:ef:be:a8:1e:2a:36:4a:09:15:
                    94:c0:13:f9:e2:bb:52:c9:34:5d:69:89:35:3a:b9:
                    b0:5c:e8:59:69:0d:af:c5:ce:a2:8d:c9:9b:58:04:
                    8f:44:f5:91:e2:4c:40:8c:4f:28:f6:7a:55:b4:c2:
                    cc:00:65:0d:15:d1:ba:12:90:b5:77:48:bd:4f:db:
                    b6:97:b6:2d:8b:41:ee:fc:6e:d4:60:85:c9:cc:52:
                    02:7a:b7:b3:c7:e0:bf:d6:77:fa:67:64:f6:e4:cb:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:54:8D:43:7A:51:E7:18:BE:58:E5:AC:E1:44:C2:91:54:39:E9:57
            X509v3 Authority Key Identifier:
                keyid:1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:44:d0:30:1c:3e:eb:58:df:20:2c:27:a9:2c:e2:fe:75:ff:
         6b:9f:41:70:aa:66:8f:78:22:2d:d3:06:e7:80:c4:fc:38:4e:
         41:4b:24:f3:f7:b2:65:7b:95:fc:1d:59:ea:7e:ce:3f:a3:2a:
         34:b7:43:bf:c7:24:ff:0f:83:eb:8c:a6:fc:68:ea:be:ac:67:
         6c:cb:68:4d:52:4c:9f:4e:66:fa:4f:0c:ca:86:ac:a3:2c:74:
         4d:d0:aa:58:9e:1a:c3:b9:17:26:f9:d0:3d:57:7d:5f:fd:2b:
         18:db:e7:d9:82:c8:55:ea:28:e2:4d:d6:ec:bf:7d:29:5a:6c:
         c0:80:d4:55:90:a8:13:d1:bd:04:c5:59:39:43:3d:23:37:c2:
         e9:d2:b6:4b:a2:44:d2:94:e9:23:2c:24:60:40:c7:b4:94:17:
         81:1c:33:b8:4d:c5:d3:7b:b8:da:b3:64:98:c3:b2:d9:6f:e9:
         38:81:c2:ca:4c:6f:d8:4f:fe:95:79:cb:60:59:27:84:38:cc:
         94:64:97:8f:d7:c9:6d:df:c5:63:96:81:1a:04:e4:fb:79:89:
         97:e9:2d:66:d9:ed:4f:19:ec:f7:1b:ed:d1:57:05:d0:8f:a3:
         81:58:ac:66:d4:08:96:8b:62:c1:1c:a2:28:60:42:86:85:de:
         e7:a6:46:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE0OTgxMTAvBgNVBAUTKDFDREUxMjQ0Q0JCQjk2NTQyRTZDOEIwOUEzREFDMUMx
QjQ0MzY4RDcwHhcNMjYwNzIzMDc0OTQ3WhcNMjYwNzMwMDc0OTQ3WjAYMRYwFAYD
VQQDEw02YTYxYzc5Yy1kZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoNtCphdy39+2lBRMwzufmcLIZpyLTd0e6LcR5HFwd9Wef8zvv8CiIdRHas1S
+O+narzV+NoawZ2hXWSTyF539itlQtk+sv4+RFQdaW53f8fx1av3qAa6OFGpyMMF
78d/R0O+weeXEfmmkmYX/phSDxVpWD3XowmFIDbiq5qK20ZsPhH1iO5Xx1TkwST5
u+Ew9Nmp/JS6KFh5Gh7vvqgeKjZKCRWUwBP54rtSyTRdaYk1OrmwXOhZaQ2vxc6i
jcmbWASPRPWR4kxAjE8o9npVtMLMAGUNFdG6EpC1d0i9T9u2l7Yti0Hu/G7UYIXJ
zFICerezx+C/1nf6Z2T25Ms3MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlUjUN6
UecYvljlrOFEwpFUOelXMB8GA1UdIwQYMBaAFBzeEkTLu5ZULmyLCaPawcG0Q2jX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTQ5OC9EMkRFRDM0NkY4
MDkxMUVGQTUyODFCMTZDNEY5QUUwMi9ITjRTUk11N2xsUXViSXNKbzlyQndiUkRh
TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hONFNSTXU3bGxRdWJJc0pvOXJCd2JSRGFOYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTQ5OC9EMkRFRDM0NkY4MDkxMUVGQTUyODFCMTZDNEY5QUUwMi9ITjRTUk11N2xs
UXViSXNKbzlyQndiUkRhTmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMETQMBw+61jfICwnqSzi/nX/a59BcKpmj3giLdMG54DE/DhOQUsk8/eyZXuV
/B1Z6n7OP6MqNLdDv8ck/w+D64ym/GjqvqxnbMtoTVJMn05m+k8Myoasoyx0TdCq
WJ4aw7kXJvnQPVd9X/0rGNvn2YLIVeoo4k3W7L99KVpswIDUVZCoE9G9BMVZOUM9
IzfC6dK2S6JE0pTpIywkYEDHtJQXgRwzuE3F03u42rNkmMOy2W/pOIHCykxv2E/+
lXnLYFknhDjMlGSXj9fJbd/FY5aBGgTk+3mJl+ktZtntTxns9xvt0VcF0I+jgVis
ZtQIlotiwRyiKGBChoXe56ZG2A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:59 2026 by rpki-client