Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
File:                     HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json)
Hash identifier:          J4waDalTqPGNAaMUVQFNvF4fRVo2hg1FhEeOPKMMlrE=
Subject key identifier:   48:41:78:E8:77:61:A7:D5:22:2F:30:61:B9:E5:FD:D3:D1:38:90:6D
Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29
Certificate issuer:       /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
Certificate serial:       0B73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
Manifest number:          0AFA
Signing time:             Wed 22 Jul 2026 19:55:30 +0000
Manifest this update:     Wed 22 Jul 2026 19:55:30 +0000
Manifest next update:     Wed 29 Jul 2026 19:55:30 +0000
Files and hashes:         1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: ClLBQ4kviXMNYVkLvrbrbGsDkf055TPP85ZBlAKdPqY=)
                          2: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: HrZGFhV7ij/MniPPdnAUj9aXz0QqgUpU7Kf1yG1SMQ0=)
                          3: A81364AC4B0611EF91534014C4F9AE02.roa (hash: 7nc0FQIuWt5iAf4cd70KYSyea0Ow8OKJ3jyzk3RRDos=)
                          4: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: RMfV3v+YMKrEsv4J/X9BeNndnRE9fJpMKXXZWqx+jrk=)
                          5: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: kqyC7MEnLT1Hy4mgRDx5xjtCxGf3dNpztnPLrCKEqKY=)
                          6: FC2C48DA1D1711F193C53B4D0E3D8C67.roa (hash: t5GO0KVpRO0vMtyXCfhbCMuVtePS8oymCsUiik5fkqM=)
                          7: B8D18508EDE011EF88407251C4F9AE02.roa (hash: NdZ92kK8LP+A4ucoxj2Mn/YHm/Cj8wuqKbvHDIwNWi0=)
                          8: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: gKdZCMFVp9SI3rESOVHwnsGLBaaJOZqgNabpfZNzfAY=)
                          9: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: QbjBpA8yO+Th7aJxPrDQfS3hz6qzzWk2P0LycOFlE0A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl
                          rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2931 (0xb73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329
        Validity
            Not Before: Jul 22 19:55:30 2026 GMT
            Not After : Jul 29 19:55:30 2026 GMT
        Subject: CN=6a612032-93e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8e:84:f0:5d:76:b4:d6:4f:61:e9:9b:72:f8:
                    58:99:8a:68:54:8a:75:3d:cf:98:91:b6:12:ad:19:
                    41:27:4e:75:06:21:ae:fa:f4:03:da:4d:bf:41:3f:
                    0f:77:31:e3:d8:ba:c2:25:89:30:35:de:19:7e:2b:
                    a4:67:70:c6:f0:01:3a:50:94:73:10:54:11:c4:93:
                    4f:1e:76:b9:d6:62:91:e6:24:41:d3:d2:ae:41:22:
                    54:be:a8:6b:a2:ff:86:63:85:e5:49:78:4f:1d:08:
                    88:7e:c6:00:c8:a9:b8:30:79:a3:02:4d:9b:cc:8f:
                    5a:80:75:eb:ab:a9:2d:60:4d:e6:ad:ec:f7:dc:04:
                    30:31:2d:37:f6:68:96:92:2a:a4:69:1e:8a:7e:a1:
                    64:13:73:c8:10:a9:1d:a0:08:06:08:91:00:f4:c9:
                    fc:1c:d0:48:23:5b:e5:ce:cf:88:45:19:03:28:dd:
                    60:15:7c:88:30:c1:6a:ef:fc:f3:a8:48:57:4a:0b:
                    ba:05:96:fe:34:d3:fd:d4:08:7f:c6:4e:17:ac:4a:
                    9f:47:12:04:c3:56:cd:b5:b0:05:ad:9c:fe:1f:ec:
                    4b:f2:ad:35:e9:38:14:f7:7a:68:aa:6f:3a:2c:e9:
                    ca:b8:5c:9b:85:79:61:c5:a4:32:65:ef:bb:bc:d9:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:41:78:E8:77:61:A7:D5:22:2F:30:61:B9:E5:FD:D3:D1:38:90:6D
            X509v3 Authority Key Identifier:
                keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6d:e8:c5:2b:24:23:c6:82:5d:8e:1c:4c:6d:36:da:79:be:
         df:6d:b5:41:77:d1:45:b5:a8:e7:c3:75:a9:fa:83:30:e4:6c:
         d4:e1:bb:e8:51:89:02:a5:4e:ee:1f:68:c2:c8:b1:0d:7e:0e:
         93:b2:f1:05:e8:a0:a3:13:b6:80:76:58:f8:7d:31:ee:40:4b:
         4c:ee:dd:41:51:7a:53:03:9a:98:4a:69:11:96:45:da:00:b8:
         c6:57:f7:f5:35:f3:d9:f6:12:31:8c:ef:28:21:22:88:ec:8e:
         0e:47:f9:c3:50:40:8d:71:5e:19:14:63:f0:e4:17:0d:cc:21:
         6e:80:11:b8:23:2b:20:87:82:96:3c:1d:6d:60:1b:68:67:06:
         50:46:99:c4:63:91:7a:6e:ba:a5:a9:38:a0:4c:af:ed:76:8c:
         f9:00:6c:9e:95:a7:53:24:11:6f:a6:77:cd:0a:81:38:fe:87:
         ee:33:c5:66:07:81:0c:c2:4b:69:3e:42:1d:c0:58:05:a4:8f:
         73:4f:9c:99:e4:dc:6b:be:70:c3:16:b3:05:97:45:1b:4f:47:
         9d:64:2c:e5:60:b8:d8:ba:f7:e5:86:0f:df:8f:80:32:a2:d9:
         81:41:ec:eb:fd:77:3d:09:23:b2:35:69:6b:ba:1a:25:f1:f2:
         fa:d8:23:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:11:02 2026 by rpki-client