Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
File:                     b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft (raw, json)
Hash identifier:          U1DZF0RMYBYiShB74obuWWDye/dG+GEqZTgpesd90WQ=
Subject key identifier:   54:28:E2:67:7B:AD:A8:63:D7:5F:8C:EC:56:47:3D:A2:65:94:EF:06
Authority key identifier: 6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
Certificate issuer:       /CN=A918D2CA/serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
Manifest number:          E2
Signing time:             Thu 23 Jul 2026 08:21:04 +0000
Manifest this update:     Thu 23 Jul 2026 08:21:04 +0000
Manifest next update:     Thu 30 Jul 2026 08:21:04 +0000
Files and hashes:         1: b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl (hash: 1Y6TRyFvnoPakAg4JrjK75K4pfKSfpJ8E/HSgyClXmc=)
                          2: 8C9E2B18354711F09FCEEE25C4F9AE02.roa (hash: vLHp4ObDO1IK1mUqYi6ciOieF4o9Rbhwa3XZX1qH6lI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
                          rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D2CA, serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
        Validity
            Not Before: Jul 23 08:21:04 2026 GMT
            Not After : Jul 30 08:21:04 2026 GMT
        Subject: CN=6a61cef0-42df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f2:ea:11:5c:ee:b0:14:7f:71:67:74:2b:8c:
                    be:f9:4d:66:65:1c:3e:f0:a7:42:8e:34:48:a4:8a:
                    e9:b6:9d:49:07:de:e7:e0:2f:f7:ce:78:f1:32:66:
                    2d:5f:e8:cc:77:a6:97:4f:cd:d0:ad:64:50:47:40:
                    7b:bb:40:1f:3c:f2:f4:e1:1c:8f:f3:56:ad:92:7a:
                    ff:c6:36:78:90:54:fe:04:86:9b:2e:34:d0:d8:e0:
                    39:34:dc:dd:06:7f:d7:57:f0:3e:4d:2b:ff:20:32:
                    39:fd:83:8a:43:11:2d:ed:55:5a:33:0c:fc:e7:25:
                    94:de:5a:5b:33:3a:fd:6e:df:bb:fd:99:ca:42:65:
                    86:92:a0:fa:2f:a3:8d:a4:c3:fb:42:02:95:d0:e7:
                    5a:8c:6c:1c:55:a4:8e:96:76:fc:c3:ea:38:c3:69:
                    1b:37:6f:76:cb:cd:57:48:11:ae:f0:6a:f7:c4:c7:
                    fa:0b:c1:89:1a:f8:11:6e:de:c6:aa:f7:ed:f7:67:
                    14:cb:60:35:18:b0:70:74:13:be:02:ea:12:82:38:
                    63:da:26:1f:8d:cc:5c:02:62:dd:2e:72:a9:47:58:
                    b2:74:d1:05:f3:cc:32:27:34:d8:81:38:c7:4a:b6:
                    18:06:e9:42:1f:26:4d:c2:36:87:c9:86:fc:61:be:
                    23:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:28:E2:67:7B:AD:A8:63:D7:5F:8C:EC:56:47:3D:A2:65:94:EF:06
            X509v3 Authority Key Identifier:
                keyid:6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:be:48:ca:47:02:d4:de:2c:bd:90:88:9c:3d:45:26:ec:7f:
         4e:df:09:7c:dc:f9:e7:af:aa:cd:51:1b:35:67:d9:c5:25:9a:
         c6:83:0c:f3:fa:ca:66:86:55:78:ae:43:c0:ea:49:bf:02:38:
         cd:28:b5:14:39:b6:58:89:75:ae:5a:b8:58:98:57:fb:a3:5c:
         41:b0:d1:bd:ae:e3:94:46:60:ec:67:56:60:08:02:8d:ca:21:
         59:34:dc:5b:25:73:4e:51:98:de:09:ef:90:2b:1d:55:4c:b5:
         df:a8:5c:1e:3c:5a:c7:35:23:51:68:1a:e5:ad:5c:67:b2:89:
         a6:e1:a2:c1:38:d6:3d:e5:86:29:d6:f7:dd:57:d9:81:19:ae:
         4d:b8:c3:bc:db:a9:d3:e1:e4:77:db:24:48:7d:d2:0c:39:5c:
         c3:1a:52:c5:9f:49:09:47:21:5f:68:8a:96:3b:5b:7c:4d:ee:
         6b:50:f6:87:95:2c:7a:e2:3c:9e:f6:a9:03:f2:9f:27:0a:28:
         c0:e7:b0:fb:92:a0:14:70:22:db:4a:ed:42:1f:d4:4b:71:f4:
         4e:8f:39:85:ee:0f:a2:10:c9:9e:5b:14:37:88:b0:ea:92:8f:
         d0:c4:70:e0:73:0b:d7:09:50:24:a6:95:70:11:f9:26:c0:e1:
         72:2e:b5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:10 2026 by rpki-client