Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
File:                     hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft (raw, json)
Hash identifier:          Ew2dSpg0b07xk/r0Egs9rB2OW11pymRmoTUJVZs6p1w=
Subject key identifier:   42:06:4F:20:7C:55:D5:00:17:17:29:CF:45:12:D6:C0:24:12:D6:BB
Authority key identifier: 84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A
Certificate issuer:       /CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
Certificate serial:       0B62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
Manifest number:          0B55
Signing time:             Wed 22 Jul 2026 19:33:16 +0000
Manifest this update:     Wed 22 Jul 2026 19:33:15 +0000
Manifest next update:     Wed 29 Jul 2026 19:33:15 +0000
Files and hashes:         1: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl (hash: yAKxZA8GDKDYasvyd7N/O9tvrQaoEmLSOjgjlrBliDE=)
                          2: BF77D1785DCB11EA880A7643C4F9AE02.roa (hash: A0fYtG6N2BexE9W0qntrNVFN6Gcpgpfkbf4hLPy3YFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl
                          rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2914 (0xb62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EC78, serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
        Validity
            Not Before: Jul 22 19:33:15 2026 GMT
            Not After : Jul 29 19:33:15 2026 GMT
        Subject: CN=6a611afc-9045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:42:81:ee:7d:13:75:42:0a:96:c2:4b:66:74:
                    cb:b2:ca:47:eb:c3:83:0a:c0:04:d2:0b:71:85:e0:
                    c0:a9:f9:cc:76:49:01:27:07:63:2d:4d:20:82:4f:
                    43:4b:41:53:22:27:51:4b:69:24:d0:37:c8:43:5f:
                    3d:73:77:a0:66:4a:4f:c0:09:e3:17:05:5d:ef:34:
                    07:a2:30:bf:10:2c:d7:d6:fd:e0:55:16:ba:c0:92:
                    0e:aa:44:0c:5b:61:ee:b9:99:d3:7c:fb:d2:c4:fa:
                    69:17:b3:ba:1a:04:74:5f:20:05:ec:af:54:0c:e4:
                    99:15:33:66:55:42:9b:80:5b:e0:d3:3e:0c:39:b8:
                    c8:07:30:1a:fe:fa:64:26:5c:cb:a8:94:1a:45:3b:
                    7b:76:47:b9:31:4e:d1:28:3c:22:d0:a3:34:14:d8:
                    b5:7c:bc:66:94:67:96:e8:f4:0e:d7:5a:30:ad:c2:
                    ba:02:fa:09:4d:2d:63:00:9d:6f:23:32:bb:db:87:
                    4d:6f:27:ce:15:7f:49:26:c5:f3:67:90:b5:0b:80:
                    ae:d9:b4:f6:09:29:ea:f9:06:01:22:de:62:a4:04:
                    63:57:1d:4e:69:af:f9:ac:8f:77:34:fc:17:f4:97:
                    29:38:b2:b2:e4:a8:a2:fa:32:b9:19:b6:20:57:ef:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:06:4F:20:7C:55:D5:00:17:17:29:CF:45:12:D6:C0:24:12:D6:BB
            X509v3 Authority Key Identifier:
                keyid:84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a5:24:1b:4d:30:93:57:5f:29:79:12:2a:82:56:46:c3:f0:
         ef:ca:87:98:82:29:15:1a:63:13:00:18:83:9b:e4:cc:a3:be:
         76:8f:e4:78:03:fd:20:23:a2:fc:a7:b9:ff:14:7f:12:54:95:
         cf:2b:41:01:2d:3b:b7:5c:69:55:b3:4f:b4:95:e5:99:aa:c9:
         7c:79:0a:9b:fe:de:ec:00:c4:56:84:50:90:c5:22:a2:64:ba:
         bf:13:b4:10:ea:0a:ea:ee:20:38:f5:d1:15:12:c7:aa:53:fe:
         e5:0e:44:43:dc:9f:d4:76:c1:39:05:53:2a:ea:9a:27:f1:17:
         85:1e:76:e7:72:11:89:0c:9f:ea:1f:d3:e1:47:92:64:a3:fa:
         26:93:d1:f3:9a:64:76:48:ec:98:01:d5:af:46:dc:98:85:b8:
         08:5d:a0:12:dd:eb:d4:66:d5:47:97:e5:24:d6:2a:c4:d7:aa:
         76:bb:ce:aa:ec:0a:3c:3e:ce:bf:48:fd:3e:58:43:8f:6e:cf:
         31:1d:76:30:17:a5:57:c2:de:85:48:2a:a1:2c:77:25:8c:b6:
         46:c2:ac:97:c7:b7:9e:5a:6c:71:2d:b6:60:7d:45:87:c7:d4:
         9a:32:09:66:ae:58:68:e5:82:e1:22:2e:6e:ba:83:ab:c4:0d:
         bc:17:a7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:29:17 2026 by rpki-client