Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
File:                     HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json)
Hash identifier:          nr1BfbfUVNFT7zB3c/GXFjSTsV4VtNMqfYN8vAwY+N4=
Subject key identifier:   B6:58:C0:34:F9:CB:1E:A1:85:C4:4E:A1:AD:58:0E:92:5B:6A:C6:CA
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Certificate issuer:       /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial:       0A4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
Manifest number:          0A28
Signing time:             Wed 22 Jul 2026 20:10:31 +0000
Manifest this update:     Wed 22 Jul 2026 20:10:30 +0000
Manifest next update:     Wed 29 Jul 2026 20:10:30 +0000
Files and hashes:         1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: JMLZwrOZky0aGR77Cpv14VYDzT82X4gHVLYnJOmtDDY=)
                          2: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: f4XaB+bRmsoNFuDMRRMiph6D0qfKs6SQvSg9M2XJC3I=)
                          3: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: WcxNaiIGqzItQBb7CYbwvBMMYMGcLD8tEl0Q7aIbezo=)
                          4: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: PEyE0w8+UrcKJlHY3jaK16cYhVK4lg74ijcsWV2DoxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
                          rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2634 (0xa4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
        Validity
            Not Before: Jul 22 20:10:30 2026 GMT
            Not After : Jul 29 20:10:30 2026 GMT
        Subject: CN=6a6123b6-9c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ec:31:c9:3f:b2:5f:13:cc:68:ac:24:ca:0b:
                    2f:e6:5f:9d:21:6e:60:ed:fd:8e:b6:0b:78:f8:2c:
                    05:d3:56:1e:31:67:07:74:7b:1c:6c:a3:5e:70:d6:
                    bf:5f:8f:2c:82:f1:15:78:a0:05:88:57:4e:1f:85:
                    45:ae:e2:d0:a7:27:62:d5:e0:32:3e:24:57:fe:23:
                    8d:7a:60:01:21:70:c9:33:b7:79:c2:b6:bc:26:77:
                    d8:8a:49:88:bd:2a:89:d0:bd:d5:7d:33:7a:1e:19:
                    59:7b:00:63:a7:2b:c4:61:82:98:ba:d7:f5:9c:6e:
                    6e:7f:13:7e:b9:48:44:67:b1:14:b2:34:75:f0:b1:
                    27:cb:45:bc:98:e1:3f:52:a1:f3:e5:c7:15:0d:93:
                    7d:3b:46:ac:70:a6:41:ea:00:0d:fd:d4:c6:ed:4d:
                    81:e7:5f:2b:82:f7:a2:7b:c1:54:d4:ff:eb:51:51:
                    ae:1a:59:82:e6:e4:c6:6a:a4:a3:43:15:95:12:8f:
                    f9:49:68:4a:b6:85:00:46:e3:dd:18:73:35:f5:61:
                    b4:af:cc:1b:a9:5b:a0:29:36:0b:7e:bc:29:06:22:
                    56:1a:90:ca:2d:cd:0a:7e:c6:f6:28:ae:7d:67:64:
                    64:6e:7d:c6:ee:a4:60:2b:24:5b:cb:12:7e:0f:60:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:58:C0:34:F9:CB:1E:A1:85:C4:4E:A1:AD:58:0E:92:5B:6A:C6:CA
            X509v3 Authority Key Identifier:
                keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:19:2e:f0:1e:ff:f5:06:75:ce:93:88:26:0f:3d:35:3c:80:
         2d:17:8d:7a:89:fb:55:39:90:9b:b1:69:99:34:b3:7f:b3:0c:
         de:4d:b9:9b:0d:67:be:ef:73:79:1e:c6:55:7a:5f:7c:1c:a0:
         67:d8:5d:4d:88:2f:d7:e4:c8:22:9d:6f:c1:da:69:42:00:cb:
         28:25:16:e8:57:6e:c2:5a:f3:93:8b:aa:f7:b9:dd:5c:2c:25:
         c9:58:67:06:43:e0:2f:28:e4:e4:1a:f2:d6:89:df:40:5e:49:
         1e:b4:90:31:b0:ab:64:07:9e:c5:a7:82:71:37:71:21:11:07:
         13:d6:a9:44:f5:50:af:d7:7a:ac:3c:b4:8b:67:48:fb:95:d2:
         e6:8b:c0:94:aa:f3:23:54:60:71:10:59:c6:a0:0a:8e:ae:fa:
         55:98:79:fa:45:6a:07:b7:ee:ac:ca:03:cf:08:45:7c:c3:c0:
         ba:09:ac:e8:2f:89:ad:6b:b8:b9:b0:34:83:83:9e:08:9c:b4:
         46:63:b1:4a:10:00:ee:8e:d0:b8:c0:45:0f:9a:48:35:d4:08:
         cc:22:87:65:be:2d:3f:d5:c5:1d:c5:0f:36:ba:27:be:c9:62:
         96:69:3c:09:32:26:14:1b:af:b8:50:0f:1a:3c:d3:1c:77:1a:
         f2:bc:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:42 2026 by rpki-client