Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
File:                     05hHRxQle77zpal12QzQ3GW92-8.mft (raw, json)
Hash identifier:          qZ09630/jvBnx/TxMtKS1OM9bfnOd/ALHcUnXsyUzW0=
Subject key identifier:   4D:BF:75:F1:6B:C7:4F:5C:50:01:3F:FE:18:65:70:23:FA:84:CA:47
Authority key identifier: D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF
Certificate issuer:       /CN=A9197CBC/serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
Manifest number:          016D
Signing time:             Thu 23 Jul 2026 06:22:54 +0000
Manifest this update:     Thu 23 Jul 2026 06:22:54 +0000
Manifest next update:     Thu 30 Jul 2026 06:22:54 +0000
Files and hashes:         1: 05hHRxQle77zpal12QzQ3GW92-8.crl (hash: GqX35WhMSw/v203wp79rP2xyrd7V15HRDXOzMPKovL8=)
                          2: 13435546ABF211F0BA77FA0DC4F9AE02.roa (hash: HIQTkqxEUw6fkREKneLxMJQ3JqOr/SLWIHkepYGIh7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl
                          rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CBC, serialNumber=D398474714257BBEF3A5A975D90CD0DC65BDDBEF
        Validity
            Not Before: Jul 23 06:22:54 2026 GMT
            Not After : Jul 30 06:22:54 2026 GMT
        Subject: CN=6a61b33e-3a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:94:bf:4d:d8:be:3a:4e:ae:9d:19:d6:46:
                    46:df:6d:03:4d:66:c6:1e:08:73:54:bf:77:da:ee:
                    db:59:07:fd:23:2a:46:fe:fd:a0:8c:7d:a6:ff:e7:
                    93:cc:7d:68:32:59:c4:4c:c3:8d:83:6b:70:03:13:
                    aa:0d:44:d7:fb:73:49:06:55:34:9d:16:ea:b9:b8:
                    1c:69:cf:7f:01:9e:5d:bd:28:84:ed:ab:b8:88:2f:
                    76:33:06:96:e0:30:8c:f9:10:73:7a:01:02:78:5f:
                    d1:02:03:a9:03:c1:e7:a6:09:3f:6a:f1:60:95:3e:
                    97:80:18:60:63:de:63:33:9f:95:95:8d:50:4e:2a:
                    0a:90:c9:04:a4:1e:78:1c:bb:49:df:52:19:f5:a1:
                    49:55:b2:ec:c7:c7:ae:f9:57:36:30:55:c3:13:79:
                    38:b2:68:f1:9b:ed:2c:09:4d:58:cd:3b:5c:df:1d:
                    5e:59:75:61:f2:e2:5d:94:a9:ef:e6:a1:42:24:18:
                    51:a0:d0:e9:e6:95:c6:f0:3d:81:ed:d2:33:17:ca:
                    75:90:92:44:fd:7d:94:e6:23:02:53:fc:78:af:d1:
                    22:21:19:80:b1:7d:69:a4:a6:a2:82:09:0e:7d:80:
                    04:5a:a2:51:27:07:c7:2c:24:0a:7d:5c:10:4e:9a:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BF:75:F1:6B:C7:4F:5C:50:01:3F:FE:18:65:70:23:FA:84:CA:47
            X509v3 Authority Key Identifier:
                keyid:D3:98:47:47:14:25:7B:BE:F3:A5:A9:75:D9:0C:D0:DC:65:BD:DB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05hHRxQle77zpal12QzQ3GW92-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBC/952BAE2E5DF011EFAC70ED0AC4F9AE02/05hHRxQle77zpal12QzQ3GW92-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:89:52:30:09:fa:ac:19:1d:d5:5a:87:47:c4:d3:bb:56:ff:
         38:d6:d2:81:b7:cd:20:81:ac:ce:57:3f:e9:60:aa:05:33:e4:
         7f:8a:74:0b:98:df:51:05:ed:90:5c:07:22:6d:da:e1:07:c1:
         f4:2c:0d:82:94:1b:bd:f2:b7:72:b0:50:9a:88:8d:fe:9d:db:
         f5:0d:00:be:65:eb:8d:d3:1e:1d:fc:30:95:e6:f7:87:38:c2:
         e5:6d:50:68:31:f5:e6:98:f8:ab:73:41:5e:4a:7b:0b:26:2e:
         9c:95:31:b0:b0:f7:ab:b8:1a:7a:73:0d:f7:33:65:4d:c0:62:
         79:d9:12:72:fa:10:b9:6a:23:2f:3c:f1:32:7d:1d:6c:b9:21:
         a9:ca:a3:39:f0:ee:55:dc:a8:16:93:9a:5e:36:29:50:49:b6:
         8c:44:04:12:fc:5c:c1:dc:5e:6a:f1:72:3f:66:1c:35:d4:af:
         44:11:44:8b:b0:8e:50:0b:67:4b:cf:40:99:9a:b3:62:f2:88:
         8d:63:b0:24:e3:70:6a:2b:26:59:c7:e3:f1:b0:7d:b5:67:69:
         91:0c:34:c0:85:4f:cc:9d:dc:03:cf:c4:bf:38:82:4c:0d:1e:
         c5:c4:a0:e8:26:5d:f3:a5:68:eb:5b:fb:20:11:3e:20:b5:8a:
         93:75:f5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:54 2026 by rpki-client