Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft
File:                     hnoHFJZqnX2LIC37HeIhPALANic.mft (raw, json)
Hash identifier:          S6GjUnSzkrgp8DOYpbLgHWF3gh8bFz7awsTmobkrIqc=
Subject key identifier:   21:B4:9B:60:3D:60:61:0E:EA:E5:6B:44:90:BA:55:70:B1:E3:78:E1
Authority key identifier: 86:7A:07:14:96:6A:9D:7D:8B:20:2D:FB:1D:E2:21:3C:02:C0:36:27
Certificate issuer:       /CN=A919FD74/serialNumber=867A0714966A9D7D8B202DFB1DE2213C02C03627
Certificate serial:       0CBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft
Manifest number:          0CB1
Signing time:             Wed 22 Jul 2026 18:48:18 +0000
Manifest this update:     Wed 22 Jul 2026 18:48:17 +0000
Manifest next update:     Wed 29 Jul 2026 18:48:17 +0000
Files and hashes:         1: hnoHFJZqnX2LIC37HeIhPALANic.crl (hash: Gc1jx1bB9fDLKodKVGjgapJ36GrDU2g/KQTiBugQMBA=)
                          2: D1DB990C1A3811EAB6F9C83DC4F9AE02.roa (hash: 7Dz9hu6gjsKF7rOCaXHWUeixpnR4qVyHb9xN6ykXLfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.crl
                          rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3261 (0xcbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FD74, serialNumber=867A0714966A9D7D8B202DFB1DE2213C02C03627
        Validity
            Not Before: Jul 22 18:48:17 2026 GMT
            Not After : Jul 29 18:48:17 2026 GMT
        Subject: CN=6a611072-f6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:1d:a2:a5:64:ec:70:f2:b8:0a:47:9a:05:
                    08:21:d7:c2:d0:77:43:22:67:9f:93:3c:44:63:03:
                    39:a3:e6:e5:ba:18:f8:ac:6e:74:c2:14:46:aa:2d:
                    cb:82:52:f1:be:92:6a:92:13:6b:90:e5:ad:0f:89:
                    b1:22:ca:ed:5d:14:ce:a1:1e:56:41:38:b5:0f:3c:
                    de:64:d5:4b:cf:f2:10:bc:b5:87:e1:ea:0e:d3:8a:
                    5b:5a:70:c4:67:54:56:18:af:2c:96:96:16:81:2c:
                    66:80:23:41:f2:ac:de:cc:7e:6e:9d:68:5b:97:6d:
                    3b:07:cb:2c:93:2b:b7:76:3e:78:69:ec:cf:4b:32:
                    db:11:88:ae:3f:87:04:63:46:35:43:42:48:8a:e7:
                    5b:57:b0:10:86:d3:df:67:00:cd:50:b5:cb:cb:b9:
                    33:21:3c:60:b4:a1:ae:f6:b3:8d:87:fc:a9:96:32:
                    e7:23:e7:95:b1:0e:c2:d3:2f:c0:0c:e9:cf:22:68:
                    7d:a9:00:14:73:ea:86:06:97:79:30:b2:de:b0:7f:
                    47:0e:5d:24:8e:83:eb:d3:73:94:ff:2b:a3:7e:92:
                    8a:25:2a:c2:62:98:84:c2:60:b3:06:6a:93:4d:5d:
                    04:3f:a2:b5:87:49:38:a0:df:b9:bc:4a:2d:bd:45:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B4:9B:60:3D:60:61:0E:EA:E5:6B:44:90:BA:55:70:B1:E3:78:E1
            X509v3 Authority Key Identifier:
                keyid:86:7A:07:14:96:6A:9D:7D:8B:20:2D:FB:1D:E2:21:3C:02:C0:36:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:2b:8f:d1:50:e0:ac:0e:2e:b7:8d:c6:5e:a8:6f:04:d8:d6:
         54:02:7e:87:c4:cc:fa:1d:51:41:7a:ba:44:a5:e5:f5:14:34:
         e0:83:fe:f5:fb:33:5e:4f:79:03:4e:85:ae:02:e2:d9:e8:53:
         79:b2:81:ef:81:e3:0c:14:8b:ba:3f:f0:21:78:bc:83:ec:54:
         8a:af:f4:8b:e9:be:fb:f4:8d:c5:39:b6:00:c2:f4:8e:b0:58:
         af:a4:a9:66:bf:a9:ea:83:d5:a9:de:82:7f:91:dc:4a:8b:29:
         2c:d5:65:06:0c:e4:e4:dc:7c:03:61:d9:fc:77:85:07:20:f9:
         f9:10:6b:e9:ea:e2:68:0b:f7:c7:7e:6a:4d:1d:c6:c8:b8:70:
         72:74:27:16:5c:cb:2a:78:0b:82:7a:bb:b5:79:37:2c:a5:54:
         eb:89:fd:3a:c4:9a:89:6a:3e:ef:36:56:91:7c:5c:8d:a9:34:
         d9:eb:0f:ed:0c:b9:f2:f6:b3:2c:94:82:84:2c:cb:d3:8e:05:
         c0:4f:9c:60:33:6e:34:a1:49:9c:22:b1:5d:e0:91:39:3b:eb:
         c3:d5:8c:89:1c:f3:33:99:d5:20:cd:0f:e9:33:1d:08:64:06:
         d3:45:5c:85:ee:05:ef:ed:fb:23:62:37:29:8b:38:89:d8:92:
         fe:16:27:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:31 2026 by rpki-client