Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
File:                     hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json)
Hash identifier:          H7lwtkElTxlu37YT7aRRLO3vyYtf2KAHwxlAvawOLWs=
Subject key identifier:   70:6B:7E:65:C7:1D:A7:06:1B:23:4E:08:9E:9E:85:BE:2A:57:71:0A
Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0
Certificate issuer:       /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
Certificate serial:       35CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
Manifest number:          3597
Signing time:             Fri 24 Jul 2026 01:16:49 +0000
Manifest this update:     Fri 24 Jul 2026 01:16:48 +0000
Manifest next update:     Fri 31 Jul 2026 01:16:48 +0000
Files and hashes:         1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: pyFPd+L+OSIi4mw6Ihl85fluClOt7mbFLRau67+GH9U=)
                          2: 550BDEE486FD11F194514C90ABEE528E.roa (hash: iL0IlNFnWDDdjTAF1iako5YyrA05aJHTqNYvClHPmeI=)
                          3: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: GdbV5Ius2SX/2VWhDropz4MtiJxrTyNr0FB4ZLxG1hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl
                          rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 01:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13772 (0x35cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
        Validity
            Not Before: Jul 24 01:16:48 2026 GMT
            Not After : Jul 31 01:16:48 2026 GMT
        Subject: CN=6a62bd01-4aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:99:d0:6a:59:8c:4d:ff:d1:31:5b:46:6d:5b:
                    e1:79:54:17:00:e3:de:53:ed:f3:1c:88:44:13:3a:
                    76:0a:2b:b1:60:48:25:fb:06:33:56:48:ab:3c:63:
                    bd:3a:76:23:f2:f2:d5:68:25:c6:80:6c:ee:13:76:
                    0c:42:d0:9c:2c:1a:1f:fc:88:62:18:bb:8f:cc:7d:
                    c5:78:69:40:e1:d9:1e:34:c6:2b:7e:0e:75:09:af:
                    b0:14:e9:c0:5d:51:00:70:4e:d6:d4:6b:f3:96:78:
                    27:44:66:6f:9c:c3:70:aa:4e:e2:3a:b9:fc:9b:14:
                    ab:d5:e1:ad:1a:e5:6d:9a:38:33:7d:2d:ed:17:47:
                    54:67:17:38:35:c5:7b:0c:1c:95:60:13:e0:8b:5b:
                    ea:01:f7:4c:5c:54:6c:8b:b8:ca:e9:f0:52:09:ff:
                    a4:ed:74:b4:c8:4a:c9:32:3a:f4:22:27:c5:bd:1e:
                    5c:59:a9:42:41:5f:f2:40:fd:9c:d5:06:53:d7:67:
                    df:7f:e3:97:26:5d:1c:7f:9e:b8:22:0c:0e:ef:f7:
                    56:38:d8:e4:24:7e:f7:47:11:f9:5f:6f:b1:d0:ab:
                    af:82:31:d9:77:53:68:4b:1e:78:2b:17:6c:25:be:
                    9d:a2:28:cd:25:5f:d4:92:2c:09:66:4f:46:78:22:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6B:7E:65:C7:1D:A7:06:1B:23:4E:08:9E:9E:85:BE:2A:57:71:0A
            X509v3 Authority Key Identifier:
                keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:77:c9:4f:f3:87:5e:41:b8:74:64:2f:9b:e7:b8:93:29:fe:
         c6:cc:57:d2:5a:2c:5a:b8:23:4a:1e:ae:43:ef:06:86:8e:95:
         6c:3a:cf:e6:81:fd:e0:1d:1f:b1:aa:fe:94:e4:aa:c7:cf:4a:
         6a:67:90:73:3a:e0:79:bf:92:60:63:ec:c6:30:c5:99:4d:8b:
         8f:c6:c4:08:a2:65:0d:b9:1d:fb:59:04:fe:18:8b:e6:96:63:
         07:74:37:3d:7d:e2:5c:6c:41:d2:19:cf:6c:a2:d2:72:8a:36:
         09:7c:24:92:8d:57:fd:3b:ea:4b:ed:b0:f3:f3:6a:0e:83:69:
         a7:bb:28:b0:83:0f:11:78:ce:2a:a1:3c:45:f0:0c:2b:10:a0:
         34:63:52:da:65:eb:27:10:2e:b7:4f:4f:d6:15:5a:13:7c:04:
         ca:82:0f:39:fa:dd:08:d2:93:98:83:5e:a1:8c:42:a7:72:c6:
         2b:52:a4:f6:67:21:84:5e:96:23:12:b4:71:cf:0f:ad:94:33:
         70:bf:db:77:16:c6:92:18:61:46:34:bb:73:20:3f:1e:6e:4a:
         eb:29:b1:b5:79:51:6e:da:74:b3:6f:35:d6:1f:90:2a:9f:c2:
         f1:9a:89:a7:1a:97:9a:07:b6:51:d2:8a:28:4d:71:81:be:64:
         c5:24:73:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:17:28 2026 by rpki-client