Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
File:                     Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json)
Hash identifier:          E/6L6O+5ViOmmf4UTy5ZSbc4O9DD2IZWOK5hvGCGt+s=
Subject key identifier:   7A:32:5E:E9:11:AE:44:53:70:2D:D9:05:6A:BB:B5:37:14:85:D1:D2
Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
Certificate issuer:       /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Certificate serial:       0561
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
Manifest number:          0558
Signing time:             Thu 23 Jul 2026 00:12:27 +0000
Manifest this update:     Thu 23 Jul 2026 00:12:27 +0000
Manifest next update:     Thu 30 Jul 2026 00:12:27 +0000
Files and hashes:         1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: YsraF3MxGxBqGaDd8K9H+QZ7XMMvJH7GeGy+2nWkZ8w=)
                          2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: /+VDsq15X1B0EicipfKhRf/bc7zJlndTh+wNdlKxteI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
                          rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1377 (0x561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFC4E, serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
        Validity
            Not Before: Jul 23 00:12:27 2026 GMT
            Not After : Jul 30 00:12:27 2026 GMT
        Subject: CN=6a615c6b-9972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:27:04:d9:f9:76:18:e7:73:28:c8:fc:08:
                    33:50:cb:58:2f:da:27:cd:88:fc:97:79:5f:27:08:
                    ed:ea:39:0d:5d:9a:27:44:79:80:43:9a:d6:21:fd:
                    bf:42:02:86:d2:6e:90:da:19:dd:b0:42:26:1a:26:
                    43:3a:fc:d8:ff:7e:31:3f:a3:64:ab:da:68:fc:f9:
                    1a:48:31:b5:c4:41:d7:ea:f0:9c:3d:5a:fb:41:c3:
                    ca:14:25:59:b7:53:f4:a2:81:25:18:95:de:99:8d:
                    ef:84:f0:b9:fe:b9:ad:36:56:36:68:54:92:44:cc:
                    c1:d3:10:f8:73:7d:34:c8:a6:cb:99:ae:fd:38:1b:
                    72:8b:06:24:80:dd:cd:f3:4a:ef:aa:ca:be:cd:d2:
                    8c:30:c6:4c:f5:bc:8f:08:51:c5:ff:ea:f1:8b:1a:
                    f4:21:3a:e3:f2:f6:d8:f9:09:2f:ca:7e:fb:21:2d:
                    99:17:7e:c8:fb:55:72:a1:cd:64:8f:52:b1:11:b4:
                    b1:60:0e:85:f1:75:f1:5d:23:a0:de:bb:f5:3c:0f:
                    d8:9a:c9:f1:ed:bd:6f:39:de:f8:f1:48:d7:f2:32:
                    12:cb:37:7a:62:cb:32:b4:62:e9:3e:b2:5d:cd:80:
                    74:71:db:7a:06:c8:b9:0d:24:ea:7b:df:af:f4:c8:
                    7e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:32:5E:E9:11:AE:44:53:70:2D:D9:05:6A:BB:B5:37:14:85:D1:D2
            X509v3 Authority Key Identifier:
                keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6c:aa:49:c6:12:da:c7:a3:e7:73:d2:5d:f4:f9:a8:82:1c:
         69:09:22:c2:93:72:99:98:21:09:9e:c9:5a:e3:56:6b:f9:98:
         b9:77:77:16:d0:9c:73:19:c8:bf:43:05:4f:cd:11:74:e5:e6:
         3f:9d:73:01:f0:b0:1a:c9:ca:01:d3:b6:78:da:b0:57:75:18:
         ef:cc:dd:b0:ca:03:fb:2f:9a:6e:9e:9d:13:a0:19:1d:f5:a1:
         c2:bb:c3:0f:18:7e:d6:45:80:0a:dc:05:49:5c:6e:c3:88:4c:
         d6:fd:95:98:92:59:e9:39:40:62:10:84:bf:19:8f:72:93:be:
         06:37:f3:d7:86:bb:cb:bd:73:60:0e:be:34:bc:66:7e:a7:8c:
         7c:41:a9:2d:bc:71:af:98:c1:b5:5d:7b:8d:35:c0:d0:0c:1c:
         da:18:fc:a5:e6:e3:17:51:d3:fe:bb:43:c8:82:99:f7:54:18:
         b4:1c:2e:b4:11:56:0f:d2:e3:f9:da:0b:7f:07:6d:18:d7:1f:
         98:31:d2:90:86:67:d8:fe:09:ec:58:b3:d0:c3:bf:de:14:de:
         47:29:d3:b5:1c:b4:15:a1:6b:9c:17:ad:0f:af:4e:30:4a:28:
         71:ff:b7:f8:77:ab:69:88:79:8a:cd:ff:fa:f8:23:04:28:ff:
         e2:9e:6e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:27:45 2026 by rpki-client