Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
File:                     HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft (raw, json)
Hash identifier:          9KrS7SXSi1/lLYs/mdOEErRlIpINWeo8D/1/biMFZSQ=
Subject key identifier:   4C:B2:63:16:35:EE:44:17:28:58:90:AD:CF:E6:80:22:73:BE:84:85
Authority key identifier: 1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08
Certificate issuer:       /CN=A91B6066/serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
Manifest number:          0104
Signing time:             Thu 23 Jul 2026 07:53:03 +0000
Manifest this update:     Thu 23 Jul 2026 07:53:02 +0000
Manifest next update:     Thu 30 Jul 2026 07:53:02 +0000
Files and hashes:         1: HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl (hash: 7AtE5kmBpT3rBOUBVa4tdsNXWx5Cz9uFfKyEykpLbvo=)
                          2: CB16EA82FB6411EF90E1E429C4F9AE02.roa (hash: J85gs2PwspStHZ1QSJgFlpSUo7AYF6KcJxoS8YQ7YiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6066, serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
        Validity
            Not Before: Jul 23 07:53:02 2026 GMT
            Not After : Jul 30 07:53:02 2026 GMT
        Subject: CN=6a61c85f-f3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:06:b2:45:44:25:6d:79:7d:a7:a2:27:44:88:
                    c1:e4:59:fb:97:57:e8:73:85:8e:20:15:d4:00:e4:
                    ba:84:18:87:7b:86:ea:4f:c2:78:95:9b:e0:8d:c1:
                    70:f3:74:5d:da:5a:33:c2:8d:59:1f:b1:7a:6a:6f:
                    ff:03:1e:da:4b:9b:b3:46:2a:65:2b:b5:d9:26:ab:
                    96:e8:73:c6:db:cb:f9:e9:2e:c6:42:41:f6:49:52:
                    74:e1:44:ea:14:06:70:fb:e1:74:95:c0:da:5c:f4:
                    a4:90:ea:3b:9b:4b:9c:9a:f9:b1:92:09:59:17:77:
                    45:19:79:d9:f0:d0:7f:8d:66:e0:71:40:e8:e9:37:
                    29:36:ce:c3:79:8f:90:cb:7e:84:4d:48:da:6d:ea:
                    8f:3e:d3:73:34:42:34:7f:b6:f0:51:ce:c5:b9:de:
                    03:12:d4:d0:cf:57:ce:1f:ef:ca:c4:6b:73:da:4e:
                    87:18:b8:d3:09:cc:f5:20:47:22:09:71:04:d7:12:
                    92:a4:d2:a8:d0:d6:c3:b9:63:ab:98:d4:f4:99:53:
                    2e:90:f7:41:96:0e:21:84:ce:62:4e:e0:49:19:be:
                    af:e3:45:f6:03:00:15:ff:e7:d2:e6:8b:dd:ed:2b:
                    d5:3c:28:7a:a1:7b:83:ff:dd:62:23:90:df:21:5a:
                    d5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B2:63:16:35:EE:44:17:28:58:90:AD:CF:E6:80:22:73:BE:84:85
            X509v3 Authority Key Identifier:
                keyid:1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:95:6d:81:5e:ad:d3:d6:5b:5d:f8:70:4b:c5:7b:88:91:e7:
         74:36:89:68:94:9e:91:54:85:8d:a8:29:8f:03:86:90:25:ee:
         0d:26:22:97:df:db:ff:65:f4:cb:88:e2:08:08:09:a5:8b:7a:
         67:03:f0:43:72:b1:85:bf:37:3f:ac:f0:62:8d:a9:2f:bf:42:
         34:8d:a2:62:91:b5:5c:b2:aa:be:35:03:e6:09:c9:7b:d0:c0:
         0e:3b:67:6d:9b:ea:25:98:0b:cd:9d:d3:f7:00:d2:c0:04:f5:
         93:aa:9f:19:b9:95:8a:b4:ee:7c:cb:e2:16:3c:5d:81:0b:d9:
         b6:67:e0:5b:5f:6d:df:a6:21:7c:49:9d:bf:03:72:ee:5e:82:
         d7:50:3f:fb:97:f3:5b:37:38:04:b8:91:7b:30:bf:63:c6:74:
         b4:7e:fb:37:31:c1:09:c6:50:3c:09:01:26:cd:3f:c7:c2:10:
         fd:3e:eb:79:2a:8f:7d:5a:cb:2a:b7:b5:32:cd:cc:ab:b2:62:
         b5:17:0e:53:0a:b6:f6:10:bf:e6:3f:29:df:87:37:c4:88:8b:
         58:e6:89:df:e9:0d:c6:c1:de:13:71:f7:4e:bf:b1:ae:16:77:
         51:fc:01:0c:e7:40:d6:ca:f4:43:3b:1c:f7:d5:38:a5:a5:28:
         c1:d7:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:42:18 2026 by rpki-client