Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
File:                     hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json)
Hash identifier:          3MLr0EGkcyWyYGeZS8TK2BB3XQvu9hLBYxR7CWv+ws8=
Subject key identifier:   0B:6B:AA:23:67:E9:1A:C9:48:BF:28:84:38:11:2A:FB:93:FC:32:0E
Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94
Certificate issuer:       /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694
Certificate serial:       03A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
Manifest number:          0398
Signing time:             Thu 23 Jul 2026 01:37:52 +0000
Manifest this update:     Thu 23 Jul 2026 01:37:52 +0000
Manifest next update:     Thu 30 Jul 2026 01:37:52 +0000
Files and hashes:         1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: cKPrKm3ZFoZISb9cmanjyoU4BUQPfT0PrMkm2YPSyRI=)
                          2: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: jk9gt1b1frwaDPBZycwnL0X7VizZAM9Vxj6G20XBNHM=)
                          3: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: FOfdiHMNOd30v0oc6GtprNkh43RjvZ+FfeSOC8C9Y9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937 (0x3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694
        Validity
            Not Before: Jul 23 01:37:52 2026 GMT
            Not After : Jul 30 01:37:52 2026 GMT
        Subject: CN=6a617070-1a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:21:06:29:e8:3a:66:da:62:9f:ad:18:71:
                    2c:fa:67:b8:d5:ac:a3:27:d8:90:15:bd:4a:24:17:
                    1c:72:a7:74:d4:1d:e7:1a:f6:f1:f0:ec:b4:63:03:
                    d9:b1:af:5b:1c:ba:ea:57:1a:9e:c9:49:81:f5:8b:
                    9a:31:41:96:e3:7f:0d:b2:09:7c:dc:d9:03:61:8c:
                    43:f7:41:ed:bc:93:84:d2:f4:78:74:26:ca:ab:37:
                    40:93:d2:ac:83:18:f3:5f:8a:cc:4c:66:96:97:45:
                    fb:c2:2d:44:d6:45:28:25:49:13:f8:cf:0a:07:3b:
                    fa:c0:48:70:fd:cd:c7:b7:2d:ad:e6:60:97:ca:03:
                    3e:0b:99:37:6e:3a:9f:4f:f5:44:28:e1:b5:20:c0:
                    54:18:37:93:ce:2f:06:c5:f2:20:94:e5:36:c0:dc:
                    bb:16:ba:89:d0:ba:b3:53:64:db:fd:29:a2:af:e6:
                    ab:bc:82:38:33:c5:69:fc:f4:d2:45:53:10:db:36:
                    1b:0a:99:6f:1b:00:50:66:8c:5e:2e:89:45:3c:00:
                    57:0b:ff:d3:63:ea:95:7a:e3:8c:90:0e:25:c5:4d:
                    99:19:fb:dc:41:f8:81:ed:13:1e:bd:d1:97:15:90:
                    3f:26:e8:16:00:ae:67:e1:6d:df:fa:93:b9:53:f3:
                    58:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6B:AA:23:67:E9:1A:C9:48:BF:28:84:38:11:2A:FB:93:FC:32:0E
            X509v3 Authority Key Identifier:
                keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:cf:0f:ce:a6:20:6e:31:d0:a3:96:45:29:4b:7d:1d:58:9d:
         a7:ba:12:46:0a:32:22:9c:44:24:ea:16:3d:0f:79:99:ef:19:
         eb:7f:e0:e4:6a:b3:2e:39:63:58:12:c3:e5:eb:9f:f2:1f:6b:
         67:64:9b:2a:8e:26:04:ae:a8:dd:25:a7:e2:9d:c3:29:dd:64:
         fc:06:10:d0:6f:bf:b6:3f:81:f9:b7:c4:eb:cf:f9:43:d4:46:
         9a:08:5c:ac:33:7e:1e:c5:cf:8e:d2:4e:a9:5d:6a:3b:b3:81:
         aa:6a:3d:5f:e5:f4:5c:6a:db:7c:c2:ee:85:55:ff:fa:4d:f0:
         4b:2b:bd:b6:6f:d2:8d:b6:d8:0d:db:e7:21:cd:56:22:1a:8b:
         76:b2:e0:02:6e:62:4a:92:c8:5c:7c:68:b8:71:e8:74:aa:6f:
         af:72:8f:50:20:e6:54:09:24:07:46:ce:1b:f7:85:0d:d8:10:
         ec:d7:76:3f:6c:f0:88:4f:62:f0:8a:fb:dc:2c:1c:18:f1:9a:
         da:cb:20:e5:61:43:72:2e:bd:9b:1d:dc:13:aa:97:23:fb:ec:
         34:d1:2e:04:83:60:7c:12:02:04:fd:a1:6b:e1:fb:ab:95:5a:
         22:e9:b7:f9:fa:82:b4:69:93:26:b6:0f:46:1b:70:8f:98:52:
         fb:d0:c7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:23 2026 by rpki-client