Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
File:                     HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json)
Hash identifier:          yrlUumemcXnSYiEvdxhslFadbURTpR42DVRtvZep2RM=
Subject key identifier:   F7:65:58:47:9D:DD:A1:2E:BE:F3:5B:03:54:14:4A:02:6A:70:88:F9
Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8
Certificate issuer:       /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8
Certificate serial:       07E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
Manifest number:          07DC
Signing time:             Wed 22 Jul 2026 21:56:31 +0000
Manifest this update:     Wed 22 Jul 2026 21:56:30 +0000
Manifest next update:     Wed 29 Jul 2026 21:56:30 +0000
Files and hashes:         1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: jaacNhvRvSWzz1w3Bh+8dSgSdN6ovZ59RVHfJgi+CG4=)
                          2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: xjXTQWH1dcV8roauORyB1NKCDzaqjShTuWoQvdygakg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl
                          rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2023 (0x7e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1257, serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8
        Validity
            Not Before: Jul 22 21:56:30 2026 GMT
            Not After : Jul 29 21:56:30 2026 GMT
        Subject: CN=6a613c8f-46a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:20:8d:bf:7d:92:b7:7e:fe:a4:54:a3:bf:
                    49:77:9a:de:54:6f:db:0e:78:dc:43:dc:c1:a8:d1:
                    97:17:5f:99:24:7d:36:cf:80:19:19:4a:97:e4:7d:
                    98:bb:33:07:2e:15:a6:61:d7:49:af:95:80:19:ca:
                    d1:54:85:a9:b2:2c:8a:0d:35:1c:5e:d9:cf:89:8f:
                    af:6b:e3:77:dd:2b:91:2c:72:22:66:f6:e7:b5:5c:
                    66:8d:99:fe:28:08:40:d9:d6:61:e2:2d:7c:a7:74:
                    3f:5a:c7:2b:a4:13:7e:ac:50:c8:40:c3:6c:bf:8c:
                    a1:91:b7:cc:0c:bb:19:b3:8d:15:ac:d5:cd:0b:cc:
                    be:3a:f1:a9:8a:5f:36:2a:1e:48:46:4a:54:a1:81:
                    9d:4e:81:ad:1b:8a:16:e7:e6:72:d6:f4:84:42:8c:
                    f5:71:de:f9:20:45:14:5b:73:7d:df:22:32:9e:ed:
                    ed:34:d1:7b:49:81:f9:73:2d:0c:70:17:9c:1e:5b:
                    6d:c4:3c:e2:19:7f:c1:f9:56:e6:9a:54:85:72:0c:
                    e3:e9:cd:1b:c9:97:f3:d6:b1:a3:56:7d:0d:ce:5c:
                    5e:7c:89:98:f1:89:fd:54:38:de:8c:8a:31:c6:81:
                    bf:38:68:1c:92:26:76:be:18:f1:ed:a7:96:39:dc:
                    c9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:65:58:47:9D:DD:A1:2E:BE:F3:5B:03:54:14:4A:02:6A:70:88:F9
            X509v3 Authority Key Identifier:
                keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c8:67:60:68:23:15:cd:40:0f:ff:05:27:1b:6e:4a:e2:fb:
         24:1b:b9:fd:1a:7c:ed:72:b1:77:31:85:7c:8f:bd:31:8a:66:
         cc:bd:89:1d:a9:1a:b0:19:50:55:88:3e:6e:cd:86:b4:91:97:
         fa:60:f5:0b:e4:7b:77:4a:a6:5e:53:54:19:83:20:0b:4e:ac:
         bd:e0:64:00:96:c1:5f:30:bd:af:29:9c:7e:15:c6:23:c5:ee:
         94:f6:75:91:2d:43:0d:66:73:ba:51:6a:73:10:59:a5:b4:a1:
         a3:8d:0d:54:c3:fd:5f:54:33:1b:b0:84:a8:7e:3a:d7:22:47:
         81:85:07:e8:de:75:03:8b:92:49:70:31:57:17:1a:ba:fd:84:
         9e:90:61:44:ec:cf:79:78:90:ca:12:91:32:b7:17:81:42:81:
         d8:28:b9:78:d8:b4:5a:ec:fd:05:6e:5b:e6:5d:a4:5f:9b:54:
         78:0a:49:4b:42:b1:44:9b:f6:6c:06:f5:45:6e:1b:bd:fe:25:
         da:f7:e8:8d:69:ba:3b:82:8f:72:6f:87:fe:a2:10:c5:7b:2a:
         4d:3a:41:10:20:6c:81:e8:9e:c0:62:63:b6:ac:b1:58:bc:f4:
         fe:4e:a8:c1:d0:2e:88:5c:cc:fe:8d:34:a8:b7:44:13:dd:85:
         a4:3e:cf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:06:50 2026 by rpki-client