Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
File:                     hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json)
Hash identifier:          E52nlllz5j+wn6LRXnly6bFI6TZjWHRBX+PPVOjRb4I=
Subject key identifier:   4C:34:0D:C1:F2:FC:A4:AB:5A:BF:0E:E5:53:F6:61:A3:28:07:5A:A1
Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19
Certificate issuer:       /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
Certificate serial:       09D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
Manifest number:          09C8
Signing time:             Wed 22 Jul 2026 20:20:19 +0000
Manifest this update:     Wed 22 Jul 2026 20:20:19 +0000
Manifest next update:     Wed 29 Jul 2026 20:20:19 +0000
Files and hashes:         1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: c+iUNssgIG2LJyy8gz+0NSeyi13dtY9K27bHmydlLAM=)
                          2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: +4O58+8Be0EvFE4iAXiTAOaPh0BL/Et1xJp3uENJQz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl
                          rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2515 (0x9d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1D77, serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119
        Validity
            Not Before: Jul 22 20:20:19 2026 GMT
            Not After : Jul 29 20:20:19 2026 GMT
        Subject: CN=6a612603-77af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:32:12:84:d0:75:25:e1:a8:cf:1d:55:e7:
                    fe:f1:4e:b9:d8:cc:f9:96:f0:f1:ef:68:fd:4f:b7:
                    12:16:5e:f1:74:84:76:bb:f2:3c:cd:5d:20:7a:aa:
                    f3:ae:4a:3d:37:77:92:98:76:4c:ac:be:a8:5a:04:
                    56:5c:ec:31:d6:2b:19:27:41:53:4c:09:2e:76:72:
                    70:f0:60:da:0d:a6:cb:f8:3e:c1:25:42:ec:7c:fd:
                    75:d1:1f:cc:8a:6a:23:05:cb:ec:f5:2a:c2:b4:41:
                    37:fd:e6:50:17:a7:01:1d:80:c5:b2:18:5a:1a:00:
                    a2:c3:f4:83:7b:23:a1:2c:25:94:b8:14:0c:7c:54:
                    ea:f0:7a:dc:e3:ba:88:95:f1:31:04:02:5c:77:6c:
                    d6:5d:81:dd:4c:8e:a6:e2:ed:b3:ab:92:37:9d:2c:
                    8e:b2:ed:f3:cf:6b:8f:fa:78:78:2d:0b:ce:ee:a0:
                    ce:4e:20:94:80:cb:f2:cf:e4:c3:27:13:90:87:0a:
                    4a:5a:72:72:59:94:6c:59:18:14:6d:af:cc:48:26:
                    05:35:0d:ea:db:3f:fc:08:c3:30:c9:5b:e5:01:50:
                    e8:93:d1:98:80:20:40:d1:72:22:5a:06:47:07:39:
                    94:8a:cf:1d:f7:51:7f:77:31:94:c9:0e:8e:2a:19:
                    7e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:34:0D:C1:F2:FC:A4:AB:5A:BF:0E:E5:53:F6:61:A3:28:07:5A:A1
            X509v3 Authority Key Identifier:
                keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f4:b6:d0:6a:07:16:60:71:15:10:7f:5f:eb:21:63:13:ce:
         52:da:65:6e:fe:27:c7:16:25:03:24:7c:a9:03:8c:87:0f:0e:
         b1:51:50:7a:03:50:26:1f:23:0e:33:fc:35:41:99:0b:46:18:
         41:64:e6:7e:8c:b3:53:c0:39:09:e9:82:0a:65:2c:e2:92:a2:
         88:72:10:e8:a1:44:02:e9:d8:76:10:5e:4f:00:a1:1a:1c:1e:
         2b:d8:01:08:f6:bd:22:d5:78:d5:eb:83:46:02:a5:dd:e6:50:
         28:d1:4e:f1:4d:0f:07:9e:47:d6:e2:18:c3:2c:5f:7f:3f:af:
         f8:98:bc:34:50:aa:df:c7:ee:83:06:d8:a6:00:b0:17:ff:66:
         09:7e:05:e8:3c:fc:2c:9d:70:94:9d:fb:b3:09:8b:d6:77:28:
         5c:3f:68:a3:86:25:8e:d3:7e:cd:50:8c:f2:f0:ee:5f:25:26:
         cc:db:54:22:6c:0a:b4:60:ad:ad:65:a5:d3:d8:84:6b:e5:fa:
         81:ae:2a:10:81:92:a8:e1:a6:20:e3:33:e1:09:ce:02:2f:da:
         62:b2:d1:56:b4:79:63:a9:d5:e3:99:b9:a9:5e:52:f8:77:f3:
         5b:cd:76:c1:17:c9:cc:3a:bc:7c:3a:de:01:9a:a3:b7:f1:5b:
         4e:66:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:33 2026 by rpki-client