Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
File:                     ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json)
Hash identifier:          LWr4knXIHBsbiYFSvStAXlJgDeOQQJqjLOJrAc3/qi8=
Subject key identifier:   36:59:F7:09:59:05:65:07:F2:E3:49:0E:12:7B:2B:82:D0:4A:44:9E
Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4
Certificate issuer:       /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
Manifest number:          016E
Signing time:             Thu 23 Jul 2026 06:18:17 +0000
Manifest this update:     Thu 23 Jul 2026 06:18:16 +0000
Manifest next update:     Thu 30 Jul 2026 06:18:16 +0000
Files and hashes:         1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: fzwlMaPWMMC336iMbg62dYai4G1gaT/Te3iscHDiUN8=)
                          2: 06F73C70ABD011F0977C9F10C4F9AE02.roa (hash: vgtGXqZIotP7XALpdVVLNGiNYGh7f99bKJBaiOXmSGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4
        Validity
            Not Before: Jul 23 06:18:16 2026 GMT
            Not After : Jul 30 06:18:16 2026 GMT
        Subject: CN=6a61b229-3bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:3c:8c:5c:40:f4:21:4c:a6:f7:d3:04:11:
                    72:b1:03:25:f7:a9:c3:20:1e:52:c3:05:ca:3e:10:
                    f6:e3:9d:6b:dc:0c:19:81:fc:0b:f2:7d:9d:90:4d:
                    bf:ce:2c:b9:80:a2:10:9b:1b:75:6f:78:e7:4f:3e:
                    ff:fd:ec:54:36:78:9c:ef:38:ca:46:ec:9f:65:0f:
                    11:71:50:36:9c:ac:d6:d4:7a:d3:77:9a:37:51:ac:
                    60:70:c3:38:d3:f3:07:c2:bd:03:a7:2a:52:71:ce:
                    3c:31:bf:91:d7:e2:da:82:77:e1:13:f2:dc:dc:74:
                    88:43:9d:1e:14:8e:87:27:0b:ce:89:83:9a:8d:3a:
                    21:a4:78:6b:70:15:f5:de:2e:79:d6:c9:a4:65:be:
                    72:0d:3b:40:6c:ff:ed:65:7f:28:6e:09:27:0e:ee:
                    aa:21:3c:75:90:50:35:68:3f:0f:46:b9:0a:43:39:
                    51:4f:a8:e0:4e:4b:4a:b9:74:a4:7a:a7:b1:7c:73:
                    41:f9:45:ee:3e:a5:97:22:c0:e9:22:fd:1c:31:c0:
                    7f:e9:fb:08:a0:4e:28:b8:bd:75:30:d7:43:a3:c7:
                    6c:62:ee:35:60:e3:da:6a:7e:8f:01:43:c4:12:08:
                    ab:d9:ca:0f:64:ab:a0:86:77:46:64:10:14:47:e3:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:59:F7:09:59:05:65:07:F2:E3:49:0E:12:7B:2B:82:D0:4A:44:9E
            X509v3 Authority Key Identifier:
                keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5c:a3:a6:32:c3:77:17:ec:e0:cf:34:f6:29:ee:ee:b3:4c:
         a6:07:0f:8d:6c:0c:b6:62:57:00:24:3a:61:6f:c5:46:ea:e2:
         71:a2:cc:02:e2:b5:18:53:7d:54:6f:a0:d7:f2:29:5c:bb:7e:
         99:33:83:1d:60:4a:06:83:ed:3a:c7:5c:14:11:3f:d0:87:75:
         ba:db:e4:55:22:e1:f5:d4:c5:4a:f9:7a:e5:d5:28:a5:00:42:
         3b:5b:4d:47:e6:c2:e6:9e:57:24:ea:49:38:7c:d3:22:89:44:
         92:4d:6e:e9:25:b0:b2:b2:38:1d:81:0b:f9:c5:56:b2:3b:88:
         85:e8:9d:e7:e7:18:f7:bf:9e:19:0c:b6:46:15:4d:bf:3c:5f:
         9a:1c:73:11:ea:fa:af:38:23:93:9e:bb:d7:72:dd:08:37:38:
         a8:4d:34:36:c7:0a:44:48:83:52:ab:9d:78:87:46:1d:e2:e7:
         90:3b:3d:dc:4b:28:0b:f4:db:f2:40:b2:0f:52:c7:10:b3:0a:
         6b:d4:8a:a6:2c:4b:7b:b9:c4:5e:4e:02:d0:7d:fb:f6:b5:35:
         36:6d:49:c9:c5:c5:16:a9:ff:e5:20:18:47:77:0a:ff:21:75:
         a3:ef:e4:5d:6b:f9:c3:bc:f6:60:d8:e4:f6:f3:4f:c3:88:ba:
         31:6c:a8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:34:00 2026 by rpki-client