Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
File:                     HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json)
Hash identifier:          pxFnejfODtB40u0RLr20K5c2G371m1Mh4Pw2aXb5Qtk=
Subject key identifier:   F6:0D:A0:B7:D8:52:18:DC:8C:A6:53:F9:33:57:88:67:5F:F9:0D:15
Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
Certificate issuer:       /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Certificate serial:       0137
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
Manifest number:          0129
Signing time:             Thu 23 Jul 2026 07:28:04 +0000
Manifest this update:     Thu 23 Jul 2026 07:28:03 +0000
Manifest next update:     Thu 30 Jul 2026 07:28:03 +0000
Files and hashes:         1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: LFQVIDq5gu20ANGhhS/LYJai3uRIYttCnBQmhFjKSLU=)
                          2: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: DfxQYn473L3GRcLQOcasHyVtEcw9/bAiZQ1Qjo4k8zI=)
                          3: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: QhYXroPd+KBbNk/Tc/bCNExY+7W0cu8INv3BcwAJYmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
                          rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
        Validity
            Not Before: Jul 23 07:28:03 2026 GMT
            Not After : Jul 30 07:28:03 2026 GMT
        Subject: CN=6a61c283-7047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:9a:1e:ea:00:9c:3d:08:5a:9d:d8:57:e8:
                    22:86:3c:87:27:e2:13:ac:2f:27:55:bc:35:b4:6c:
                    ff:fa:65:99:b1:06:eb:29:ca:02:d2:13:77:ed:fa:
                    2f:65:87:3a:10:51:84:5a:45:79:17:62:62:8d:16:
                    31:bc:bc:5c:59:3f:4f:4d:ac:60:6d:de:4c:dd:3d:
                    7b:70:fb:11:2b:a3:02:ac:d0:6d:84:fe:c7:91:e9:
                    cb:93:94:44:73:c5:3c:a5:d3:86:62:93:39:9c:c0:
                    09:43:e7:71:53:37:1f:07:bd:a4:ce:0f:19:a3:43:
                    0b:1d:6e:15:6c:57:71:0b:2f:e1:c4:7e:04:72:83:
                    c5:d6:01:c2:f1:bb:5c:33:97:da:6b:ba:37:c1:4b:
                    39:93:5c:2a:7a:b1:6e:c9:05:b1:ae:8b:17:19:96:
                    08:04:18:a0:a1:69:0a:b7:6f:e5:55:34:96:76:88:
                    7b:13:b5:55:f2:37:21:4e:c4:08:ae:5e:34:d3:3e:
                    fc:a7:04:59:32:82:3b:63:f9:c3:fe:35:92:97:5a:
                    8b:6c:a1:57:b2:8a:50:b0:ba:fb:64:4a:9d:91:8e:
                    e9:70:37:81:cb:cc:5e:e8:45:e8:4c:97:96:e7:c5:
                    45:3e:d4:6a:fc:37:2d:6e:54:a2:02:3b:73:6b:52:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0D:A0:B7:D8:52:18:DC:8C:A6:53:F9:33:57:88:67:5F:F9:0D:15
            X509v3 Authority Key Identifier:
                keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:08:32:69:10:15:23:29:ac:8b:82:85:11:c9:9a:81:f1:8f:
         f0:de:3e:52:c0:a2:ae:76:6a:30:a8:24:97:13:ad:c7:67:9b:
         9a:29:a4:6e:fb:95:3d:c4:ca:bd:f9:3f:d4:36:fc:52:ac:6d:
         c6:a2:3f:32:68:cb:1c:18:0f:89:de:3c:3b:b0:26:70:a4:a4:
         a8:ad:8c:60:3f:05:d2:98:38:b4:d9:9c:7f:03:e2:08:02:93:
         22:89:dc:b5:63:41:65:e3:cc:b9:71:4c:13:78:85:cf:4c:bd:
         16:4f:5a:f7:dd:a2:58:a4:a7:04:bc:d5:87:cb:c8:f6:5a:ce:
         cf:f4:30:df:19:83:a7:86:1f:fd:fe:4f:39:3e:35:b9:e5:ba:
         3d:56:00:dc:ff:35:db:93:f8:b9:56:d5:2f:5a:af:b7:82:28:
         7e:70:df:3b:85:a0:82:6c:ed:b1:26:72:8c:78:89:b0:99:45:
         89:2a:b1:83:39:a8:32:5e:51:11:0a:4b:68:41:db:31:b3:46:
         f5:ea:bf:26:ea:39:59:69:bc:ff:8d:fe:d9:e7:5f:9b:af:25:
         73:82:37:6f:89:e3:a6:17:4b:11:f9:5e:63:33:93:23:38:6b:
         6c:c1:1b:06:fd:b0:96:06:9f:c7:73:1b:cd:35:75:b5:00:f4:
         b5:94:02:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:16 2026 by rpki-client