Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
File:                     H7fzr2-da5fjcg7FSsv1iTrGk2g.mft (raw, json)
Hash identifier:          c7QpgAVUjDD752KkhVpPvLHuXHQAoKHQpz29CpiVLQ8=
Subject key identifier:   4D:7A:57:92:DB:E3:E8:19:09:3C:00:4C:78:AD:70:81:D0:DB:1C:D3
Authority key identifier: 1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68
Certificate issuer:       /CN=A9117DD2/serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
Certificate serial:       025D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
Manifest number:          0257
Signing time:             Sat 13 Jun 2026 02:16:57 +0000
Manifest this update:     Sat 13 Jun 2026 02:16:57 +0000
Manifest next update:     Sat 20 Jun 2026 02:16:57 +0000
Files and hashes:         1: H7fzr2-da5fjcg7FSsv1iTrGk2g.crl (hash: g7bDUyX32DJ5GW1a7uFhTn7pYgyn16f+Rm9lW1RQiYc=)
                          2: 2871DB9ED1CB11EDBE2F0D7EC4F9AE02.roa (hash: ojeQEJwfkmkjsjTjJi7JxC/rYMjRAxyFan+n2ZkXfIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl
                          rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117DD2, serialNumber=1FB7F3AF6F9D6B97E3720EC54ACBF5893AC69368
        Validity
            Not Before: Jun 13 02:16:57 2026 GMT
            Not After : Jun 20 02:16:57 2026 GMT
        Subject: CN=6a2cbd99-e8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:65:14:58:5a:35:0d:81:f0:5f:f7:9e:44:
                    f8:f6:d7:bb:c8:5d:b9:70:09:2b:20:00:94:96:fe:
                    18:ff:2d:6f:35:6f:31:c9:02:d0:e1:91:b3:83:ec:
                    0a:34:e2:33:8b:e8:22:cf:7d:d8:31:2b:91:1b:d3:
                    5e:40:e3:5e:fd:88:21:03:91:7e:62:aa:21:03:fe:
                    2e:19:0a:97:a6:4d:18:30:ce:ed:37:35:2e:4e:39:
                    17:8d:fb:ef:44:86:50:86:39:1a:3a:ca:27:56:6f:
                    b3:3b:1a:0d:75:14:97:eb:b7:74:bc:08:c1:25:2c:
                    58:54:24:f7:02:0f:15:45:0d:07:d3:94:83:4c:f3:
                    7f:0d:61:f3:46:67:e4:05:85:d5:4a:88:56:3b:95:
                    1d:01:6d:ea:09:27:a7:5d:2f:b4:35:0c:b2:f7:ab:
                    9c:a1:ba:de:e1:f0:72:c0:e6:9e:03:78:93:93:c1:
                    ec:64:82:1f:53:4e:e8:eb:ef:6a:ca:83:6a:a1:3b:
                    35:a9:cf:e0:36:7b:e8:92:e8:c5:b8:7d:fe:35:6f:
                    2d:3d:3a:08:72:4d:83:5d:14:17:8c:ad:73:de:f5:
                    ae:d6:b2:36:3b:34:b0:47:75:56:e4:fa:c2:c7:46:
                    41:ac:fa:6e:d4:fe:8e:12:7a:8b:22:a3:95:7a:5b:
                    6e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7A:57:92:DB:E3:E8:19:09:3C:00:4C:78:AD:70:81:D0:DB:1C:D3
            X509v3 Authority Key Identifier:
                keyid:1F:B7:F3:AF:6F:9D:6B:97:E3:72:0E:C5:4A:CB:F5:89:3A:C6:93:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7fzr2-da5fjcg7FSsv1iTrGk2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117DD2/101EDAEAD1C811EDACC81B7CC4F9AE02/H7fzr2-da5fjcg7FSsv1iTrGk2g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b1:8a:de:f6:f1:ad:1f:de:e3:9a:2e:bf:b1:5b:f1:58:2f:
         dc:2a:a7:ee:6c:18:5c:2d:60:77:98:2c:5a:d8:e5:68:b2:58:
         f2:75:d0:b0:d0:6c:ac:90:b8:92:3b:51:cb:07:81:31:ed:6c:
         f5:93:6e:87:0e:1c:dc:a2:96:61:3f:4a:05:b8:4f:46:a0:03:
         5e:44:f3:6a:a5:c2:a3:cf:46:cc:b9:94:e3:c9:64:ce:66:c9:
         44:61:09:e7:d8:b7:66:c5:99:7b:92:ff:02:d9:70:ed:44:26:
         c0:68:d7:04:c9:51:bc:7e:a5:9e:56:10:dc:c4:ef:80:77:f1:
         77:b6:42:b1:54:13:ed:33:49:bc:ee:12:65:3e:1d:54:7b:f6:
         45:3a:6a:a1:35:41:cd:2e:e2:21:20:ff:fa:73:4e:e1:4d:15:
         1a:1e:64:f3:df:37:50:dc:c8:50:be:d8:e4:64:68:ba:96:3c:
         74:aa:b5:6d:cd:e6:0d:2a:2e:5b:48:3a:0e:dc:63:ee:3c:ea:
         a1:63:03:ce:0b:1d:1a:fe:b2:4e:8d:ea:6d:87:ea:99:6b:bf:
         e5:51:d1:ba:90:39:47:96:86:0d:1e:ad:fd:20:b9:e8:cf:af:
         9c:cd:6b:74:7d:c8:0e:e4:22:00:1c:a3:f7:2e:76:a0:2a:cb:
         64:3b:3f:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTdERDIxMTAvBgNVBAUTKDFGQjdGM0FGNkY5RDZCOTdFMzcyMEVDNTRBQ0JGNTg5
M0FDNjkzNjgwHhcNMjYwNjEzMDIxNjU3WhcNMjYwNjIwMDIxNjU3WjAYMRYwFAYD
VQQDEw02YTJjYmQ5OS1lOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoddlFFhaNQ2B8F/3nkT49te7yF25cAkrIACUlv4Y/y1vNW8xyQLQ4ZGzg+wK
NOIzi+giz33YMSuRG9NeQONe/YghA5F+YqohA/4uGQqXpk0YMM7tNzUuTjkXjfvv
RIZQhjkaOsonVm+zOxoNdRSX67d0vAjBJSxYVCT3Ag8VRQ0H05SDTPN/DWHzRmfk
BYXVSohWO5UdAW3qCSenXS+0NQyy96ucobre4fBywOaeA3iTk8HsZIIfU07o6+9q
yoNqoTs1qc/gNnvokujFuH3+NW8tPToIck2DXRQXjK1z3vWu1rI2OzSwR3VW5PrC
x0ZBrPpu1P6OEnqLIqOVeltuowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE16V5Lb
4+gZCTwATHitcIHQ2xzTMB8GA1UdIwQYMBaAFB+3869vnWuX43IOxUrL9Yk6xpNo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0REMi8xMDFFREFFQUQx
QzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1ZmpjZzdGU3N2MWlUckdr
MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g3ZnpyMi1kYTVmamNnN0ZTc3YxaVRyR2syZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
N0REMi8xMDFFREFFQUQxQzgxMUVEQUNDODFCN0NDNEY5QUUwMi9IN2Z6cjItZGE1
ZmpjZzdGU3N2MWlUckdrMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADrGK3vbxrR/e45ouv7Fb8Vgv3Cqn7mwYXC1gd5gsWtjlaLJY8nXQsNBsrJC4
kjtRyweBMe1s9ZNuhw4c3KKWYT9KBbhPRqADXkTzaqXCo89GzLmU48lkzmbJRGEJ
59i3ZsWZe5L/Atlw7UQmwGjXBMlRvH6lnlYQ3MTvgHfxd7ZCsVQT7TNJvO4SZT4d
VHv2RTpqoTVBzS7iISD/+nNO4U0VGh5k8983UNzIUL7Y5GRoupY8dKq1bc3mDSou
W0g6Dtxj7jzqoWMDzgsdGv6yTo3qbYfqmWu/5VHRupA5R5aGDR6t/SC56M+vnM1r
dH3IDuQiAByj9y52oCrLZDs/Nw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:04 2026 by rpki-client