Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
File:                     HUW1iuOmlSERtAmFTag5MXvugjM.mft (raw, json)
Hash identifier:          LDVpKhn4h5ffghgxVB/EqFsYQLXo/2N9MSMc0sRAiKs=
Subject key identifier:   BC:10:9F:A9:BE:BC:9A:90:62:5A:5A:90:83:28:B2:3D:E5:32:CC:D0
Authority key identifier: 1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33
Certificate issuer:       /CN=A9120119/serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
Certificate serial:       11E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
Manifest number:          1AA9
Signing time:             Tue 28 Jul 2026 17:15:32 +0000
Manifest this update:     Tue 28 Jul 2026 17:15:31 +0000
Manifest next update:     Tue 04 Aug 2026 17:15:31 +0000
Files and hashes:         1: HUW1iuOmlSERtAmFTag5MXvugjM.crl (hash: RdNwSMj+yB6sXKnkeijLWvgAt0PjHFrzEdiokwDf6dE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl
                          rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4582 (0x11e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120119, serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
        Validity
            Not Before: Jul 28 17:15:31 2026 GMT
            Not After : Aug  4 17:15:31 2026 GMT
        Subject: CN=6a68e3b3-e19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:8b:c6:f3:64:a4:12:4f:3f:54:84:5b:ac:
                    48:a5:74:fb:b9:cb:11:f6:2e:54:7f:ac:56:f5:e7:
                    8c:5a:92:f9:a5:fa:aa:aa:02:30:84:f8:dd:a2:a8:
                    d6:a5:ab:93:fa:f2:09:15:7d:af:83:5c:1d:a4:48:
                    e9:48:60:67:0b:40:54:5b:36:e8:f1:ad:c2:4e:33:
                    81:9c:f5:3c:68:e2:0a:1a:34:fc:c1:13:98:2b:24:
                    16:62:1e:32:69:de:fe:92:ce:fe:33:be:ae:c5:d6:
                    61:50:30:bd:a3:8d:f9:f2:65:80:44:a5:63:3b:fe:
                    8f:cd:0a:fe:01:e5:ab:3b:1d:15:b6:e1:f5:a0:13:
                    94:a6:c9:88:78:f6:11:f0:8e:14:68:16:9a:c6:16:
                    96:44:4e:78:58:52:bf:c7:4f:cb:f4:18:66:85:65:
                    3d:92:45:bf:3b:bd:1e:49:db:c7:76:c6:d3:bb:66:
                    43:f4:0a:bf:e3:2f:9f:2d:2b:ec:45:99:33:48:df:
                    ab:24:32:f2:8a:ec:c5:d5:d6:74:0f:fe:09:f1:23:
                    5f:25:00:f9:5e:c0:91:28:91:7a:f8:d9:2a:ab:24:
                    95:73:21:73:57:a6:e7:a6:fb:84:42:93:dc:c4:98:
                    6c:21:52:4f:73:91:34:ed:68:10:a9:a4:68:32:d3:
                    4d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:10:9F:A9:BE:BC:9A:90:62:5A:5A:90:83:28:B2:3D:E5:32:CC:D0
            X509v3 Authority Key Identifier:
                keyid:1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5e:85:a2:58:6a:41:65:3b:5c:dd:0b:05:95:f9:05:09:63:
         79:36:f1:eb:22:06:0b:ea:29:51:e2:62:dd:86:b6:66:db:5b:
         18:80:40:06:ab:83:fd:86:b2:72:6e:84:cc:61:53:11:f3:d0:
         f4:ba:2f:da:cd:34:d0:13:40:99:e7:44:58:d8:53:12:8a:db:
         2d:45:7c:b7:e0:26:ab:a8:b2:02:bb:d0:25:4e:c5:be:9b:f5:
         0a:81:cb:1e:61:73:9a:8a:f1:31:e5:81:a7:a3:70:59:07:fa:
         53:f5:dd:08:1c:cf:51:d4:a0:9a:20:37:f2:cb:d9:cf:19:20:
         50:5a:61:5a:cc:63:cf:8a:79:db:da:96:56:e1:f8:f8:0c:5e:
         0f:1d:87:ad:fe:76:8f:cd:12:da:87:29:f1:e1:2c:fe:85:3c:
         dc:ed:70:a1:92:b9:1c:ae:cb:41:8f:df:94:52:ec:c2:80:10:
         05:d2:c2:18:65:61:46:cd:be:f6:5b:01:67:3b:88:a3:bf:a3:
         3f:2a:da:10:c1:16:0f:50:50:97:9e:a5:12:90:47:ce:3a:f5:
         71:4b:64:0e:53:13:16:68:35:d7:23:df:a1:b9:a8:00:3b:a7:
         a1:c1:ad:eb:5a:c1:60:f0:31:1f:22:00:64:e8:e7:c6:62:c3:
         26:88:1f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:11:12 2026 by rpki-client