Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
File:                     H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json)
Hash identifier:          LCtf3g1ErOCIrpkb3TK6rfZFpUVYYK46l/Hf13QhBrA=
Subject key identifier:   EB:3A:34:1F:DA:CF:BD:B0:F5:BB:76:C4:58:B2:D1:23:F6:98:CA:11
Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4
Certificate issuer:       /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
Certificate serial:       04DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
Manifest number:          04D4
Signing time:             Mon 27 Jul 2026 00:47:00 +0000
Manifest this update:     Mon 27 Jul 2026 00:47:00 +0000
Manifest next update:     Mon 03 Aug 2026 00:47:00 +0000
Files and hashes:         1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: 6KVvVedjxRXhYHnNWfQhk/K11+D3Ngpk/xVc1G/RKxM=)
                          2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: JLSpD4WP21I45YnxCYPUZKiI0CXdyL9PtVi/LHX9mJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl
                          rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
        Validity
            Not Before: Jul 27 00:47:00 2026 GMT
            Not After : Aug  3 00:47:00 2026 GMT
        Subject: CN=6a66aa84-8ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:86:da:ad:c0:6c:1d:ca:a7:d2:7f:90:fb:
                    5b:e7:4f:a6:b8:e5:6b:d0:41:c6:e8:9e:e2:35:d3:
                    0b:ae:e7:80:75:9b:78:58:2e:11:73:f6:65:7b:f8:
                    53:39:bb:88:d7:ab:ce:ab:2b:dd:06:05:76:bd:1f:
                    db:89:d4:8e:3a:94:54:bb:e4:78:e3:23:e0:42:39:
                    20:8d:4f:87:2f:0e:4e:36:03:10:7f:aa:ad:18:ec:
                    be:e5:64:39:e8:7b:26:b0:f1:49:52:bc:4d:34:ed:
                    8d:84:31:cb:d8:a9:f7:67:0e:09:cd:b5:b0:cd:f1:
                    60:dc:7d:11:21:67:47:6f:cf:c1:f1:60:f5:aa:56:
                    9d:14:e1:93:d6:71:c4:c2:89:8d:87:98:ee:c8:a8:
                    46:5d:86:47:e4:29:3e:69:dd:07:07:76:74:74:29:
                    d6:7c:51:17:0f:2d:54:58:f3:1f:de:30:f1:44:48:
                    37:ee:31:c9:7f:42:b4:f6:1e:08:72:91:2b:85:b4:
                    e4:ee:29:20:e4:df:1a:e4:86:e1:c3:da:b8:45:c9:
                    23:21:47:5a:4c:f3:11:1b:c2:7d:50:24:5c:f7:bb:
                    64:b0:f7:8e:36:a4:7f:44:7c:b3:dc:0b:09:28:b4:
                    aa:ce:13:6d:b8:8b:22:82:2b:b8:a0:55:c3:fc:56:
                    a0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3A:34:1F:DA:CF:BD:B0:F5:BB:76:C4:58:B2:D1:23:F6:98:CA:11
            X509v3 Authority Key Identifier:
                keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ed:47:74:3f:28:72:05:ae:eb:e8:bc:d4:31:d6:e7:da:a5:
         64:2c:f6:9a:8d:7c:8d:0a:ef:03:cf:bb:0f:4d:c5:f9:66:6e:
         37:29:3d:92:62:17:12:90:d9:c1:5a:dd:d4:4c:23:ec:8a:b7:
         f4:be:d7:ab:9a:51:ea:4f:1c:47:89:b2:43:1c:9a:78:83:f6:
         1e:89:25:d9:9e:68:a9:0c:78:d7:c7:d5:ab:5e:cb:f2:5e:97:
         26:de:5c:41:ae:f7:52:b0:76:45:75:d8:28:91:2e:27:f6:79:
         71:ec:73:ff:b3:1f:cb:d5:1e:8e:f9:99:3d:51:e3:9d:7d:98:
         33:89:87:95:cb:1c:00:3d:cc:c2:75:0f:f1:3b:a6:74:fc:09:
         16:86:d9:b6:ec:cc:07:d6:f5:a6:70:76:f1:b2:93:49:bd:96:
         eb:48:58:ca:7b:46:06:69:3b:52:f7:ec:e3:b0:59:70:b2:3b:
         e8:3e:b7:83:1c:75:b8:07:a2:b9:76:a2:89:07:d5:e8:54:9c:
         81:16:82:b9:dd:cd:04:4c:fc:1b:04:85:73:2f:97:92:77:42:
         9b:12:66:25:b9:01:ad:0b:3a:30:2b:57:02:48:9d:5d:a3:35:
         41:15:16:3f:27:d3:51:6a:25:2b:ae:ce:e0:2b:7d:1c:4c:65:
         37:ad:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:20 2026 by rpki-client