Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
File:                     hHBzG4maje6yn-pRuQ3BWNvaKvA.mft (raw, json)
Hash identifier:          XoBF2dgDeoYXDBq2pvaHZs/Y7j32x8YX44A/0a81TZU=
Subject key identifier:   B4:98:CA:65:2D:0F:0C:3F:BF:D8:DA:07:38:43:6D:90:21:6A:3B:CB
Authority key identifier: 84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0
Certificate issuer:       /CN=A914AF32/serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
Certificate serial:       146B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
Manifest number:          1454
Signing time:             Tue 28 Jul 2026 16:58:41 +0000
Manifest this update:     Tue 28 Jul 2026 16:58:40 +0000
Manifest next update:     Tue 04 Aug 2026 16:58:40 +0000
Files and hashes:         1: hHBzG4maje6yn-pRuQ3BWNvaKvA.crl (hash: 8B3rJ6ytJdQlL58kFdbgbOQgyhGMEw+Th/5RuXlpLtg=)
                          2: 813A255423A611F09025FC11C4F9AE02.roa (hash: RaOIdSyJbLBmHHTBAcqvM2xNuH84JM4tWrC9RYmAhrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl
                          rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5227 (0x146b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AF32, serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
        Validity
            Not Before: Jul 28 16:58:40 2026 GMT
            Not After : Aug  4 16:58:40 2026 GMT
        Subject: CN=6a68dfc1-813c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:7e:04:36:c5:f3:61:cc:99:d9:bf:b8:6f:
                    9a:31:b8:e9:66:26:42:75:a9:76:75:c2:5d:bc:17:
                    2d:38:cf:c9:7a:77:b2:c9:f9:a9:4e:be:05:48:3e:
                    44:d2:db:ea:62:e1:70:91:af:7e:d4:8a:df:50:b3:
                    bf:9f:e9:b2:36:85:53:f6:d3:fd:61:8d:c0:35:2d:
                    b7:58:53:5b:ef:07:36:51:7a:43:29:94:60:6d:e4:
                    52:e4:ed:47:de:33:ff:2e:a2:6f:49:6a:e3:d0:8e:
                    e5:ef:24:3b:1e:80:bd:fc:5d:e4:7e:f9:94:86:59:
                    99:56:5f:9a:b8:fa:61:66:03:22:b5:c1:9e:7b:05:
                    4f:53:ea:64:f8:ca:b0:a5:9d:db:7f:51:43:c3:12:
                    8b:c6:da:5d:27:14:4c:89:01:f1:84:cf:e5:94:41:
                    5c:91:8f:6a:7c:6e:fc:4a:51:42:d0:86:a3:43:6f:
                    7d:e3:f7:52:e7:70:c9:d6:da:df:98:a9:b7:2e:5b:
                    72:c1:45:5e:62:99:45:13:83:a9:05:07:50:ad:96:
                    4c:50:dc:4c:7a:b2:c6:04:9c:fc:36:8c:12:82:9b:
                    83:93:f3:e7:fe:11:cd:e4:0a:5b:88:27:fa:5c:53:
                    0b:d5:ef:a0:75:1d:af:e7:81:f7:a0:47:fd:18:43:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:98:CA:65:2D:0F:0C:3F:BF:D8:DA:07:38:43:6D:90:21:6A:3B:CB
            X509v3 Authority Key Identifier:
                keyid:84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:03:34:c6:a3:76:3c:78:38:0e:cf:4d:43:75:c8:ae:1d:1e:
         2b:19:35:82:8e:b6:e5:f8:0e:52:83:6d:94:91:55:b8:46:0c:
         dc:43:ee:65:a2:29:fb:56:c7:c2:72:46:af:6b:43:4a:02:f4:
         20:15:ea:5b:da:d6:4d:8a:51:22:6e:47:3d:78:7e:bf:f8:08:
         ea:df:ca:46:c5:ca:27:a9:60:19:be:29:e9:ac:40:17:cf:63:
         1a:f5:7c:e0:98:48:6c:0c:02:02:ba:dc:b6:1c:2c:94:6d:d3:
         2b:42:22:60:de:9c:73:5e:9a:d0:3a:11:e8:a3:b1:2e:bb:3d:
         b8:8d:dc:ce:b8:85:6e:1f:a9:73:5a:b3:ba:37:6b:df:21:c2:
         e7:8f:f5:58:82:b2:17:3c:4c:df:fb:64:b6:f0:4d:84:32:f6:
         d8:76:56:a4:45:e8:de:27:53:7a:f5:78:e1:23:ff:0e:87:1b:
         19:cd:9d:be:88:ef:27:2c:63:4b:32:ff:d4:b9:bd:3d:a8:cd:
         29:6d:cc:f4:74:4b:2a:81:04:f3:91:3d:91:86:29:8e:76:38:
         3c:4b:ed:3d:b1:03:9a:8a:09:db:ed:be:8e:d2:7b:36:a1:6e:
         9a:50:38:1e:69:15:f5:3b:90:11:de:4d:41:54:e1:38:83:c5:
         b0:61:7f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:30:33 2026 by rpki-client