Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft
File:                     HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft (raw, json)
Hash identifier:          omqDNviv2NNY7zMWQfAd8p1Ox6kPS4KXxGbgtZqYOG0=
Subject key identifier:   D4:01:79:D8:50:18:32:39:2E:EB:28:7E:E1:71:14:D8:1C:87:8F:21
Authority key identifier: 1D:C5:B4:A5:86:01:2F:6C:E5:E9:E0:27:8E:DF:62:88:BD:3F:56:CA
Certificate issuer:       /CN=A914B724/serialNumber=1DC5B4A586012F6CE5E9E0278EDF6288BD3F56CA
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcW0pYYBL2zl6eAnjt9iiL0_Vso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft
Manifest number:          31
Signing time:             Mon 27 Jul 2026 11:00:33 +0000
Manifest this update:     Mon 27 Jul 2026 11:00:32 +0000
Manifest next update:     Mon 03 Aug 2026 11:00:32 +0000
Files and hashes:         1: HcW0pYYBL2zl6eAnjt9iiL0_Vso.crl (hash: KctW3HtdDjYOLNdA/XkyyNss0qLlaHBFdz0Flxc5wuM=)
                          2: C100F7163E2C11F1B54B2550B7833773.roa (hash: rUO3qsc/88dCf3N3rSuzcrdvkCR6cdFGRur986WAffw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.crl
                          rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcW0pYYBL2zl6eAnjt9iiL0_Vso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B724, serialNumber=1DC5B4A586012F6CE5E9E0278EDF6288BD3F56CA
        Validity
            Not Before: Jul 27 11:00:32 2026 GMT
            Not After : Aug  3 11:00:32 2026 GMT
        Subject: CN=6a673a50-c271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1a:05:be:ce:19:f1:90:63:5e:22:e5:29:4e:
                    93:e9:b5:8b:92:4b:62:a2:9d:f9:e8:ca:e6:31:85:
                    4e:df:9f:5d:17:9f:85:04:47:a0:9f:66:59:fd:f7:
                    fe:3a:09:fa:0c:b7:70:0a:2c:ff:33:cc:36:bf:1e:
                    09:57:60:c9:1c:fa:aa:29:fd:b6:9d:71:18:62:be:
                    1b:00:cc:bf:51:84:33:f0:cf:9c:d4:d3:2c:d5:06:
                    50:2f:a0:6a:96:bd:fa:ef:a1:bc:44:92:82:95:08:
                    50:b7:8d:9a:fd:d7:1e:6f:77:45:e0:30:63:63:b4:
                    c3:b6:ed:dd:e5:b5:8c:a2:f7:4a:20:8a:44:be:13:
                    a9:aa:0f:d4:5b:ca:ff:23:47:43:8f:8d:83:03:cf:
                    e7:c5:57:57:9e:34:81:0b:27:44:b6:fb:2c:59:cd:
                    bf:ff:0c:aa:eb:79:f4:b2:59:28:eb:13:12:64:c7:
                    ea:94:fc:23:7e:b8:6e:92:9d:db:76:56:94:1b:d0:
                    d1:7e:ca:ad:97:24:55:79:4d:35:15:d5:66:6f:f1:
                    f9:82:0b:eb:cf:0c:92:63:72:04:92:1a:02:c2:13:
                    8c:8e:e3:af:6e:60:b4:7e:af:48:72:e3:fb:cb:03:
                    c9:c4:1f:a6:a5:61:90:4c:86:af:a9:4e:72:ef:97:
                    e1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:01:79:D8:50:18:32:39:2E:EB:28:7E:E1:71:14:D8:1C:87:8F:21
            X509v3 Authority Key Identifier:
                keyid:1D:C5:B4:A5:86:01:2F:6C:E5:E9:E0:27:8E:DF:62:88:BD:3F:56:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcW0pYYBL2zl6eAnjt9iiL0_Vso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B724/9347AA443E2811F19E8ED4A6B5833773/HcW0pYYBL2zl6eAnjt9iiL0_Vso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4b:7f:71:e3:b3:a4:ec:a7:c5:e7:66:07:2b:e1:9f:fa:e1:
         82:83:4c:c0:bd:7e:7b:1d:a6:78:59:a9:32:57:47:79:16:2a:
         85:db:c7:f0:1b:b8:bf:96:20:c3:d5:fe:30:93:4c:7f:1e:09:
         ab:55:06:b0:d3:73:d5:80:6b:c6:2f:a4:23:f6:f4:eb:c8:d3:
         37:2d:6b:cd:6e:ac:41:09:a7:02:f6:d7:ca:b1:bb:4b:78:b7:
         95:fd:b2:43:57:ca:55:98:e8:53:c3:e3:28:c0:d7:82:38:5c:
         0a:ce:d3:f6:02:06:71:5a:f8:e1:7c:e8:de:72:2a:25:e0:a7:
         56:c2:5b:aa:d6:f1:91:10:bc:bb:fd:eb:33:cb:75:91:8c:3d:
         0d:3a:a0:10:4e:e2:57:09:08:9a:6a:5d:b2:8f:a6:72:33:10:
         7a:20:e1:9b:a9:6e:d9:35:95:cb:79:3c:f1:22:38:02:ba:05:
         65:81:37:ea:55:4f:d8:65:6d:f7:23:2f:c5:d6:be:22:91:2e:
         33:82:19:0c:64:63:1e:2d:b1:77:a4:6d:93:11:a2:17:c3:4b:
         34:5e:ab:4b:2e:f4:24:be:fd:95:e5:f9:7b:82:77:f1:56:86:
         2a:db:b4:15:26:42:c6:e2:b4:65:03:88:86:ef:7b:67:5e:d8:
         a7:d3:ea:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:20 2026 by rpki-client