Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
File:                     Hte4fPVriwDuFD5GlnhQOBTl-lM.mft (raw, json)
Hash identifier:          rZht/Ys+9dpJ47aqPffk+8FFpfI5nDowa7K30HIZBZw=
Subject key identifier:   6A:12:14:B3:DC:EC:5F:51:AC:E1:5B:FA:7B:02:E2:0C:8E:3D:65:A2
Authority key identifier: 1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53
Certificate issuer:       /CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
Certificate serial:       06BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
Manifest number:          06AF
Signing time:             Sun 26 Jul 2026 23:14:34 +0000
Manifest this update:     Sun 26 Jul 2026 23:14:33 +0000
Manifest next update:     Sun 02 Aug 2026 23:14:33 +0000
Files and hashes:         1: Hte4fPVriwDuFD5GlnhQOBTl-lM.crl (hash: z+0daAZriwvM/9waRC1MhVmi4BqaGok+mFHtfidj14U=)
                          2: 694F9F9CBE2811EBBB48FF52C4F9AE02.roa (hash: 1mi94uLEkRDVwmv/sPwzG05IO6gK3xnOgPXRSCc/xws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl
                          rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1726 (0x6be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C0F5, serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
        Validity
            Not Before: Jul 26 23:14:33 2026 GMT
            Not After : Aug  2 23:14:33 2026 GMT
        Subject: CN=6a6694da-23c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:41:52:82:9f:b2:e5:b2:75:81:0b:e3:a9:b4:
                    d3:65:e2:12:d5:1c:d3:14:98:4f:d2:d7:23:1a:8b:
                    ee:e5:71:08:c9:4c:2b:9b:f4:ca:5d:1d:a8:69:51:
                    12:bb:38:ca:a0:cb:08:72:64:1c:c7:94:a4:99:18:
                    bc:d8:4a:e8:09:31:bc:1e:c7:97:60:26:f7:48:00:
                    5c:e8:7e:d0:94:0c:02:59:8a:56:ac:0a:fe:54:c0:
                    50:db:00:8d:f6:4a:c7:db:b3:dd:a7:40:36:82:a6:
                    09:6c:86:6d:72:4f:4a:1b:51:fe:1b:1d:18:b1:cd:
                    1f:9f:e4:5c:39:9c:23:12:bf:a0:af:4a:27:df:85:
                    84:21:1d:1c:0a:b2:46:ed:4b:82:89:ae:fe:0f:65:
                    9e:e7:76:ba:04:c0:29:5b:af:cf:ae:ca:cc:6a:c9:
                    63:52:f1:29:65:32:5a:8d:54:ad:b8:39:64:8b:91:
                    d7:c9:c0:db:f3:cf:e4:12:be:c7:7b:b9:1c:c9:67:
                    a6:7d:12:1d:70:d2:a0:fe:05:7a:48:e0:5b:1e:78:
                    7a:11:5c:b3:c3:f6:39:e9:3d:c4:0f:4a:2a:c3:c1:
                    4d:60:b0:72:9e:9a:d6:af:dd:28:95:2f:6e:9f:db:
                    67:b7:06:58:60:db:2b:a2:3f:30:29:de:f9:8d:7e:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:12:14:B3:DC:EC:5F:51:AC:E1:5B:FA:7B:02:E2:0C:8E:3D:65:A2
            X509v3 Authority Key Identifier:
                keyid:1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f7:7f:87:66:a3:10:4b:78:26:16:73:83:de:c3:b9:3d:ed:
         b6:dc:db:bc:79:3d:e7:18:c1:f3:4f:87:d4:f8:6e:39:59:11:
         07:10:b1:ee:a2:15:7b:94:a7:c4:06:09:8b:1e:f4:78:92:c1:
         28:b8:6a:94:46:b0:c3:df:28:7b:a1:7a:ac:5d:40:27:55:e0:
         46:a7:1c:2a:57:97:f8:20:6f:36:ea:18:d3:32:64:a1:79:b0:
         be:83:72:a4:05:0e:c1:b4:94:6b:25:3a:0d:65:61:0b:fa:d4:
         c3:4d:7e:b9:76:5e:72:54:35:96:28:5b:d7:e4:78:29:86:09:
         de:0e:98:a1:28:8c:e7:8f:d8:5c:8d:66:3b:81:8f:19:90:a8:
         31:17:dc:e5:c5:3d:24:69:81:a4:74:4c:9f:59:ff:64:ac:ad:
         4a:91:44:3d:19:0d:d8:93:b8:59:ba:7b:32:da:96:e9:e9:e5:
         95:eb:5d:9e:b9:6e:b3:10:13:a8:58:22:79:ca:fb:4a:e6:0d:
         73:93:ce:62:20:16:d7:70:eb:87:0b:4e:54:d5:aa:ee:fc:5d:
         e2:0f:78:62:b4:95:5f:17:49:e9:54:a0:c7:08:e1:bb:b3:60:
         33:7f:49:2b:c5:86:5c:2a:cd:95:15:6b:ca:5d:d2:40:62:9d:
         93:c8:45:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMwRjUxMTAvBgNVBAUTKDFFRDdCODdDRjU2QjhCMDBFRTE0M0U0Njk2Nzg1MDM4
MTRFNUZBNTMwHhcNMjYwNzI2MjMxNDMzWhcNMjYwODAyMjMxNDMzWjAYMRYwFAYD
VQQDEw02YTY2OTRkYS0yM2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5kFSgp+y5bJ1gQvjqbTTZeIS1RzTFJhP0tcjGovu5XEIyUwrm/TKXR2oaVES
uzjKoMsIcmQcx5SkmRi82EroCTG8HseXYCb3SABc6H7QlAwCWYpWrAr+VMBQ2wCN
9krH27Pdp0A2gqYJbIZtck9KG1H+Gx0Ysc0fn+RcOZwjEr+gr0on34WEIR0cCrJG
7UuCia7+D2We53a6BMApW6/PrsrMasljUvEpZTJajVStuDlki5HXycDb88/kEr7H
e7kcyWemfRIdcNKg/gV6SOBbHnh6EVyzw/Y56T3ED0oqw8FNYLBynprWr90olS9u
n9tntwZYYNsroj8wKd75jX5bWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGoSFLPc
7F9RrOFb+nsC4gyOPWWiMB8GA1UdIwQYMBaAFB7XuHz1a4sA7hQ+RpZ4UDgU5fpT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzBGNS9ERjAxM0EzMkJF
MjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3RHVGRDVHbG5oUU9CVGwt
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h0ZTRmUFZyaXdEdUZENUdsbmhRT0JUbC1sTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzBGNS9ERjAxM0EzMkJFMjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3
RHVGRDVHbG5oUU9CVGwtbE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUfd/h2ajEEt4JhZzg97DuT3tttzbvHk95xjB80+H1PhuOVkRBxCx7qIVe5Sn
xAYJix70eJLBKLhqlEaww98oe6F6rF1AJ1XgRqccKleX+CBvNuoY0zJkoXmwvoNy
pAUOwbSUayU6DWVhC/rUw01+uXZeclQ1lihb1+R4KYYJ3g6YoSiM54/YXI1mO4GP
GZCoMRfc5cU9JGmBpHRMn1n/ZKytSpFEPRkN2JO4Wbp7MtqW6enlletdnrlusxAT
qFgiecr7SuYNc5POYiAW13DrhwtOVNWq7vxd4g94YrSVXxdJ6VSgxwjhu7NgM39J
K8WGXCrNlRVryl3SQGKdk8hFYA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:04 2026 by rpki-client