Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
File:                     I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft (raw, json)
Hash identifier:          rGJf0kvSy3MNANJ3XAPSh24lHpBwm1aq6bV7kGgecgY=
Subject key identifier:   E3:02:F6:7C:78:2D:93:76:E7:E8:4E:2C:57:78:AB:8E:3E:0F:EF:45
Authority key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC
Certificate issuer:       /CN=A9158682/serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
Manifest number:          79
Signing time:             Mon 27 Jul 2026 10:02:42 +0000
Manifest this update:     Mon 27 Jul 2026 10:02:42 +0000
Manifest next update:     Mon 03 Aug 2026 10:02:42 +0000
Files and hashes:         1: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl (hash: co9WBCm8ZAVI2yMGj92BQSi2/PeRDzVtpscxeZgu7Mo=)
                          2: C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa (hash: FWaWZRn2VagzBM02EknVAFE8HgmoQjfzWkVbJA60FRs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl
                          rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
        Validity
            Not Before: Jul 27 10:02:42 2026 GMT
            Not After : Aug  3 10:02:42 2026 GMT
        Subject: CN=6a672cc2-bbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:41:bc:2b:02:9b:df:72:c7:51:8b:d8:41:
                    b9:c1:3d:0e:ee:22:8f:5a:4a:17:ac:ec:d8:48:87:
                    f2:c7:17:26:39:c9:ad:9b:f0:45:c9:56:b2:0b:ed:
                    a3:de:89:37:1c:39:ab:2f:12:a6:fd:7d:d7:36:97:
                    3a:17:da:da:c9:4a:3b:e8:3b:7f:2b:0e:e5:be:03:
                    7b:9b:36:21:4d:d3:2c:3f:9e:13:53:de:a0:04:cf:
                    67:2a:87:02:34:35:7b:aa:c2:b3:9b:51:32:29:29:
                    37:b2:86:26:57:41:b0:27:8b:e3:db:34:7a:6f:ba:
                    be:e3:7a:d4:74:34:62:91:d7:5f:f7:db:3c:60:b3:
                    3e:d3:89:14:7c:14:1d:e6:5a:0a:9f:b2:0d:6b:9f:
                    45:8e:1b:25:f1:47:fd:82:f8:28:c2:95:42:3e:a2:
                    d0:13:d2:dc:95:83:53:7d:3b:10:1d:8b:bc:0e:6a:
                    05:ac:51:38:50:17:d0:f5:a4:74:9c:82:51:78:f2:
                    89:eb:c9:27:95:ed:0d:f5:fa:dd:cc:ff:62:30:7d:
                    27:8e:74:45:a0:43:0d:c2:5b:8f:a0:91:14:43:5d:
                    a4:e6:e4:e6:e0:27:e0:85:c7:e4:df:db:c1:8b:19:
                    7d:32:df:07:da:a6:c8:c8:14:31:f8:7b:1f:9c:ff:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:02:F6:7C:78:2D:93:76:E7:E8:4E:2C:57:78:AB:8E:3E:0F:EF:45
            X509v3 Authority Key Identifier:
                keyid:23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:86:3f:96:39:3d:25:14:6c:82:3b:ca:d3:f6:d2:c6:1b:
         f2:80:cd:96:56:4f:95:40:b5:6b:ee:84:39:af:4b:34:1a:c4:
         71:89:a9:0b:89:7a:3c:fc:08:32:e9:f3:c6:ae:e6:09:84:c7:
         7b:aa:bc:d5:dc:4b:78:c0:7e:9e:25:8b:d5:15:fd:3b:73:fd:
         aa:f7:5e:25:e9:2e:dd:a9:ab:ea:cc:46:f9:ad:37:72:a1:e7:
         c4:ca:5a:29:b4:cd:47:ed:24:b6:dd:5f:1f:fa:5a:8b:09:96:
         15:ed:c5:ea:71:e9:c1:7c:28:97:1d:76:93:ae:39:15:be:1a:
         b8:f4:c4:8d:ac:ee:a8:be:cb:eb:84:bf:43:53:8d:f8:c1:7a:
         ea:78:d9:85:41:7f:5c:ac:1d:47:4a:ac:0f:99:e5:3c:13:91:
         cf:c9:be:df:81:08:54:32:08:b5:7c:f4:4f:1d:ff:74:02:30:
         8e:56:46:a0:77:f0:af:d3:d7:d0:f8:49:8f:9a:23:4e:9a:1e:
         03:61:28:2e:e1:69:b7:2c:67:b2:2a:f3:23:fe:8d:85:c0:ae:
         a2:55:22:a2:4b:01:3e:ba:ae:67:6b:3b:63:3b:94:46:97:ed:
         b3:fa:76:fe:39:88:3c:ce:1c:9b:65:43:6f:da:5f:e9:67:e4:
         ad:62:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:06:05 2026 by rpki-client