Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
File:                     hTkiUckhyp9RnbkRxagKd9_jVMQ.mft (raw, json)
Hash identifier:          cupYvElZ5kRIrkCOkAASu8tRAtL+z2F3M6qy3U0w+bk=
Subject key identifier:   6A:B8:E8:4E:AA:17:FC:C0:C0:73:77:2F:16:92:43:AA:D4:CA:78:AE
Authority key identifier: 85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
Certificate issuer:       /CN=A915B358/serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
Manifest number:          6D
Signing time:             Mon 27 Jul 2026 10:17:15 +0000
Manifest this update:     Mon 27 Jul 2026 10:17:15 +0000
Manifest next update:     Mon 03 Aug 2026 10:17:15 +0000
Files and hashes:         1: hTkiUckhyp9RnbkRxagKd9_jVMQ.crl (hash: UxiNPLP/VGQVtZRKmlXGySJ7OZjAQha+bA0HyF0gEBM=)
                          2: B1078FAAF1C411F0A342834F396F56BC.roa (hash: +jzkYrDbV9l56QxlBYuE37I0us4Fnv7wiflNV5QShGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl
                          rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B358, serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
        Validity
            Not Before: Jul 27 10:17:15 2026 GMT
            Not After : Aug  3 10:17:15 2026 GMT
        Subject: CN=6a67302b-3ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:e9:12:28:c5:09:5a:e6:f2:f9:55:79:35:
                    eb:08:08:0c:a5:3d:43:ef:bc:5b:1c:b5:8c:b8:bf:
                    59:85:68:7c:ff:98:92:aa:b7:03:29:ab:91:b8:f6:
                    16:d4:fb:ab:5c:7d:b1:63:b5:67:3b:db:ce:03:30:
                    18:55:75:5e:22:54:9a:d0:b1:65:ab:1f:54:ac:85:
                    7d:80:fa:40:57:fe:34:37:2f:51:41:f7:96:72:27:
                    5c:b1:f8:9f:88:ab:90:89:77:34:16:2a:d0:cf:4d:
                    bc:69:7a:45:12:e0:b3:f4:04:31:11:04:d1:5b:c6:
                    fc:3d:03:a1:a3:ab:7f:3a:97:d2:47:1c:2f:89:b2:
                    6d:b7:13:7c:60:23:5e:b1:64:ba:ca:16:ab:ad:fb:
                    8b:91:fd:19:8d:48:05:b6:37:1f:be:8f:00:0f:3f:
                    8f:12:ca:ad:fd:12:88:41:a1:54:67:4a:2b:39:e4:
                    ae:49:42:1c:00:76:74:7e:1d:ab:16:0b:9b:0a:a1:
                    f7:e1:51:b5:15:80:9b:97:38:6c:a7:d3:60:3c:c6:
                    e8:1c:6d:38:c7:82:38:89:72:cc:82:de:7a:47:3c:
                    5a:93:5d:c0:bb:0d:22:9f:51:16:0a:0c:7c:ea:e1:
                    81:d7:24:0b:69:00:81:84:3f:4d:75:5d:2a:1f:55:
                    99:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B8:E8:4E:AA:17:FC:C0:C0:73:77:2F:16:92:43:AA:D4:CA:78:AE
            X509v3 Authority Key Identifier:
                keyid:85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:62:38:cb:bd:8d:70:b3:36:60:eb:3d:47:7d:27:4d:99:93:
         34:99:95:d2:ec:6a:40:9c:84:89:67:0a:ed:eb:a4:d1:8c:b7:
         5c:99:15:af:3c:80:82:ef:56:43:52:9d:1a:d9:1d:d1:17:b0:
         0d:e1:fd:d9:e8:15:91:0a:f6:bd:55:37:e8:22:c1:f9:36:35:
         e3:bb:25:ae:a3:a1:e9:50:de:be:60:29:e3:37:86:5d:2b:bf:
         b8:ce:d6:ea:5b:25:d5:c3:42:f6:ea:5a:ad:0b:39:ab:0f:19:
         fb:7e:91:77:eb:74:30:ff:43:47:a4:f4:a0:28:d2:cd:6e:b5:
         6d:df:ff:98:e7:a4:5e:3e:ed:fe:da:37:44:11:e0:cc:26:93:
         bd:44:4e:f6:a9:89:1e:ac:79:01:da:89:83:0f:4c:c6:42:63:
         6a:a6:74:ad:c0:b2:46:cf:7d:4c:b3:8e:c3:65:b9:c7:e7:4f:
         3e:c8:55:15:b9:46:f1:16:a7:f3:4e:22:f9:09:c6:c5:02:d0:
         be:6e:cc:9a:d6:e3:33:0f:dc:be:b6:d9:ae:1b:f1:5c:2e:05:
         17:7c:dd:0d:6b:80:fb:b3:9f:cd:4f:4d:a4:44:d5:63:0e:c4:
         0b:4c:69:88:da:90:d0:1b:10:6b:0d:dc:31:57:7b:77:ca:65:
         7e:3a:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:16:38 2026 by rpki-client