Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
File:                     hitzuc41BLC6JB0U_awOxLTkrcI.mft (raw, json)
Hash identifier:          f5VW+IViplz03/ldIbfx4MHKgeE6sinPHy8Yc3MefLo=
Subject key identifier:   A8:3D:E0:7C:EE:77:F4:60:44:A0:2B:58:E8:6D:15:5B:31:6E:D6:8E
Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
Certificate issuer:       /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Certificate serial:       0A36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
Manifest number:          0A19
Signing time:             Sun 26 Jul 2026 20:18:51 +0000
Manifest this update:     Sun 26 Jul 2026 20:18:51 +0000
Manifest next update:     Sun 02 Aug 2026 20:18:51 +0000
Files and hashes:         1: hitzuc41BLC6JB0U_awOxLTkrcI.crl (hash: vMsalM3p1rxJoh3wVsFZWpWP9WRJS9QzoSM8iN7UGkM=)
                          2: 4D0CE5E2707011F1821CCDE576A30FBC.roa (hash: cKfuTAXWipJneptfP/7QaX9LGxrS5QrCTC8BKJ1ip5c=)
                          3: FA57B70A706F11F1A66ABD9E76A30FBC.roa (hash: qhtPC4c3/ihK8zHDitlN/gJrE0SBwNrrJJaKSbliufY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
                          rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2614 (0xa36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
        Validity
            Not Before: Jul 26 20:18:51 2026 GMT
            Not After : Aug  2 20:18:51 2026 GMT
        Subject: CN=6a666bab-14f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:de:ea:21:07:b0:e2:dc:f0:39:6d:8a:91:
                    87:59:d5:08:a7:44:ad:ae:1f:dd:1f:4e:2d:93:94:
                    39:91:89:c9:bc:22:ac:2d:c4:3f:97:c9:b1:26:06:
                    8f:02:af:d5:70:d9:c8:2d:d9:d0:08:fb:be:2c:0b:
                    f4:37:3e:99:d9:12:91:b5:a3:5b:9b:10:47:e2:46:
                    64:52:73:c6:24:75:d2:27:33:b5:b0:51:fb:5a:8e:
                    92:7c:f5:07:77:4e:ce:c0:9c:ca:8c:83:c1:10:10:
                    17:04:12:67:2c:93:4f:33:06:cd:9e:15:32:06:39:
                    8a:52:6e:23:05:61:c4:42:d1:90:51:79:b8:4b:81:
                    cd:0f:25:39:11:2c:4a:04:53:78:83:27:f4:1b:0d:
                    d0:da:d6:c3:36:cd:f2:2d:10:4f:6b:de:09:80:ed:
                    d2:84:bf:16:a2:76:22:ee:38:4d:4e:21:d3:38:16:
                    a8:85:35:34:a7:0b:c5:81:ea:a2:3a:ac:33:de:f5:
                    49:5e:d3:08:11:fe:e2:87:c4:54:ed:a1:00:04:e0:
                    26:92:1c:18:06:2a:0c:be:a5:ee:89:04:de:b2:a8:
                    54:5e:68:45:95:ae:d8:cd:17:3a:89:bd:f6:ab:cd:
                    7a:a4:10:bb:d3:0a:27:55:d4:72:db:8e:3b:bc:6f:
                    72:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3D:E0:7C:EE:77:F4:60:44:A0:2B:58:E8:6D:15:5B:31:6E:D6:8E
            X509v3 Authority Key Identifier:
                keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:76:c1:48:0a:3c:7c:9f:b6:e1:4f:07:e7:4e:29:8c:42:53:
         e3:8f:af:38:f9:40:4d:e7:7b:2e:83:83:79:0c:04:94:7a:1f:
         ad:06:d1:46:35:21:b6:ed:c5:5c:e5:0f:72:0f:3c:e2:05:3c:
         21:79:3a:0c:85:d1:fa:87:ef:9c:e0:79:dd:78:9a:01:f1:f8:
         2c:89:c7:43:d0:88:ca:6b:93:3d:ea:d9:7d:19:93:e8:e4:b4:
         18:3b:c4:0e:18:63:eb:04:ce:46:17:d8:38:ad:87:e6:48:6b:
         52:c7:d1:01:30:ba:2f:96:d2:f6:bf:2c:38:06:dc:23:30:cf:
         3d:8f:e5:88:38:0a:6c:25:ec:80:aa:da:c1:c1:8d:4a:7e:a1:
         30:fa:e4:40:16:be:da:3f:f5:9f:a5:71:dd:d5:ad:6e:a6:e6:
         08:a3:49:a5:2e:1c:76:6e:73:12:b3:38:3f:88:be:64:13:02:
         07:8f:f9:58:76:99:09:5d:de:00:0b:93:62:f2:9e:3f:8a:15:
         4b:30:56:14:09:77:3e:4a:e9:fd:98:b3:5d:38:d1:1e:f8:9d:
         d0:fd:4e:84:ac:a0:25:c2:aa:4e:46:ec:5e:b8:17:9f:a4:a4:
         60:e9:5a:1b:f2:cd:6e:df:f5:7a:08:96:fe:a2:fd:eb:c3:37:
         12:63:62:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:36 2026 by rpki-client