Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
File:                     aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json)
Hash identifier:          Ljh9bIsUcW6D6eagmxWXf4tAjWZ0pSZKqLvbIqDNw+w=
Subject key identifier:   33:E0:98:29:AC:5A:F2:46:89:BA:4B:3E:44:8C:46:44:EC:5C:A4:7B
Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1
Certificate issuer:       /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
Certificate serial:       08B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
Manifest number:          0893
Signing time:             Tue 28 Jul 2026 21:11:19 +0000
Manifest this update:     Tue 28 Jul 2026 21:11:19 +0000
Manifest next update:     Tue 04 Aug 2026 21:11:19 +0000
Files and hashes:         1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: XOstKrY3RA0eqBGr6U2MkaEQWcC58erApLOGfnQHAvg=)
                          2: D5775FF4E54F11F0875E48B9366F56BC.roa (hash: dBaY0JbbVzl8W6CAtYQ8b8Su4AnGzP3sLeHSsKnDsdA=)
                          3: 0ED6FD58E4AC11F09CFF02084D6F56BC.roa (hash: c00S8PMH6seb894IcBTA4+jGD8At/7O3wWr5RItqF8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl
                          rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2224 (0x8b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1
        Validity
            Not Before: Jul 28 21:11:19 2026 GMT
            Not After : Aug  4 21:11:19 2026 GMT
        Subject: CN=6a691af7-a143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:c6:33:32:bc:89:51:c9:20:38:49:5c:27:
                    bc:f8:66:fb:7c:87:d7:59:b5:06:42:4a:09:40:59:
                    c9:dc:e9:b1:cf:97:38:e4:83:47:05:6c:48:47:80:
                    e5:85:0e:63:f5:e8:2d:9d:8e:5b:c5:7d:ad:fa:de:
                    00:05:dc:3d:4c:f1:6c:89:dc:37:45:ec:05:44:2f:
                    82:80:17:a1:cf:a2:b7:b4:f3:91:f7:f5:ba:6e:54:
                    04:9d:1c:fc:11:2a:37:e3:c4:f9:aa:bb:ad:95:e1:
                    d1:17:9c:b7:fe:09:b8:b8:4e:df:cf:86:91:02:aa:
                    26:20:7c:77:5a:17:95:2e:ea:f0:1b:ba:9a:0a:12:
                    27:c9:be:6e:62:ec:3b:10:21:1b:c8:74:9c:5b:4d:
                    43:89:32:1f:8c:cc:03:a5:33:f0:72:88:4b:ec:42:
                    54:32:13:6a:de:00:80:98:e1:25:05:ee:17:50:3d:
                    45:6e:c4:d5:ff:99:7a:ec:a5:f3:5a:55:57:93:17:
                    00:25:47:6d:68:c9:90:57:cd:fc:ab:1b:0b:c8:a6:
                    e4:03:8e:0c:44:64:a0:91:d8:98:fc:4f:46:8c:e2:
                    c8:02:81:7c:40:c9:25:26:b6:be:2e:13:c3:63:80:
                    19:f0:e9:7e:eb:7d:bb:3c:c0:45:19:a8:33:a8:2b:
                    8e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E0:98:29:AC:5A:F2:46:89:BA:4B:3E:44:8C:46:44:EC:5C:A4:7B
            X509v3 Authority Key Identifier:
                keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:bf:79:3e:65:f8:63:5b:94:d3:ae:51:f7:39:4b:19:cf:0a:
         7d:ac:b3:25:19:e6:71:ee:b0:37:bb:31:bb:c6:9e:af:5f:94:
         15:8c:75:0a:c8:7d:88:41:3e:c0:2d:cf:93:a5:60:f4:4b:7d:
         b4:f5:b2:49:de:7a:a4:dc:84:61:0e:e8:30:59:d6:28:9e:21:
         e7:ce:2d:c2:1d:7c:78:6d:2d:b1:ec:51:0f:bb:82:9f:23:e7:
         2a:56:67:58:6f:ef:01:d0:a7:da:79:56:f6:e2:8f:42:0f:d3:
         a4:61:f9:b5:51:30:e1:2d:6a:06:9e:68:94:b1:2d:d7:15:f5:
         68:c0:4e:6e:08:b3:5e:7e:0d:e7:cc:af:84:1d:68:9a:89:83:
         66:21:22:32:8a:68:2c:10:c8:9f:16:33:23:04:96:bf:e1:8d:
         cf:d3:91:8e:d3:e1:d5:6a:6d:70:cf:6b:30:00:68:56:92:e3:
         36:06:a3:50:ae:5f:c6:6c:42:39:eb:e5:73:e8:82:a8:45:63:
         22:8f:6d:08:da:43:42:21:28:91:9f:6a:da:01:30:18:cb:3d:
         e5:89:22:2f:6e:e4:fb:02:65:e1:3d:e2:3e:1b:2a:94:94:1a:
         72:d5:95:04:54:5a:63:32:fa:41:d6:70:6d:3b:c1:64:6d:bb:
         d0:cd:6c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:03 2026 by rpki-client