Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
File:                     bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft (raw, json)
Hash identifier:          iJHacCmsXvBGtoFTMBKA/enSmW26aFC2hlb88ZFlpCs=
Subject key identifier:   5D:82:EF:01:07:09:E2:A8:7C:96:F3:C4:2B:B2:22:48:30:47:FD:C2
Authority key identifier: 6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74
Certificate issuer:       /CN=A916B232/serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
Certificate serial:       07FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
Manifest number:          07EF
Signing time:             Tue 28 Jul 2026 21:46:32 +0000
Manifest this update:     Tue 28 Jul 2026 21:46:32 +0000
Manifest next update:     Tue 04 Aug 2026 21:46:32 +0000
Files and hashes:         1: bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl (hash: TyreBeFH1W1v1tneO7i/zp67YJOZoaDQD0TTrHQPgck=)
                          2: A2C94D9C3F0F11EB80256B25C4F9AE02.roa (hash: 7C/HtXFs/z0QMgDj00vYWk0uNQg1uQuoBZV2bap4jLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B232, serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
        Validity
            Not Before: Jul 28 21:46:32 2026 GMT
            Not After : Aug  4 21:46:32 2026 GMT
        Subject: CN=6a692338-5e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:f8:c0:61:ee:4b:f0:64:ec:1d:7f:08:42:
                    65:c0:a5:9d:72:9c:5e:ad:6c:92:7c:5b:e8:7f:ba:
                    20:9e:0c:87:98:eb:80:bc:7d:32:bc:e8:15:1e:f6:
                    89:bd:ff:7f:42:ee:8a:8a:61:32:7b:b5:f9:f5:90:
                    ce:ed:68:d5:0d:aa:39:3c:88:40:45:36:5a:87:56:
                    d4:3d:01:b4:98:75:30:48:5a:b9:22:60:69:22:7a:
                    eb:fa:01:1b:df:b5:82:77:f3:26:98:f9:2a:33:83:
                    6d:21:f7:8b:1a:e6:1c:e4:3a:fa:76:25:23:e7:84:
                    1d:59:ce:a9:01:ac:75:a0:a5:16:08:fd:96:ba:21:
                    c0:bb:2a:7c:5c:8f:b9:d8:03:e4:ac:6f:cf:90:ae:
                    8a:99:67:91:06:ec:5b:a6:fd:ec:44:06:fc:06:a5:
                    a2:4c:75:e5:f6:8a:bc:eb:ce:73:ad:7c:9a:09:6b:
                    ae:b7:ce:b2:b1:84:c5:0b:01:97:7e:82:e3:9b:78:
                    57:62:29:17:44:1f:13:6d:f2:af:52:a0:48:44:50:
                    74:d1:4a:f0:25:36:57:08:9e:93:3b:93:02:44:16:
                    b7:5a:b3:67:9b:0f:43:3e:be:17:f9:59:3f:ac:b2:
                    fd:95:1b:f3:30:95:e3:71:b9:af:c1:73:6f:dc:25:
                    c9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:82:EF:01:07:09:E2:A8:7C:96:F3:C4:2B:B2:22:48:30:47:FD:C2
            X509v3 Authority Key Identifier:
                keyid:6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:7d:0e:03:00:05:73:d6:85:e3:14:b4:0a:23:b6:ae:b9:34:
         d2:60:88:9a:bb:92:3f:27:0d:5c:80:bc:32:3d:f0:9f:44:24:
         f2:24:6d:c9:0d:b7:14:35:0c:c4:37:60:c8:57:21:5b:86:02:
         82:b2:7c:82:53:24:a4:a7:78:3e:0a:b2:d3:db:ab:0c:b7:8e:
         33:e1:d5:20:f8:82:8a:4f:87:d9:91:47:93:4b:f7:1e:a5:74:
         b4:c6:ed:2e:7e:f4:41:39:bd:13:7a:99:74:28:5e:30:2f:8f:
         43:82:40:1d:ce:03:e9:c7:02:60:30:39:2e:45:93:e5:ad:8f:
         dc:14:da:89:ac:64:64:ad:eb:34:5e:88:7e:9f:3c:98:18:70:
         87:19:b6:4a:6d:c8:f3:16:a2:6d:2d:aa:63:30:a5:0f:a1:e3:
         38:60:f8:cd:88:9c:e1:73:1c:f9:01:f9:7c:7f:3e:96:7e:cf:
         91:d0:22:86:c3:54:96:85:26:d1:c4:e6:d3:dd:74:f0:0e:1c:
         1f:75:f3:e6:13:69:66:7e:86:32:8c:ad:c1:21:be:94:60:6b:
         fd:aa:47:2b:e6:a3:7d:1d:cb:08:5a:64:86:30:a4:b7:02:14:
         34:74:b4:35:13:9d:40:85:ae:57:6c:70:21:74:99:97:d4:40:
         f7:88:ae:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:48 2026 by rpki-client