Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft
File:                     ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft (raw, json)
Hash identifier:          tE252+lCKic5hfgEu+OyU9blJGR2hEZoi3iLNSzbFac=
Subject key identifier:   A5:61:BD:3C:80:59:0F:B5:7E:F3:0D:5C:5C:71:E3:9B:F1:00:F0:23
Authority key identifier: 86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9
Certificate issuer:       /CN=A916E64F/serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9
Certificate serial:       17F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft
Manifest number:          17E4
Signing time:             Tue 28 Jul 2026 16:38:32 +0000
Manifest this update:     Tue 28 Jul 2026 16:38:31 +0000
Manifest next update:     Tue 04 Aug 2026 16:38:31 +0000
Files and hashes:         1: ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl (hash: Q5QPHBt+ZAY/6wZSRAczCtmWVo0VSJGxbQkh1/C1oX8=)
                          2: 89317668E87B11E785247983C4F9AE02.roa (hash: WoT/UgFr2xPvfCqBZ9PJ+h1sxdlnvxIa74Oqq+fRyVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl
                          rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6130 (0x17f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E64F, serialNumber=868FC8B187BDFD30A70B502F6D149E67869253B9
        Validity
            Not Before: Jul 28 16:38:31 2026 GMT
            Not After : Aug  4 16:38:31 2026 GMT
        Subject: CN=6a68db08-15f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:f2:0d:b0:4b:49:18:79:79:52:e7:73:a5:
                    59:39:b1:7e:a1:dc:33:97:cd:76:05:d4:13:4b:e4:
                    8a:2f:ae:aa:ae:6f:81:85:a2:e2:01:27:b1:5e:57:
                    4a:97:84:2f:19:ed:7e:bb:02:f8:01:83:89:9f:3c:
                    18:bb:ff:70:f1:c5:4a:35:f4:83:24:69:31:77:f2:
                    d1:b1:a1:2f:28:c3:de:1b:33:97:a5:4d:de:42:0c:
                    b7:59:43:f6:28:d4:f0:d1:9e:2f:62:a0:7a:3d:25:
                    20:b5:aa:35:a0:82:c7:28:30:7a:71:b0:bf:2f:10:
                    32:52:85:d1:f5:ef:64:04:db:1b:04:b3:44:2c:27:
                    c0:36:c8:fd:8a:fe:9c:57:99:a6:a6:09:06:91:2e:
                    0e:db:56:e1:6d:45:cd:3e:d3:ae:87:60:be:4a:99:
                    05:90:e2:5e:bc:cf:05:17:d6:a0:04:5e:34:64:e3:
                    45:75:f7:a7:ee:d9:67:5c:6a:d7:0f:18:52:18:d0:
                    40:0d:0e:6e:58:0a:23:1e:0d:e8:84:b5:6c:70:0a:
                    94:2c:34:f9:f6:98:cf:69:39:52:9c:86:7d:21:1b:
                    2f:2f:28:01:00:1f:1f:05:7a:a6:84:db:2a:2d:4e:
                    87:3d:73:61:c3:04:83:9f:e3:b6:a6:e9:d5:aa:ff:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:61:BD:3C:80:59:0F:B5:7E:F3:0D:5C:5C:71:E3:9B:F1:00:F0:23
            X509v3 Authority Key Identifier:
                keyid:86:8F:C8:B1:87:BD:FD:30:A7:0B:50:2F:6D:14:9E:67:86:92:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E64F/DD5C1582E87A11E78F517083C4F9AE02/ho_IsYe9_TCnC1AvbRSeZ4aSU7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bc:74:7c:68:3c:58:79:15:48:1e:02:ed:02:aa:d7:94:08:
         a7:f9:4e:40:d6:b2:fa:11:f2:13:9f:8a:c1:80:43:8e:18:7b:
         d9:73:d7:b0:4e:7d:73:6c:79:ae:b6:83:97:be:0c:83:65:80:
         08:80:b7:12:c6:1b:09:da:5c:a7:21:a3:63:a1:de:18:1b:d3:
         8d:ad:36:5e:ad:50:b3:42:d9:f1:95:2d:65:86:8b:05:9a:0a:
         a4:2f:0d:73:b5:09:88:dd:14:62:25:9b:6d:de:24:89:02:67:
         0f:0f:92:8a:ef:61:ad:14:c3:df:8c:93:4a:fd:1f:15:3d:05:
         f4:02:d9:cf:ca:02:02:a4:e4:3c:d1:21:b9:59:cf:72:be:25:
         8a:3f:10:0a:08:0b:a1:17:46:f7:c4:c9:d9:6e:91:23:3c:98:
         09:23:fb:88:34:b9:22:59:fd:fc:84:16:07:0f:41:80:40:59:
         bc:c0:3e:b9:b1:e2:d0:99:e4:8e:6a:9a:7a:c5:7a:2f:13:a0:
         ca:3d:d9:38:4a:eb:81:f8:14:e0:d4:83:e0:58:87:24:74:65:
         f1:17:87:b3:81:89:ec:9e:5e:80:37:af:e0:3a:1a:58:64:54:
         f8:8c:35:ee:90:d0:eb:f9:b5:61:0b:af:bb:de:01:a6:49:a3:
         87:80:74:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:36 2026 by rpki-client