Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
File:                     HG_z7AmClLQtl58ltpYFkj4czu8.mft (raw, json)
Hash identifier:          AJff8PnTdjywuWDexcJCWpEB9iFeB/rBoriVw9FrroI=
Subject key identifier:   5C:0D:6D:DF:E3:F2:B0:62:50:10:B8:53:C6:E3:33:1C:AC:8C:61:0E
Authority key identifier: 1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF
Certificate issuer:       /CN=A917C81C/serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
Manifest number:          7B
Signing time:             Tue 28 Jul 2026 23:30:38 +0000
Manifest this update:     Tue 28 Jul 2026 23:30:37 +0000
Manifest next update:     Tue 04 Aug 2026 23:30:37 +0000
Files and hashes:         1: HG_z7AmClLQtl58ltpYFkj4czu8.crl (hash: Q/FkoJM4NyFY9XicFIpHGjpMVFeDF1WVh66CL2033to=)
                          2: EB9160CCDFD811F08F00FF64536F56BC.roa (hash: F8WI3I+cVK027+UsBVl1Tcfy5kv9U/Wvm6A/E5S0bZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl
                          rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 23:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C81C, serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
        Validity
            Not Before: Jul 28 23:30:37 2026 GMT
            Not After : Aug  4 23:30:37 2026 GMT
        Subject: CN=6a693b9e-7e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7c:37:82:50:55:3a:45:bc:06:76:67:4e:bd:
                    d5:22:43:2b:c8:69:f0:a0:a6:27:3c:73:ef:2e:5a:
                    06:9a:4f:e2:d7:b0:6d:73:38:76:10:75:e1:b6:c2:
                    ca:1d:48:30:9f:8b:b8:42:74:47:c2:59:5c:cd:1e:
                    09:54:dd:33:20:51:2d:d0:cf:8a:5d:dd:e0:de:da:
                    28:2f:22:b7:8d:6f:9b:5f:f1:a3:a9:bc:18:19:95:
                    6b:7b:e2:21:26:a3:8f:78:be:2d:d1:d4:83:a1:75:
                    7a:1f:c7:69:b5:b4:3c:60:8c:7b:56:52:1c:31:43:
                    c8:05:fc:0e:78:22:55:68:07:e5:c2:99:4c:ed:f5:
                    12:d0:68:fd:2a:72:91:96:73:3e:be:92:e7:c9:ba:
                    8f:1d:be:b2:18:2a:c0:33:d8:0b:23:00:e8:c9:09:
                    10:19:74:06:37:0e:33:53:e7:03:d7:e5:e7:ea:89:
                    5f:15:0a:69:2a:78:f2:00:5a:53:36:a3:ca:4e:ce:
                    09:cf:be:9b:2e:e3:98:b1:66:4e:bb:b3:0e:99:e1:
                    24:28:fc:5b:9f:d6:7b:9f:65:99:3b:ae:d7:6e:8a:
                    8f:a8:68:16:9c:22:40:17:2b:b1:42:09:4a:2a:71:
                    90:52:2a:92:4d:f0:b3:5b:6f:a0:0d:57:8d:ab:12:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0D:6D:DF:E3:F2:B0:62:50:10:B8:53:C6:E3:33:1C:AC:8C:61:0E
            X509v3 Authority Key Identifier:
                keyid:1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f2:b6:c9:1f:89:85:34:66:21:ab:44:51:cb:c1:59:27:0c:
         33:1c:25:d5:ed:bf:f6:cc:47:ab:13:04:3c:f7:94:f6:fc:65:
         46:81:8f:71:6a:2d:00:4b:f2:9e:bb:09:24:27:37:40:6b:b8:
         2a:33:96:c6:ff:b1:be:f9:0f:c9:c6:71:cd:74:95:3d:d7:25:
         3a:8d:08:fc:ba:cd:6d:7a:b3:2c:d4:d5:7a:06:bb:88:a9:72:
         46:b0:52:19:6b:9a:56:64:a2:6a:2e:ff:ce:99:65:b1:ae:f9:
         44:63:90:82:12:9d:fa:6f:4c:34:10:2d:79:69:6d:ac:5f:a0:
         a3:9e:36:4e:1b:3e:13:2a:db:53:8c:9d:85:ed:6e:77:23:b2:
         f2:5d:25:e5:98:df:7a:26:c9:d0:18:c1:fe:4e:61:23:fe:91:
         6b:2c:0f:03:43:8e:c9:c1:e7:2c:87:6c:c2:8a:0f:8d:50:79:
         31:a7:39:95:86:92:e6:f2:d0:75:e1:88:e7:58:81:f2:89:73:
         a1:82:7d:e2:e6:a2:6c:90:2b:1b:96:fb:df:4a:60:3a:4c:54:
         7d:2f:26:fd:44:6b:7f:9c:09:d3:61:cc:de:be:67:b0:08:2f:
         82:7e:b3:c8:62:d9:6b:1a:d7:4a:7e:43:38:68:6e:34:ec:ee:
         45:78:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:56:19 2026 by rpki-client