Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
File:                     g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json)
Hash identifier:          u4w3uoM+iWdNHJu7E6kr4KwAsMEBK1sELA4cOF7xhok=
Subject key identifier:   2C:AA:49:A7:E8:FC:82:27:E1:AC:27:7F:5C:46:5C:CB:18:F3:C0:CC
Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Certificate issuer:       /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Certificate serial:       026B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
Manifest number:          024F
Signing time:             Mon 27 Jul 2026 04:04:30 +0000
Manifest this update:     Mon 27 Jul 2026 04:04:30 +0000
Manifest next update:     Mon 03 Aug 2026 04:04:30 +0000
Files and hashes:         1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: dZEK+FUknz7+g7y8mWtq3EQBU4mCjlaLQHWAO/GseKc=)
                          2: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 1di8rNGyqV1ndDBfMBfKTjWY7rtHJTy/ZCp+HJPdtTI=)
                          3: 991CBF9A86F311F1B8F66003A7EE528E.roa (hash: jc4CCB8ZNjD5l8JwMnuS9o09cS9T+3d3PcbaK2GUzrA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
                          rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
        Validity
            Not Before: Jul 27 04:04:30 2026 GMT
            Not After : Aug  3 04:04:30 2026 GMT
        Subject: CN=6a66d8ce-4aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:3e:cd:be:ce:08:5b:c3:e1:04:c3:16:a4:
                    70:a0:c9:21:ca:c6:0e:dd:30:fd:8a:97:b3:f0:19:
                    d9:db:f1:3c:58:0f:83:14:50:25:56:02:d2:b6:cf:
                    cc:63:95:18:44:f5:88:e4:9d:f8:6d:9a:2c:1d:44:
                    27:58:de:d0:93:4f:91:35:95:f1:5e:84:9f:56:8b:
                    84:46:61:d3:f1:4a:48:b6:9a:23:b2:40:cd:4b:96:
                    18:72:cb:7a:03:90:65:f5:ab:f9:09:2b:06:ed:f5:
                    32:d4:a8:9e:e1:2e:1e:86:6f:36:60:27:81:c0:5e:
                    77:7c:0a:8a:2f:eb:b0:ce:5a:90:63:d0:de:a3:17:
                    d8:cb:9e:2a:96:75:61:16:82:c9:3c:00:01:c0:4d:
                    99:66:61:d2:9e:47:1d:34:30:15:85:47:9c:01:3b:
                    1c:f3:51:79:ea:03:ab:76:89:6f:4b:18:8b:30:84:
                    58:02:37:a7:0d:89:fa:9f:0b:3f:22:5d:20:79:d5:
                    d3:18:c2:4d:f9:e6:67:f3:ab:03:19:f6:4e:c1:d0:
                    89:02:d7:30:93:60:76:25:4d:f3:d9:4d:45:98:cb:
                    cb:6d:5f:51:c7:a7:96:08:1c:6a:d7:e8:ee:ef:f7:
                    0b:35:1f:23:94:ed:7c:f1:7d:91:be:f6:19:7c:02:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AA:49:A7:E8:FC:82:27:E1:AC:27:7F:5C:46:5C:CB:18:F3:C0:CC
            X509v3 Authority Key Identifier:
                keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c8:89:56:f1:6c:6a:fb:60:d4:06:ce:f0:1e:63:80:10:81:
         0e:9f:cf:d6:0d:eb:0c:e8:e0:58:26:d3:52:ee:fe:dc:df:8c:
         63:13:12:42:26:98:e4:48:8a:d5:59:c7:83:c6:21:23:c9:d8:
         25:6e:d1:0d:aa:7f:6f:79:6e:33:d7:5a:9d:85:6a:2f:8f:5c:
         a2:9e:39:27:53:02:e4:08:17:c9:e9:33:f5:18:fa:b0:7b:98:
         a1:ad:69:9d:ee:58:8c:6d:72:3c:ef:70:19:f3:62:0b:38:c7:
         84:1b:27:41:1a:33:cc:dd:5c:ca:e5:16:9d:3f:bb:a0:5e:b9:
         44:fc:e3:55:c6:58:d1:7c:40:5c:61:b8:2d:b4:4a:58:f5:b5:
         9c:d0:39:5a:41:0b:21:5b:ab:c5:65:e3:67:9c:d6:59:29:0d:
         9e:f6:3e:9c:ed:8c:c6:e1:7f:5f:70:fe:ba:8a:07:7a:e8:ab:
         3a:9d:4f:7f:2b:eb:1e:3f:35:b7:6c:15:3a:d5:f8:f3:3e:e3:
         65:f8:0f:67:24:c9:04:ef:e1:0f:73:25:e4:8d:bf:98:24:96:
         80:4f:64:23:9b:bc:db:23:cc:08:d8:18:47:e1:65:66:fc:8e:
         c5:7c:4c:46:6f:15:e7:40:1a:c3:99:a1:94:63:ef:94:96:bf:
         55:01:fe:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:47:07 2026 by rpki-client