Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
File:                     BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json)
Hash identifier:          krBMec+3istROtnB8/52OLbWgm7FW+wpcYUpY8fRGW4=
Subject key identifier:   9D:E4:56:81:C3:99:33:EF:1A:D1:69:58:E2:C1:FB:39:DC:4B:73:9A
Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
Certificate issuer:       /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Certificate serial:       1355
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
Manifest number:          133D
Signing time:             Tue 28 Jul 2026 17:05:28 +0000
Manifest this update:     Tue 28 Jul 2026 17:05:27 +0000
Manifest next update:     Tue 04 Aug 2026 17:05:27 +0000
Files and hashes:         1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: XyMXl3AzhGlg+CWZa3VzBwLZVUpZXSIIkVuQA16ghck=)
                          2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: IAHu/i87YCurf7TsutZ4NJzzxkW8+ff7z519ukOdfYo=)
                          3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: ikwRwX6HznSAvB0gllaQ7OaCqCsraBq8/S0KLelO+q8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
                          rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4949 (0x1355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
        Validity
            Not Before: Jul 28 17:05:27 2026 GMT
            Not After : Aug  4 17:05:27 2026 GMT
        Subject: CN=6a68e157-fbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:9c:b5:77:16:79:7e:ae:71:c8:d5:d8:5d:
                    58:1b:c3:53:1d:5d:7d:d5:11:1d:ac:a1:0c:24:e9:
                    4b:9c:e0:90:f6:aa:eb:e0:6e:08:1a:38:cd:91:93:
                    41:cf:ed:fd:92:f0:96:ed:a3:77:55:9f:bb:3c:d8:
                    9a:9b:5d:24:24:3a:24:ff:cd:2a:95:d9:f3:e2:05:
                    d0:9f:c3:7b:4d:2e:63:68:2e:d3:aa:3b:ec:a5:56:
                    8f:37:d4:61:d5:e1:d1:c2:c0:0c:db:77:1d:f3:a4:
                    03:fd:83:f0:34:ed:0b:39:63:7d:04:3b:3c:43:f9:
                    30:75:30:79:06:74:67:6f:26:c4:0f:12:b0:1c:1d:
                    ea:22:b7:6b:46:e4:7c:08:99:93:6d:ad:0d:63:3a:
                    e8:c0:22:72:ef:ee:62:4b:55:40:af:f1:e9:4f:f9:
                    7b:24:fa:5d:92:37:53:a7:a1:2b:b9:1d:37:c4:42:
                    24:2c:96:bf:96:57:49:85:c1:b9:0e:6c:37:6d:5c:
                    7f:ac:3f:9c:cc:49:67:b7:a5:bc:3a:f2:27:6e:9f:
                    ae:3f:74:4f:bc:28:28:7d:ea:43:8a:c6:48:7f:70:
                    8b:2e:f1:d5:0e:c4:46:24:14:b0:60:19:ba:a4:d6:
                    9e:c9:e1:26:37:03:eb:68:38:d8:cf:09:cb:52:de:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E4:56:81:C3:99:33:EF:1A:D1:69:58:E2:C1:FB:39:DC:4B:73:9A
            X509v3 Authority Key Identifier:
                keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:eb:3e:4d:26:fd:70:2f:ee:63:df:a8:15:92:87:f2:a5:34:
         1d:f7:5f:d7:30:ce:54:89:8c:d9:2a:29:e4:23:c3:29:fa:5b:
         ff:22:ea:26:82:1d:4b:d4:41:f1:f9:fa:50:38:2a:42:30:f4:
         ff:d6:f4:c1:e7:f4:94:74:0e:6f:e0:cc:30:04:a8:0d:9c:f9:
         f4:26:20:70:d0:4d:a3:67:fd:96:ea:5e:db:20:7d:4a:0b:a0:
         22:72:42:3b:2a:d8:77:50:b4:8d:13:4a:e0:1a:79:34:a7:c8:
         8d:0d:d3:bf:86:9b:50:b7:da:ac:23:f6:57:fe:d5:c8:51:ed:
         4b:19:f5:cd:1e:27:14:4f:31:d4:16:d4:50:a6:77:7a:9c:01:
         47:c5:2d:51:25:5f:fa:e1:1f:7d:07:9b:b7:0d:05:b2:74:8f:
         93:e9:bc:56:e3:53:f5:bb:01:40:8a:f4:47:5b:8e:2d:1c:85:
         40:52:62:18:97:f5:48:a2:61:7d:82:c7:38:3d:8c:4a:bc:21:
         19:ef:26:66:cc:6d:ea:79:8e:f4:ee:59:34:a7:d2:c9:d7:43:
         19:d5:1d:ef:1c:61:2b:90:2f:78:30:2b:ab:fa:22:20:41:f3:
         ce:0d:4d:02:a7:b7:26:a7:2f:72:cc:6e:c6:47:c6:56:c0:7c:
         c5:64:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:58 2026 by rpki-client