Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
File:                     hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft (raw, json)
Hash identifier:          yx1mk0lUOSAZGNxGSq+ZL00MXN80+D/TS0+WhhUFA1E=
Subject key identifier:   C8:A2:46:E7:22:53:9D:18:A7:5D:2A:2C:86:62:86:70:97:66:6A:B2
Authority key identifier: 84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A
Certificate issuer:       /CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
Certificate serial:       0B65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
Manifest number:          0B58
Signing time:             Tue 28 Jul 2026 19:28:27 +0000
Manifest this update:     Tue 28 Jul 2026 19:28:27 +0000
Manifest next update:     Tue 04 Aug 2026 19:28:27 +0000
Files and hashes:         1: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl (hash: eQLJ6vPY0SPKDO2kTnjkxPeVvpH8OfUcYPqYDozdv0E=)
                          2: BF77D1785DCB11EA880A7643C4F9AE02.roa (hash: A0fYtG6N2BexE9W0qntrNVFN6Gcpgpfkbf4hLPy3YFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl
                          rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2917 (0xb65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EC78, serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A
        Validity
            Not Before: Jul 28 19:28:27 2026 GMT
            Not After : Aug  4 19:28:27 2026 GMT
        Subject: CN=6a6902db-0766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2e:13:d6:c6:27:bd:3c:ac:f7:25:51:c0:4f:
                    68:f6:6a:f7:d8:70:60:17:8e:d7:60:9d:6e:5c:52:
                    59:e9:25:e0:97:96:33:c7:f3:fb:21:a7:df:9e:74:
                    0d:b2:be:c1:51:27:ad:f1:7f:6c:c5:e0:27:e5:b2:
                    23:75:f3:3c:96:be:f3:b9:ba:56:11:93:ec:6c:1a:
                    b6:05:93:d9:f2:ce:15:94:70:1c:46:06:5a:34:d3:
                    26:a3:44:29:5e:5a:2e:38:cc:66:c5:04:94:28:f1:
                    8f:cc:c0:da:a5:4a:67:37:1f:27:63:98:0d:9b:7d:
                    bd:eb:b1:f1:fc:a6:a1:bd:b7:09:f6:f6:7b:67:23:
                    c2:d9:fc:90:50:3a:3b:d9:89:29:5a:45:de:e9:bb:
                    82:1e:23:55:31:a4:90:4b:a1:a8:e4:70:3a:ab:cd:
                    ed:93:8e:1c:20:6c:bb:57:38:22:40:0c:b8:31:c1:
                    95:b2:6d:84:75:0a:9b:cc:fe:a2:ae:12:96:3a:1a:
                    b8:55:6f:d8:d0:1e:11:79:d1:57:c6:77:51:f8:3e:
                    59:0a:17:64:54:0a:66:86:4e:c8:89:76:5c:3d:f2:
                    73:41:a9:96:3a:d0:f6:d1:80:d2:85:4a:c8:be:30:
                    e4:b7:e4:1c:46:6d:61:ba:dc:ea:5e:7b:1a:2f:9f:
                    39:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A2:46:E7:22:53:9D:18:A7:5D:2A:2C:86:62:86:70:97:66:6A:B2
            X509v3 Authority Key Identifier:
                keyid:84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f2:ca:2e:d9:80:ae:0b:6a:a6:4c:6e:d8:be:73:8b:f4:02:
         0a:61:1c:0d:cd:5d:ed:fa:ec:32:57:7a:28:1d:78:2a:4d:5e:
         1a:04:6c:29:94:5b:f5:ff:d0:02:ac:c1:aa:b2:40:95:36:6a:
         21:c6:db:10:07:df:49:25:1d:c8:cb:fc:cb:4d:31:3c:ca:79:
         eb:95:2d:25:91:41:b6:37:1c:94:59:00:7c:09:78:26:b9:7d:
         08:2a:aa:88:bb:c9:36:3c:b6:76:af:7d:e3:9f:72:75:43:c4:
         73:d3:c1:66:9d:b5:a7:3d:b1:f3:38:12:94:fa:e7:21:2a:86:
         23:40:1b:fc:ae:33:be:c8:b7:b9:29:82:5b:67:da:9d:d2:91:
         75:9f:62:b3:44:42:ed:6c:b3:d3:ce:75:5e:25:65:64:1f:a9:
         3b:79:d3:54:9f:9e:f6:a1:fa:49:09:c8:6f:b0:12:bb:1c:fb:
         61:ba:79:1e:c9:82:ca:8e:03:bc:82:38:01:0e:ab:79:13:23:
         a0:8f:2d:a8:8c:9c:ce:86:73:73:d7:c6:de:0a:8e:f7:55:ea:
         a3:82:da:0d:ce:e3:c5:fe:42:61:b2:fa:b7:c1:b2:f7:c5:a2:
         68:40:9c:d2:28:61:73:ea:1c:3a:b6:3f:a0:97:04:b6:5b:1e:
         45:4e:10:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:37:43 2026 by rpki-client