Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
File:                     HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json)
Hash identifier:          JPu0W1G/5mgR00wZnBL31zhg4CTpEVuEtvCiaEAWAdM=
Subject key identifier:   B8:F4:B6:03:B5:3B:2D:6E:37:34:F0:EF:52:D9:A4:08:C6:96:8D:7D
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Certificate issuer:       /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial:       0A4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
Manifest number:          0A2B
Signing time:             Tue 28 Jul 2026 20:04:56 +0000
Manifest this update:     Tue 28 Jul 2026 20:04:55 +0000
Manifest next update:     Tue 04 Aug 2026 20:04:55 +0000
Files and hashes:         1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: z2PZPuYhLwVksQ6d/tlwHy4U0SFXWoF4oOX3MyJSoGU=)
                          2: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: WcxNaiIGqzItQBb7CYbwvBMMYMGcLD8tEl0Q7aIbezo=)
                          3: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: f4XaB+bRmsoNFuDMRRMiph6D0qfKs6SQvSg9M2XJC3I=)
                          4: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: PEyE0w8+UrcKJlHY3jaK16cYhVK4lg74ijcsWV2DoxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
                          rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2637 (0xa4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
        Validity
            Not Before: Jul 28 20:04:55 2026 GMT
            Not After : Aug  4 20:04:55 2026 GMT
        Subject: CN=6a690b67-e9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:f9:ad:11:15:eb:e1:ac:48:ae:7e:f7:8e:
                    93:78:d6:34:84:fb:2b:e3:26:be:b5:f8:eb:f1:72:
                    94:69:07:72:f4:2e:1d:93:6d:ef:58:9d:fb:6d:aa:
                    e6:2a:1f:c7:36:b2:d9:9c:a4:08:09:84:e8:83:a8:
                    97:ed:26:75:ce:49:49:d7:e5:1f:ad:fe:c8:6f:8f:
                    1a:d3:41:a4:42:c5:f2:80:46:81:6c:cb:3f:c8:e2:
                    20:92:b6:97:9f:24:df:6c:31:2d:cf:ca:c0:37:7e:
                    b0:10:65:fa:38:09:fe:75:25:7e:41:fe:da:92:c9:
                    4c:18:d6:bb:ea:2f:a8:f9:e6:85:cc:af:7d:6e:6b:
                    09:b7:24:65:c3:ff:10:66:56:e0:0d:f0:55:8b:40:
                    7c:27:f7:11:de:b5:d8:dd:d6:40:5a:13:32:d2:29:
                    be:71:e5:b7:63:18:bf:1a:4d:ad:33:28:fd:72:48:
                    90:2e:62:ae:98:7a:f3:ef:35:0b:f7:12:b9:0d:aa:
                    c3:4d:92:4b:40:c8:3b:73:ef:12:3e:5c:53:2f:4b:
                    0e:e1:e4:9a:1c:e5:66:d8:7a:57:a4:c7:11:34:ed:
                    e9:b9:4a:9c:3b:70:4e:3d:ae:51:f8:51:d9:82:31:
                    e6:6b:be:d1:be:86:07:e6:29:f1:53:fe:7c:d5:84:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F4:B6:03:B5:3B:2D:6E:37:34:F0:EF:52:D9:A4:08:C6:96:8D:7D
            X509v3 Authority Key Identifier:
                keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ad:55:e3:79:b1:8a:50:36:7a:40:9c:c6:bf:5d:1a:15:c2:
         ba:0c:bb:9f:d8:19:aa:48:3e:5e:0a:e9:15:8b:c9:c4:17:a6:
         ef:ff:90:19:75:fc:36:ec:ae:5f:eb:8c:2d:f4:17:75:d0:61:
         22:6a:00:8e:6c:a4:08:c5:0c:fa:e5:b2:38:a7:06:71:55:e9:
         3d:b4:5a:70:0e:21:12:90:fc:6f:30:ee:f2:ad:bb:97:1b:8c:
         04:1c:19:99:f0:cf:0b:a1:e3:dd:72:09:0a:cd:cd:d7:b3:c6:
         72:78:6d:2e:ca:d7:38:60:dd:f2:25:13:53:c3:9b:81:e3:9a:
         61:d6:6c:27:23:54:42:04:58:93:da:8a:11:09:d0:20:0f:d0:
         bd:11:27:aa:c0:1d:f3:2b:8b:89:36:20:55:f0:0f:30:42:84:
         f0:a4:2a:ca:12:2b:48:39:78:3c:43:a6:fb:29:b8:21:f8:4b:
         4b:7e:58:d9:26:c6:a6:b3:df:d7:ed:b6:1a:9f:f4:af:06:03:
         23:be:54:80:1d:f3:86:fb:31:d2:15:4c:b4:8a:fa:51:2b:a3:
         82:23:ce:93:46:f5:51:f3:71:2f:af:77:90:ca:9b:34:b8:5c:
         e3:94:42:2a:d9:8d:b8:da:d1:3d:bf:03:c6:04:b2:dd:03:eb:
         f9:08:04:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:28 2026 by rpki-client