Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
File:                     hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json)
Hash identifier:          QJU1YPQv3Wl+NDi7hxWw57Xy19TiXHgDhSK0KeVlHRU=
Subject key identifier:   F7:8D:35:17:A6:0E:30:B2:D6:98:C5:E9:2A:FB:34:41:D1:26:59:D1
Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
Certificate issuer:       /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
Manifest number:          0188
Signing time:             Mon 27 Jul 2026 06:21:38 +0000
Manifest this update:     Mon 27 Jul 2026 06:21:37 +0000
Manifest next update:     Mon 03 Aug 2026 06:21:37 +0000
Files and hashes:         1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: /IwuRQVzwuLHasguJW3xMI+Zuf+6Ic+91DTRbntEAqA=)
                          2: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: 9GZpU2PHliAK9NY+OWOq5Tt+JHpwX/IWIj0455bKALU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
                          rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
        Validity
            Not Before: Jul 27 06:21:37 2026 GMT
            Not After : Aug  3 06:21:37 2026 GMT
        Subject: CN=6a66f8f2-5756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c1:8e:2f:4f:dc:25:e0:5a:02:af:d5:d0:b9:
                    a0:46:64:d1:af:80:e4:96:b7:f0:65:7d:9d:b4:7e:
                    df:5f:15:21:dd:64:44:6b:fc:e9:9d:f8:a7:64:b6:
                    02:25:2e:16:10:f2:24:f9:fd:23:8d:be:e1:f7:9a:
                    be:f0:aa:17:a9:77:23:6c:19:18:82:15:4d:a0:91:
                    70:bb:28:b2:87:f5:86:9b:a9:1c:ab:e0:90:97:c1:
                    7b:62:4d:f9:ce:57:6e:6a:ec:99:ac:08:35:a0:ec:
                    e0:10:dd:96:69:b0:01:0f:e7:c7:65:ab:51:fd:fc:
                    73:ff:93:30:c9:42:84:43:74:9c:90:9a:15:88:01:
                    13:8d:29:d0:80:2e:72:83:2f:2b:f2:3a:3f:c7:18:
                    97:b7:f1:33:6d:80:71:08:17:33:e7:af:01:56:6c:
                    49:b5:53:7c:5f:e6:b6:73:24:04:37:f9:50:9e:82:
                    85:f3:9c:60:87:eb:ed:e9:d8:01:af:f4:50:bd:48:
                    04:89:54:d9:77:ac:b1:6f:65:9b:64:a5:99:0e:87:
                    a4:ea:ef:8e:48:62:84:91:81:55:ba:23:1a:15:56:
                    24:9c:db:1d:51:dc:96:a8:a1:46:79:82:64:cc:90:
                    81:04:af:49:ad:19:29:18:8e:5d:cf:91:be:37:07:
                    ff:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8D:35:17:A6:0E:30:B2:D6:98:C5:E9:2A:FB:34:41:D1:26:59:D1
            X509v3 Authority Key Identifier:
                keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2a:81:5a:85:bc:e6:e2:f9:20:88:32:19:5d:70:44:b3:00:
         41:8c:96:0b:ea:14:d0:d4:be:c5:d5:bd:3b:f1:c2:a1:65:26:
         8c:13:b7:34:42:9d:90:0e:4c:15:ff:48:70:69:43:9e:52:2d:
         cf:d4:1d:6e:75:aa:f4:39:a9:24:82:be:c9:30:87:af:62:15:
         f1:a4:29:67:be:c6:12:de:5d:27:00:fc:c8:b8:bb:6d:2f:dd:
         b3:d6:4b:74:b4:ad:4b:f3:e3:fe:93:a6:15:f9:8d:e3:ef:7c:
         57:3e:88:e5:8b:5d:d6:97:de:5e:71:e2:a0:f5:f9:eb:9b:b3:
         e0:a9:b6:60:b4:cf:5f:9c:dc:bb:51:0f:77:7f:0e:84:e5:e9:
         f3:88:37:f0:b9:e8:a6:e1:51:83:d7:0e:19:72:42:63:5b:94:
         6e:7d:60:8c:2e:b6:23:0b:7c:4d:b5:ff:9f:22:87:b6:15:5e:
         b1:f0:3e:42:cc:4e:15:69:b9:be:34:9e:d3:2d:6c:8f:e0:3d:
         84:c5:5d:35:a2:cb:d9:a5:20:d7:0c:92:58:3c:5a:17:73:e0:
         05:96:d4:33:4d:f3:46:fd:6f:c2:fe:48:d3:ff:7f:44:a0:41:
         7a:52:dc:32:8e:c5:ee:98:8d:00:19:5f:97:01:d0:f9:f3:ad:
         2f:58:25:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:17:46 2026 by rpki-client