Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
File:                     hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json)
Hash identifier:          VJgXAMprqDBRus7G/DPGzMbkhudl7V5jQMbBgm2s83Y=
Subject key identifier:   DE:E3:F9:C5:5D:EB:B1:F8:63:81:B0:4D:DE:03:0D:7E:25:4E:E0:C6
Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB
Certificate issuer:       /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB
Certificate serial:       0284
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
Manifest number:          027A
Signing time:             Wed 29 Jul 2026 02:57:47 +0000
Manifest this update:     Wed 29 Jul 2026 02:57:46 +0000
Manifest next update:     Wed 05 Aug 2026 02:57:46 +0000
Files and hashes:         1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: l1ZFwmK1BvDdQ7QjldsN4cq77PYBrSLPlYghReX/CN8=)
                          2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: kdVR/T3ew7TyPnhxkEWRlQM3zCM8IzXis0xGyLY9c78=)
                          3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: 05QuhzxS6Rv7IEmh1jeaGvvIDM5pA0OXeqbGhZ+/gWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl
                          rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 02:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB
        Validity
            Not Before: Jul 29 02:57:46 2026 GMT
            Not After : Aug  5 02:57:46 2026 GMT
        Subject: CN=6a696c2a-7bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1f:23:35:11:0b:5e:e1:d8:e3:43:ef:67:88:
                    47:b5:4f:04:94:18:b7:26:ce:b7:b7:e4:0d:e5:3b:
                    38:dd:6c:5a:22:52:bb:ad:61:43:a7:27:27:34:0a:
                    90:d6:3f:06:1c:9c:82:2f:21:fc:cc:f7:1e:b0:b7:
                    e0:ff:1a:a4:d6:b7:ce:13:db:f1:2f:81:c6:ec:0f:
                    03:f1:72:1f:41:40:01:fa:67:ba:e0:0e:c4:57:dc:
                    1f:d0:a3:42:43:ea:b6:1e:f4:7b:e3:8f:01:81:76:
                    27:2b:01:3c:22:93:93:d7:b3:7e:8e:39:5a:2d:6f:
                    5c:cd:bc:81:77:4d:08:cb:55:1c:a2:06:0c:b3:fb:
                    40:f7:8f:81:c7:dd:a0:99:d4:2d:31:15:2b:f0:7d:
                    49:e9:72:60:0f:cf:c6:3c:01:b0:0f:f3:62:1c:d3:
                    c0:0d:13:42:f6:9b:c6:59:ce:16:ae:17:a6:aa:50:
                    eb:e9:58:ea:64:63:44:10:91:ed:c4:02:72:70:49:
                    cd:30:9c:58:8f:83:17:fe:67:02:58:92:c2:e3:4c:
                    0b:db:fa:28:50:4b:99:68:79:73:6e:c0:c4:80:61:
                    8a:d9:a0:ea:db:47:e9:a3:e6:32:9d:a9:84:63:a7:
                    d0:17:cb:f4:d8:24:36:80:64:74:e9:9a:63:ae:32:
                    7e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E3:F9:C5:5D:EB:B1:F8:63:81:B0:4D:DE:03:0D:7E:25:4E:E0:C6
            X509v3 Authority Key Identifier:
                keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:31:9f:34:59:3e:c3:df:16:c8:b0:3e:3d:b1:08:a7:3e:ac:
         34:7c:02:d7:a4:d5:e2:c0:02:57:19:77:a9:a4:40:f9:1e:fd:
         a7:08:17:de:8c:08:a7:54:76:a4:03:16:d3:86:13:a0:b5:62:
         92:9c:36:38:0a:0d:f2:2c:cf:37:14:88:b8:90:4a:4b:30:9e:
         e2:06:c5:4e:01:3b:33:15:35:40:8f:2d:98:bd:49:e4:30:01:
         b3:f4:21:a1:45:d8:38:2e:91:57:ac:da:c4:bf:f7:d9:29:a4:
         f8:97:09:c0:58:ee:d8:db:ba:04:d6:c8:14:3e:6e:f0:09:b0:
         fc:2d:d5:08:64:03:c3:84:06:31:0e:68:19:33:05:aa:0e:91:
         10:2e:99:eb:66:01:27:cb:53:52:a7:98:55:e8:39:ec:74:0b:
         f0:fd:11:34:a6:28:ed:11:1e:61:57:eb:bd:62:8c:e1:8b:2e:
         53:ab:37:56:3e:17:ef:01:98:86:b4:23:d3:25:04:0d:c1:d7:
         fa:13:35:83:60:b6:75:e7:7a:c6:49:2f:19:54:6e:cb:f4:3d:
         91:7f:32:98:b5:3a:39:30:34:26:68:8a:49:43:65:2b:36:cd:
         fe:01:ed:98:1e:3c:0f:52:81:23:03:00:a6:5c:dc:84:b5:6d:
         b1:b3:37:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:31:50 2026 by rpki-client