Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
File:                     hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft (raw, json)
Hash identifier:          XgjG9daOsfg7+0ljFkgIkId0TlNLHuyGO2Yf+dENplA=
Subject key identifier:   41:D7:C5:88:67:C0:06:59:AD:C7:95:A7:1A:88:DE:B5:B1:23:71:57
Authority key identifier: 86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65
Certificate issuer:       /CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565
Certificate serial:       1075
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
Manifest number:          105D
Signing time:             Tue 28 Jul 2026 17:30:12 +0000
Manifest this update:     Tue 28 Jul 2026 17:30:11 +0000
Manifest next update:     Tue 04 Aug 2026 17:30:11 +0000
Files and hashes:         1: hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl (hash: FsF9czpSXZMN5vXJrz77ioHU40n5COedLevh3vQdxJ8=)
                          2: 28DA447C289B11EAA1EA9B53C4F9AE02.roa (hash: +QsBublCSi/Ra5CJk1uOnK17kaA8DRCpH5g6/7+9Qrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl
                          rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4213 (0x1075)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A8BE, serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565
        Validity
            Not Before: Jul 28 17:30:11 2026 GMT
            Not After : Aug  4 17:30:11 2026 GMT
        Subject: CN=6a68e724-0cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e5:25:85:02:5b:fc:34:23:eb:48:f4:b4:72:
                    e0:75:15:14:0e:20:30:4d:fe:30:c6:f0:7c:df:99:
                    70:cc:81:5c:7c:43:d3:1d:66:e3:f2:d9:9e:ae:34:
                    1a:cc:15:c1:46:48:db:8b:27:e3:85:e8:49:08:d2:
                    48:bb:de:9f:91:30:61:06:25:c3:ba:87:ec:f2:9a:
                    0a:8d:be:e2:1f:5c:b0:64:ff:2b:87:2b:93:a2:11:
                    dc:64:28:46:8e:a9:d0:c3:05:d2:13:8a:0a:4d:69:
                    56:49:5b:97:1c:4b:03:4c:2a:38:21:07:3f:3d:d7:
                    a9:bb:b3:2c:57:67:0b:d5:d1:bf:11:cf:d4:69:c4:
                    59:95:52:1d:ba:a8:04:46:c1:94:54:f6:03:8c:d8:
                    12:a8:38:83:6d:12:05:e6:f6:c2:e2:c7:19:80:5f:
                    fd:72:3e:eb:c6:d8:5c:b0:2e:7a:92:be:80:ee:a5:
                    a4:eb:dc:8d:08:6f:f8:9c:2b:01:72:6a:14:ba:3a:
                    01:0f:05:5a:1a:e8:4b:91:71:30:80:6c:83:8d:ce:
                    26:f6:a1:f2:96:dd:88:cd:06:c0:2b:1b:32:a7:b6:
                    c9:0e:69:a0:1e:aa:1f:72:17:5a:ec:b6:6f:55:11:
                    78:ce:ba:f5:76:13:78:b2:1f:b3:95:72:d9:7c:50:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D7:C5:88:67:C0:06:59:AD:C7:95:A7:1A:88:DE:B5:B1:23:71:57
            X509v3 Authority Key Identifier:
                keyid:86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:2b:00:9e:b3:75:ee:f8:40:7d:f7:aa:14:c5:90:fa:da:ea:
         d3:05:e2:23:27:30:0f:c6:c9:63:eb:66:b7:8d:f5:69:a6:a5:
         01:9f:d6:ce:1e:43:84:c5:47:1d:18:01:3e:4a:6b:2e:74:59:
         9b:d4:78:56:3c:65:db:a4:79:f6:8e:eb:7a:5a:db:7b:08:3b:
         e0:1a:dd:91:b1:37:c9:90:4d:49:d2:27:cb:ca:00:82:36:9b:
         d3:36:8f:94:0a:4c:a9:41:be:98:d0:3b:73:78:dd:0a:f7:68:
         4e:66:8f:ee:3c:2d:77:0c:af:d9:7d:60:65:14:e2:96:45:88:
         0a:fa:99:8d:73:82:25:1d:b8:2c:dc:a4:1c:8a:07:cb:d3:f3:
         c6:f5:2a:23:40:da:a4:2a:c4:8c:52:67:5e:6e:d5:6e:f9:43:
         e4:2f:0c:83:6b:4d:88:c1:a8:03:58:b3:34:df:ff:fc:a2:20:
         b5:a9:4c:f6:52:9e:9b:ec:ef:88:5d:21:b5:90:eb:3d:33:80:
         78:4a:63:73:3c:c4:12:7f:9c:14:f2:99:10:84:64:bf:18:96:
         1f:a7:1d:87:3c:9b:c2:d3:ee:7e:4a:fa:c2:0b:e0:9f:57:e3:
         b5:42:2f:5e:42:92:42:26:62:01:b0:c0:a1:88:e3:18:df:a9:
         f0:0c:55:86
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE4QkUxMTAvBgNVBAUTKDg2RjJFQkI0QzFFMkU5MEFEOTAwN0M0MjAzNjc2NjI1
OEQ1NDg1NjUwHhcNMjYwNzI4MTczMDExWhcNMjYwODA0MTczMDExWjAYMRYwFAYD
VQQDEw02YTY4ZTcyNC0wY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2uUlhQJb/DQj60j0tHLgdRUUDiAwTf4wxvB835lwzIFcfEPTHWbj8tmerjQa
zBXBRkjbiyfjhehJCNJIu96fkTBhBiXDuofs8poKjb7iH1ywZP8rhyuTohHcZChG
jqnQwwXSE4oKTWlWSVuXHEsDTCo4IQc/Pdepu7MsV2cL1dG/Ec/UacRZlVIduqgE
RsGUVPYDjNgSqDiDbRIF5vbC4scZgF/9cj7rxthcsC56kr6A7qWk69yNCG/4nCsB
cmoUujoBDwVaGuhLkXEwgGyDjc4m9qHylt2IzQbAKxsyp7bJDmmgHqofchda7LZv
VRF4zrr1dhN4sh+zlXLZfFCedwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHXxYhn
wAZZrceVpxqI3rWxI3FXMB8GA1UdIwQYMBaAFIby67TB4ukK2QB8QgNnZiWNVIVl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QThCRS85MDE5RDEyMDY0
MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZRclpBSHhDQTJkbUpZMVVo
V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h2THJ0TUhpNlFyWkFIeENBMmRtSlkxVWhXVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QThCRS85MDE5RDEyMDY0MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZR
clpBSHhDQTJkbUpZMVVoV1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgisAnrN17vhAffeqFMWQ+trq0wXiIycwD8bJY+tmt431aaalAZ/Wzh5DhMVH
HRgBPkprLnRZm9R4Vjxl26R59o7relrbewg74BrdkbE3yZBNSdIny8oAgjab0zaP
lApMqUG+mNA7c3jdCvdoTmaP7jwtdwyv2X1gZRTilkWICvqZjXOCJR24LNykHIoH
y9PzxvUqI0DapCrEjFJnXm7VbvlD5C8Mg2tNiMGoA1izNN///KIgtalM9lKem+zv
iF0htZDrPTOAeEpjczzEEn+cFPKZEIRkvxiWH6cdhzybwtPufkr6wgvgn1fjtUIv
XkKSQiZiAbDAoYjjGN+p8AxVhg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:18 2026 by rpki-client