Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft
File:                     H1rFBrARMMguXkcxYDuiZM7YSGY.mft (raw, json)
Hash identifier:          kIA7MXnEF0iGVDgvWScCEFor6OkK/SH1nxSU7Im65Mo=
Subject key identifier:   EF:29:CA:14:33:B8:4A:B7:9C:92:00:39:BC:CD:E6:7C:5F:B9:3A:AD
Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66
Certificate issuer:       /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866
Certificate serial:       06F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft
Manifest number:          06EF
Signing time:             Tue 28 Jul 2026 22:46:49 +0000
Manifest this update:     Tue 28 Jul 2026 22:46:48 +0000
Manifest next update:     Tue 04 Aug 2026 22:46:48 +0000
Files and hashes:         1: H1rFBrARMMguXkcxYDuiZM7YSGY.crl (hash: gZJqkDr9NjmJPDc++x+JBr9qObpNszqjG6A8WiIDOuk=)
                          2: 25B534D44D5411F18A3BE7BBCC833773.roa (hash: FarsV2MI6tA76PhNRLQoB5llK7wa/XTRgXYRkwTmoiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl
                          rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1783 (0x6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866
        Validity
            Not Before: Jul 28 22:46:48 2026 GMT
            Not After : Aug  4 22:46:48 2026 GMT
        Subject: CN=6a693159-1c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e3:2a:06:37:c4:ae:86:83:22:7e:06:48:ba:
                    57:5e:18:3b:af:d9:3d:74:7d:25:cc:f0:88:06:de:
                    a1:d2:fc:c7:0b:84:e7:4b:9f:d1:4c:f8:ff:68:e5:
                    b6:65:24:17:18:0a:77:30:8d:55:58:bb:3b:ac:d5:
                    6a:7f:d7:81:af:1f:95:16:29:9f:36:ce:6b:be:b0:
                    07:db:fd:36:86:71:2d:e5:06:d2:a7:8c:34:6f:c3:
                    fa:15:02:af:57:de:a4:95:c9:9f:e7:2e:27:b3:79:
                    7d:4e:a8:ba:de:d7:23:9e:10:57:3c:47:5c:25:8b:
                    57:5b:37:3c:e5:af:de:0e:ff:27:43:cc:97:a1:ec:
                    4e:79:4e:0d:a4:49:4d:7f:60:58:b0:b1:52:73:97:
                    cb:f0:75:98:7c:34:00:8b:66:e2:c0:01:b6:af:20:
                    8d:2d:1f:a3:00:53:4d:32:d3:99:b8:33:98:f4:52:
                    3b:b1:4d:f2:9d:a4:3f:1d:c3:cd:70:6f:6f:b4:3d:
                    30:24:ed:22:b9:69:5e:c9:43:7d:45:fb:53:5c:98:
                    a2:03:97:5e:e5:5b:fb:7f:e3:55:50:a0:20:dc:fa:
                    7c:a1:be:d2:f3:53:f3:bd:43:e3:ed:37:43:6b:b9:
                    80:b9:75:55:b5:fc:b9:a3:22:92:7d:41:0e:7e:c6:
                    3b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:29:CA:14:33:B8:4A:B7:9C:92:00:39:BC:CD:E6:7C:5F:B9:3A:AD
            X509v3 Authority Key Identifier:
                keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:35:77:c9:30:91:23:28:72:d0:0e:46:9d:15:2e:33:9e:35:
         dc:b8:a1:fb:be:c5:98:67:e7:21:24:d4:d2:4b:4d:81:ca:e2:
         63:b1:61:86:79:58:75:41:0d:62:c7:53:27:79:cd:9a:0f:c1:
         47:82:1a:3b:e4:a2:3b:73:db:f2:96:35:d6:8f:0e:36:1f:6b:
         7c:d8:b5:c1:9e:de:0b:ea:bb:f6:16:53:cf:ee:95:b6:9b:a6:
         fb:e5:8d:31:ad:26:d3:f7:1e:d8:e3:a0:5d:14:a5:29:8d:d0:
         6b:e9:fe:e6:b1:f2:32:17:1b:d5:1f:8a:03:e1:86:18:12:77:
         fb:bf:7e:94:6f:54:8a:6b:93:84:86:cb:94:1e:41:43:f1:9e:
         ee:a0:dd:7a:c1:56:4d:9d:c6:80:0d:d4:0d:c9:d3:6d:15:28:
         f0:e2:54:07:c0:a7:84:9e:fb:53:fd:c9:ce:20:0d:47:87:af:
         fa:aa:95:a6:70:32:07:1d:e7:2c:ad:a4:6a:7a:27:56:04:6e:
         c8:68:0d:f5:b0:02:74:13:f8:b6:53:2f:62:96:65:e1:a6:ae:
         78:7d:4b:57:91:58:3c:ec:3a:6a:c1:db:40:59:8b:3e:8a:df:
         de:41:df:b7:ba:15:f5:2f:be:0a:32:46:0a:aa:97:60:d0:93:
         ec:8f:09:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:57:03 2026 by rpki-client