Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
File:                     HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json)
Hash identifier:          WOazNJo+To/0rKvDV4AncG01cRJhsJ4IQXnmZoLk4vo=
Subject key identifier:   B1:B5:14:7C:71:2F:34:B3:0A:93:72:6F:CA:09:79:04:EB:B8:0A:F7
Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21
Certificate issuer:       /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821
Certificate serial:       0B3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
Manifest number:          0B32
Signing time:             Sun 26 Jul 2026 19:43:02 +0000
Manifest this update:     Sun 26 Jul 2026 19:43:02 +0000
Manifest next update:     Sun 02 Aug 2026 19:43:02 +0000
Files and hashes:         1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: aIqpkzPWgdyGGLqZwUO47VcpaxNzc4TYn58qoMbeaEQ=)
                          2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: vOrOSmJQLIsIatyr7Uv+VT+AWeKNcab4dULnTatya4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl
                          rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2876 (0xb3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821
        Validity
            Not Before: Jul 26 19:43:02 2026 GMT
            Not After : Aug  2 19:43:02 2026 GMT
        Subject: CN=6a666346-6cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:60:0b:b5:bb:a3:28:dc:ed:dc:84:e4:10:63:
                    57:8d:5f:f4:a7:f7:1d:1a:b4:77:17:83:41:ef:c1:
                    28:74:f2:d7:6f:17:8c:22:1e:43:c7:4d:6d:18:83:
                    85:e1:c4:ff:a6:07:98:27:ae:31:6c:1b:a2:9f:45:
                    95:9d:e9:92:e5:8b:8c:19:85:55:d4:32:4d:57:9d:
                    be:0a:d7:16:e4:94:ee:88:83:16:07:43:a1:26:89:
                    ff:0f:49:f4:06:fd:b4:d1:0e:06:39:df:e2:85:90:
                    be:76:04:22:6e:1b:ff:08:a9:15:75:83:6c:ea:06:
                    14:e6:a9:04:49:c4:ce:66:cd:4d:80:81:05:af:54:
                    eb:3d:8e:93:eb:01:78:ab:20:ed:22:23:90:84:50:
                    de:3c:7a:09:11:8d:6e:dd:f3:49:71:cd:10:bd:a1:
                    39:c1:2e:fb:a2:8f:5a:ae:57:f9:0d:e1:53:ec:63:
                    ab:c6:00:0e:cf:c4:e0:b1:cb:eb:8b:bc:74:76:d0:
                    12:ac:ca:7b:c3:4e:90:f0:48:36:8f:93:04:db:c0:
                    b0:a8:56:79:87:93:ba:f2:42:14:af:ad:44:37:52:
                    66:68:eb:de:cd:4b:15:f8:ff:af:09:41:52:af:ee:
                    96:20:02:45:35:da:1d:fb:88:92:1b:5d:b8:74:7d:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B5:14:7C:71:2F:34:B3:0A:93:72:6F:CA:09:79:04:EB:B8:0A:F7
            X509v3 Authority Key Identifier:
                keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:56:00:3a:38:05:a0:26:79:f4:60:e0:68:50:c5:71:d7:aa:
         f6:ba:79:86:de:8b:62:10:bd:df:7c:43:88:38:a8:69:e6:ef:
         9e:c6:26:e6:b2:bc:89:69:b6:3e:b6:36:3b:5e:7e:67:ea:2d:
         61:f4:5b:0d:58:20:3c:4b:2f:8f:a9:5e:e3:90:9c:6e:06:30:
         f1:20:1a:51:3d:d5:68:76:6e:52:11:eb:4d:3f:9a:1a:57:99:
         6c:40:62:60:15:ac:c8:9c:1f:d8:a0:5c:02:8b:61:61:1a:c0:
         a4:25:1b:c6:2a:c8:7d:7a:1b:a7:20:f9:a4:90:86:76:f9:8a:
         e1:d0:5d:1d:83:1b:e1:9b:08:72:63:03:8b:72:7c:5f:28:07:
         fe:55:f3:2c:c6:37:f1:32:e2:71:16:ad:2a:b6:70:fd:58:2f:
         03:cf:c9:38:bf:fa:e6:8e:c4:b1:7a:9c:05:a7:4b:e4:25:de:
         32:e8:ee:7d:fc:af:ed:9c:a9:ff:1c:10:35:99:69:1a:dd:28:
         33:e9:ea:05:35:56:4e:ee:07:05:23:b7:56:74:71:87:28:8c:
         4b:32:9f:d2:a1:34:8f:06:e5:7c:54:cc:26:5a:3b:f1:ab:e2:
         3c:9d:c4:4e:ce:fd:95:98:3a:e1:a7:61:25:4e:f6:a4:c4:fb:
         db:6a:af:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:53 2026 by rpki-client