Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
File:                     HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json)
Hash identifier:          d/jbFINgke4U3xeA2O6Xtf3XvVCg2tMbtcBwTK9JySY=
Subject key identifier:   41:16:93:60:DD:FC:9D:F0:5D:57:29:B1:99:12:7B:54:05:07:5B:CA
Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8
Certificate issuer:       /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8
Certificate serial:       07EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
Manifest number:          07DF
Signing time:             Tue 28 Jul 2026 21:48:35 +0000
Manifest this update:     Tue 28 Jul 2026 21:48:34 +0000
Manifest next update:     Tue 04 Aug 2026 21:48:34 +0000
Files and hashes:         1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: 52GcTiaxwmSYLOoiaNBuf6leerZAYsgf5CC9gCA/LWM=)
                          2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: xjXTQWH1dcV8roauORyB1NKCDzaqjShTuWoQvdygakg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl
                          rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2026 (0x7ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1257, serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8
        Validity
            Not Before: Jul 28 21:48:34 2026 GMT
            Not After : Aug  4 21:48:34 2026 GMT
        Subject: CN=6a6923b3-2035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:64:07:4d:10:9b:0f:82:29:e4:5d:ed:b9:
                    f7:a5:f4:79:be:1d:c6:07:a1:ba:1e:c6:09:84:d0:
                    fa:84:ef:f9:c9:35:f2:ed:8c:b0:64:64:e2:b0:ea:
                    45:aa:06:a7:04:e6:03:d9:58:54:e5:17:c8:07:d6:
                    cc:f5:a3:89:ff:b9:43:c7:e1:c3:f9:ae:28:c2:5e:
                    60:77:d0:6d:06:65:ab:5c:8d:98:71:55:8f:2e:a1:
                    66:b2:7e:32:de:17:62:42:94:50:6d:63:11:7f:e4:
                    57:2e:57:ba:e5:e8:2b:83:d0:e1:46:0b:c4:ce:30:
                    41:ee:38:44:45:f1:36:e2:88:ad:68:fc:e4:21:fa:
                    a3:d6:2d:1d:d4:67:5e:3e:72:ac:e5:75:49:02:06:
                    17:1a:83:56:78:5d:8b:f3:dd:85:f1:47:47:a1:85:
                    02:3b:71:6f:63:3b:b6:ba:55:e4:f4:0a:d0:7e:7c:
                    e1:0d:57:20:1c:20:23:ad:9a:56:8a:84:d0:e2:3f:
                    90:7d:85:09:28:64:5b:02:54:8a:72:72:4e:fa:83:
                    d1:7a:d3:57:ef:d4:7b:1e:b4:a6:04:f8:b3:8d:30:
                    89:c6:cf:77:56:2d:d9:6a:b9:55:4c:a9:0a:36:95:
                    a4:18:bd:eb:ca:e0:f4:f6:04:fc:e1:30:4a:cc:d7:
                    37:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:16:93:60:DD:FC:9D:F0:5D:57:29:B1:99:12:7B:54:05:07:5B:CA
            X509v3 Authority Key Identifier:
                keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1f:5a:98:cb:04:b2:c1:04:52:80:9b:81:ae:5e:50:fb:b4:
         1c:a0:81:f4:bc:c7:74:79:a6:d9:2e:d6:3c:d6:98:c2:f2:5d:
         a9:c2:3f:af:c6:f2:06:7f:45:f7:3f:67:01:9d:4d:93:46:0e:
         4c:c3:d3:e0:bf:ad:6e:a5:18:dd:d2:bf:45:00:38:4b:35:fc:
         b7:17:6b:b3:a2:28:d0:39:72:15:c9:45:49:26:5b:dd:51:fe:
         5c:b6:07:74:2d:98:b7:83:28:8c:82:42:d7:6e:25:98:99:7b:
         d7:a0:f7:9c:bc:f9:b3:17:2e:74:31:9e:9b:dc:eb:ef:06:2a:
         d4:3d:73:e0:04:09:2e:92:bc:14:a5:c1:81:07:c2:1d:6d:ab:
         7c:61:4f:4a:44:04:f9:5e:31:14:b4:a9:88:93:a6:fa:71:c5:
         b5:d8:4d:d3:ba:e5:de:2f:05:4a:1b:d4:82:78:02:6a:02:58:
         ec:73:40:f8:ea:17:a7:53:00:e0:91:ff:6d:cc:1c:a5:73:ea:
         b1:4a:f6:31:f9:30:47:1a:5b:e6:b4:6c:8b:3d:f2:e6:7e:16:
         e2:7c:95:5f:24:02:f0:16:16:94:5e:0d:c9:69:5e:d2:7c:6b:
         f3:59:70:50:c4:af:d7:57:99:13:bd:bb:5e:a3:ad:67:12:31:
         19:56:2c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:35:42 2026 by rpki-client