Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
File:                     HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json)
Hash identifier:          lID2AMbid62tQbXfRWijB1Kclp4IHpWvKhcBKR9NkVk=
Subject key identifier:   A8:77:83:41:A2:25:DD:55:AE:71:38:EA:35:2E:F3:65:D2:34:CF:AF
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Certificate issuer:       /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial:       191F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
Manifest number:          18F7
Signing time:             Mon 02 Mar 2026 00:20:15 +0000
Manifest this update:     Mon 02 Mar 2026 00:20:12 +0000
Manifest next update:     Mon 09 Mar 2026 00:20:12 +0000
Files and hashes:         1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: fqyGFQtKcBL5XrWWjllBzNyzrjBPb1rw82c2IuwSQlQ=)
                          2: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: QSWJtRaUvHeOFFEjg75TUVTs8+hMWvFh5yUB9qsoVJQ=)
                          3: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: LqZilz3sRH43unXJ9onZj0KId84TFQfbYE3+ugFCTrQ=)
                          4: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: 06ihWY4RAfep+lugLLXD1dBLAPrJ/RhAOThXKwZZl+M=)
                          5: A2BE54D2228B11F09A2FAA12C4F9AE02.roa (hash: /2Z80LXBeUbBKZ/WW3vinBmiiVL6JICT+hojjGMo/tU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
                          rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6431 (0x191f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
        Validity
            Not Before: Mar  2 00:20:12 2026 GMT
            Not After : Mar  9 00:20:12 2026 GMT
        Subject: CN=69a4d7be-e567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4e:b2:ef:16:9c:6f:40:54:cf:35:80:0e:b2:
                    4a:ca:c1:28:35:56:cf:bd:69:45:85:2f:d6:c6:73:
                    99:7a:71:fc:13:4f:e8:03:ca:0c:99:ac:2a:be:ac:
                    fa:d1:f8:e8:07:1e:da:2b:d2:e0:51:c6:4c:44:bc:
                    ee:cf:bc:f3:17:3a:37:52:3e:a5:a7:34:4e:08:8e:
                    77:ca:56:48:01:12:ca:74:dc:c2:7a:c6:7f:21:d7:
                    db:59:92:ae:f1:1f:a8:09:db:c8:16:60:1e:9a:9c:
                    60:90:88:d7:16:62:fe:65:ac:17:b4:ad:41:69:ee:
                    e8:28:30:68:eb:3c:15:32:b2:ec:0e:cc:bf:f4:1c:
                    09:db:4e:2b:2f:90:e2:a5:5c:04:4c:da:b0:bf:ac:
                    cc:35:be:e6:0c:3a:cb:d3:e2:c3:53:a8:0e:91:05:
                    fb:e7:02:1d:dc:a7:e7:0c:a2:fd:89:7a:f5:df:7a:
                    83:b8:3a:a8:f2:00:86:19:a7:3c:c7:40:7c:fd:55:
                    3c:96:e3:bb:03:56:63:0f:8e:16:99:67:94:25:c2:
                    d4:e2:f9:f7:98:98:bb:fc:96:df:08:fb:47:94:d1:
                    bf:8c:79:1e:28:2f:1d:30:3f:1e:03:85:76:ae:94:
                    84:b9:d2:f2:e0:91:5a:20:3f:0f:d9:db:d0:d9:0d:
                    8b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:77:83:41:A2:25:DD:55:AE:71:38:EA:35:2E:F3:65:D2:34:CF:AF
            X509v3 Authority Key Identifier:
                keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:2f:5d:0a:04:52:95:2e:7b:f4:a4:60:55:ec:54:79:30:37:
         52:ac:53:77:0c:2f:1f:f6:2b:4e:f9:ef:b7:74:20:23:da:c7:
         89:1b:48:6d:50:50:92:9c:07:0c:74:d2:30:cf:89:70:e5:9d:
         e1:ad:d1:10:30:a6:5e:cb:b5:ff:ed:ae:02:fc:45:ea:4e:09:
         02:41:bf:1e:1e:55:bb:96:79:ea:7f:54:cc:88:88:a3:fa:02:
         93:d3:21:43:e0:a8:44:ec:d5:bf:71:e4:45:b6:57:9d:68:bc:
         64:ba:0a:56:ea:37:90:e9:6e:00:07:4b:35:d2:65:42:b0:f2:
         30:0b:fd:c5:8d:07:58:28:e2:cd:bb:86:9b:a4:07:5d:60:57:
         52:7a:2c:34:1d:12:a1:ab:14:e1:30:3e:bb:8e:ce:10:95:76:
         44:b9:f1:b7:66:bc:79:6b:7d:e0:a1:e7:37:ea:f7:e9:c5:1f:
         15:e1:63:f5:64:1a:a3:12:ba:cc:dd:f0:a3:82:b9:f3:31:57:
         4b:8b:37:bd:94:c8:84:b6:a1:bb:b3:db:a5:e6:1a:20:59:02:
         6d:9e:db:5b:2e:ec:83:74:49:a8:82:ca:0a:0a:2d:60:08:74:
         aa:3a:47:f4:65:e2:4e:5e:bd:9a:52:19:b5:6a:65:96:8e:1d:
         ec:20:32:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:30 2026 by rpki-client