Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
File:                     Hte4fPVriwDuFD5GlnhQOBTl-lM.mft (raw, json)
Hash identifier:          cdllCXNPMgKcSmweoPKVQl5THXlwSG6sdcL/TWKpCu4=
Subject key identifier:   87:9A:D6:80:EA:A4:BB:24:0E:CC:44:EE:15:34:8E:2A:A3:58:B2:45
Authority key identifier: 1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53
Certificate issuer:       /CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
Certificate serial:       06DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
Manifest number:          06CC
Signing time:             Sun 20 Sep 2026 22:13:24 +0000
Manifest this update:     Sun 20 Sep 2026 22:13:23 +0000
Manifest next update:     Sun 27 Sep 2026 22:13:23 +0000
Files and hashes:         1: Hte4fPVriwDuFD5GlnhQOBTl-lM.crl (hash: Pqj2im5BseYxM+JQBVlg3KjSn3qAoISkGmMxsk7Y0JE=)
                          2: 694F9F9CBE2811EBBB48FF52C4F9AE02.roa (hash: 1mi94uLEkRDVwmv/sPwzG05IO6gK3xnOgPXRSCc/xws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl
                          rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1755 (0x6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C0F5, serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
        Validity
            Not Before: Sep 20 22:13:23 2026 GMT
            Not After : Sep 27 22:13:23 2026 GMT
        Subject: CN=6ab05a83-e374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:5b:db:cb:f9:3e:34:87:1c:da:4e:2b:78:
                    7c:68:68:fa:0a:99:50:08:e7:3b:ce:0b:8a:a8:2e:
                    ed:4d:63:31:90:4f:11:c9:a7:0a:c6:22:07:39:02:
                    98:3f:7f:b5:9d:0a:47:de:f8:a1:10:86:0e:42:b3:
                    b4:82:0f:85:ef:29:c6:59:17:96:5a:28:31:01:19:
                    93:ed:38:00:95:57:f3:55:ff:85:19:af:48:26:cb:
                    68:5a:cb:50:84:4a:82:ee:fc:65:1c:2a:a0:c1:dc:
                    e2:f9:9b:8d:18:20:de:01:a1:cf:fc:01:92:f5:fd:
                    49:a0:11:bd:6f:59:10:59:ff:7f:c1:9d:99:51:9d:
                    58:55:52:6f:dd:9e:66:ff:2c:27:60:9a:f3:51:72:
                    23:e4:32:60:29:1e:fd:13:75:08:f5:a0:14:70:70:
                    64:82:e2:59:92:0c:95:6c:c0:41:ce:13:62:b0:6b:
                    75:7b:aa:49:39:20:9d:9e:bf:66:62:c2:06:3c:b5:
                    65:d5:17:0b:af:53:4a:eb:4e:76:6d:41:28:ad:b9:
                    8b:12:64:5d:dc:f2:21:2c:6f:35:59:a8:34:52:2d:
                    f2:b0:4a:ab:3e:10:42:81:e9:48:bd:b2:0a:35:a9:
                    7b:d0:b6:84:46:25:55:ba:50:e8:75:04:14:89:2a:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9A:D6:80:EA:A4:BB:24:0E:CC:44:EE:15:34:8E:2A:A3:58:B2:45
            X509v3 Authority Key Identifier:
                keyid:1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a1:c1:8a:a0:be:17:7e:89:74:98:47:92:a9:52:b2:61:bf:
         c7:3b:6a:56:c2:77:6a:71:c7:00:6d:7a:66:b5:d0:f8:c5:5d:
         47:a0:3d:ec:cc:1d:b3:92:1e:4c:6c:16:1c:ee:20:eb:08:a4:
         00:6f:f3:0e:48:2d:f6:75:5d:a4:af:86:79:51:5e:d6:1f:87:
         98:3d:f5:fd:97:23:bc:5e:20:e7:ae:0a:fb:91:96:67:9a:d1:
         e1:3f:8b:45:0d:21:1f:9a:2e:45:ab:3a:d1:b5:46:6a:6e:5c:
         8c:fe:af:30:63:5a:9f:08:39:02:7d:54:90:f0:b5:d3:62:9f:
         c0:b7:94:eb:1c:a7:bc:65:cd:28:95:3d:13:b0:7e:be:ac:7e:
         04:d8:e1:02:10:07:a1:ef:2f:e6:5f:ab:c3:69:22:c4:84:95:
         e2:60:a2:71:e6:87:32:b3:da:7b:77:d1:a2:18:b7:69:c4:92:
         d2:bc:fe:96:b9:dc:6a:e8:67:69:2d:51:10:29:dc:84:d2:a5:
         16:e9:28:74:f7:54:32:59:34:58:0e:8b:c2:88:c3:cc:34:43:
         ea:7c:74:78:b4:96:6d:ec:34:66:11:96:6c:2a:a4:4b:d3:80:
         4b:97:e4:d8:7e:37:3a:4c:db:f8:fc:0c:6d:0d:cf:54:ba:51:
         17:9e:c3:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMwRjUxMTAvBgNVBAUTKDFFRDdCODdDRjU2QjhCMDBFRTE0M0U0Njk2Nzg1MDM4
MTRFNUZBNTMwHhcNMjYwOTIwMjIxMzIzWhcNMjYwOTI3MjIxMzIzWjAYMRYwFAYD
VQQDEw02YWIwNWE4My1lMzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Glb28v5PjSHHNpOK3h8aGj6CplQCOc7zguKqC7tTWMxkE8RyacKxiIHOQKY
P3+1nQpH3vihEIYOQrO0gg+F7ynGWReWWigxARmT7TgAlVfzVf+FGa9IJstoWstQ
hEqC7vxlHCqgwdzi+ZuNGCDeAaHP/AGS9f1JoBG9b1kQWf9/wZ2ZUZ1YVVJv3Z5m
/ywnYJrzUXIj5DJgKR79E3UI9aAUcHBkguJZkgyVbMBBzhNisGt1e6pJOSCdnr9m
YsIGPLVl1RcLr1NK6052bUEorbmLEmRd3PIhLG81Wag0Ui3ysEqrPhBCgelIvbIK
Nal70LaERiVVulDodQQUiSpCtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIea1oDq
pLskDsxE7hU0jiqjWLJFMB8GA1UdIwQYMBaAFB7XuHz1a4sA7hQ+RpZ4UDgU5fpT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzBGNS9ERjAxM0EzMkJF
MjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3RHVGRDVHbG5oUU9CVGwt
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h0ZTRmUFZyaXdEdUZENUdsbmhRT0JUbC1sTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzBGNS9ERjAxM0EzMkJFMjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3
RHVGRDVHbG5oUU9CVGwtbE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwKHBiqC+F36JdJhHkqlSsmG/xztqVsJ3anHHAG16ZrXQ+MVdR6A97Mwds5Ie
TGwWHO4g6wikAG/zDkgt9nVdpK+GeVFe1h+HmD31/ZcjvF4g564K+5GWZ5rR4T+L
RQ0hH5ouRas60bVGam5cjP6vMGNanwg5An1UkPC102KfwLeU6xynvGXNKJU9E7B+
vqx+BNjhAhAHoe8v5l+rw2kixISV4mCiceaHMrPae3fRohi3acSS0rz+lrncauhn
aS1RECnchNKlFukodPdUMlk0WA6LwojDzDRD6nx0eLSWbew0ZhGWbCqkS9OAS5fk
2H43Okzb+PwMbQ3PVLpRF57Dkw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:40:19 2026 by rpki-client