Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
File:                     hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json)
Hash identifier:          g9IxqQK06qbPkyV70de1s6aPl6xtxGJblvW8Tl6UAJs=
Subject key identifier:   25:E9:C2:6A:25:1A:99:BD:42:3A:9A:D3:53:E2:CC:E8:49:FF:3D:48
Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
Certificate issuer:       /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
Manifest number:          0179
Signing time:             Sat 13 Jun 2026 04:56:54 +0000
Manifest this update:     Sat 13 Jun 2026 04:56:53 +0000
Manifest next update:     Sat 20 Jun 2026 04:56:53 +0000
Files and hashes:         1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: dx5b/BxSsPIQwyXL6BeL7RFjtCna+Mt+mH0mw9wT8OE=)
                          2: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: 9spWTKwzhxwWPHkdhJR5HEllKF63m9l363gaTe3qP68=)
                          3: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: l1+ZtMv6puo4GNMLOeWesmnYUJqPnxAR7QGxzptAf1s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
                          rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
        Validity
            Not Before: Jun 13 04:56:53 2026 GMT
            Not After : Jun 20 04:56:53 2026 GMT
        Subject: CN=6a2ce316-033b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ee:a8:16:a4:ae:ae:2c:d4:15:e1:5c:0e:bb:
                    2a:e1:79:ef:45:43:65:1b:0f:61:29:96:ee:dd:8d:
                    d3:32:f3:4e:84:19:89:4b:54:db:78:58:a8:b3:6d:
                    d8:a9:eb:bf:4b:ee:9f:6d:f8:91:f1:7d:0e:71:2a:
                    1e:93:64:09:45:cf:75:e7:9a:65:fc:e6:ae:3f:d0:
                    a8:99:79:9c:29:5a:7b:e0:50:16:42:f6:6b:95:59:
                    5a:fd:4d:6d:9b:d0:e5:50:91:f9:df:25:24:8b:e0:
                    eb:13:8b:04:15:66:be:35:b6:63:45:b7:1b:f4:b8:
                    67:1f:ca:9b:5d:79:44:55:3e:02:4f:63:91:2d:be:
                    9a:f9:93:58:c9:e9:99:64:ad:38:4d:39:b6:d8:39:
                    1d:8c:ce:fd:3c:d1:df:47:1b:8a:5d:8a:53:8f:fb:
                    75:be:62:18:82:30:e3:7a:ca:e7:5d:3f:ae:56:19:
                    c7:be:fb:ec:41:e8:a0:9b:50:64:62:c6:09:df:85:
                    14:72:8b:3f:b0:fe:28:21:0b:e3:65:e5:e7:4f:ca:
                    4e:56:ae:e3:9d:5f:bb:89:52:0f:7e:00:32:a2:48:
                    5c:a4:89:5e:1e:21:a1:52:da:a1:c6:be:be:96:73:
                    71:05:eb:96:17:c3:33:cc:23:16:0d:16:d5:03:d1:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E9:C2:6A:25:1A:99:BD:42:3A:9A:D3:53:E2:CC:E8:49:FF:3D:48
            X509v3 Authority Key Identifier:
                keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:02:e9:9c:f7:73:21:0f:34:84:86:08:b2:00:43:3d:28:81:
         ae:5d:c1:47:32:33:70:38:35:45:f4:94:91:97:70:86:24:f8:
         33:63:82:c1:a6:f9:ae:18:ed:a1:35:8c:0e:60:a4:da:ca:8d:
         46:a5:5b:ba:92:2e:55:3f:3e:2e:8d:c8:75:bd:45:f2:d9:71:
         a7:28:b7:ac:84:58:ea:3f:28:b6:b4:87:77:f5:f7:6c:54:e8:
         1d:08:0f:ac:78:88:a0:d4:fb:88:ac:7e:ed:7d:43:1b:c0:ef:
         dc:4d:e2:30:d6:17:b4:a1:cf:96:82:d0:10:c2:f0:64:7b:05:
         4b:f2:b2:f0:c9:9a:88:a0:7a:66:83:de:25:04:03:7e:df:10:
         99:84:8a:8c:93:43:c9:db:03:b6:b8:e8:6e:0e:0e:a4:62:4b:
         e0:f3:fd:02:25:b4:b6:d8:68:2b:20:41:9f:bd:37:65:3e:4c:
         3e:4a:91:d0:7f:1a:42:ca:06:2a:d1:32:5f:85:b7:7e:97:e4:
         20:53:cf:df:c3:16:f4:53:79:f8:d5:02:b3:7b:cc:f7:f9:3f:
         1e:9d:9b:7c:52:89:9e:1a:07:c3:b9:fd:96:30:c5:b6:08:1f:
         33:c5:da:c0:d7:b8:4e:12:38:70:cb:5a:9c:9a:bf:75:f7:dd:
         e3:a9:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:23:25 2026 by rpki-client