Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
File:                     hqZPKtLd4rfZYk5pInrQmxd4xsE.mft (raw, json)
Hash identifier:          JB9OUiXDG7NmBNmFBqmmAeqsU8UJ3vtcqP240Go6ejA=
Subject key identifier:   B2:A0:E5:1C:11:11:A9:C4:2F:9E:CC:26:9A:54:60:01:AF:56:7A:07
Authority key identifier: 86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1
Certificate issuer:       /CN=A9169A3F/serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
Manifest number:          0128
Signing time:             Sat 13 Jun 2026 05:38:58 +0000
Manifest this update:     Sat 13 Jun 2026 05:38:57 +0000
Manifest next update:     Sat 20 Jun 2026 05:38:57 +0000
Files and hashes:         1: hqZPKtLd4rfZYk5pInrQmxd4xsE.crl (hash: XfY3tzC3G9wTYoPDgKa9b/H1ruaGumHsfKpYNGZkFiA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl
                          rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A3F, serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
        Validity
            Not Before: Jun 13 05:38:57 2026 GMT
            Not After : Jun 20 05:38:57 2026 GMT
        Subject: CN=6a2cecf2-a9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:54:17:f8:27:63:bf:d7:15:19:ed:47:02:
                    cf:7e:c2:ca:c7:52:7e:18:42:31:37:39:96:d3:3f:
                    52:3c:db:38:41:2c:dd:40:11:31:d8:8b:d0:f3:33:
                    07:0b:6f:7e:85:2d:4e:d4:73:70:cc:89:f7:b3:bc:
                    c6:a2:bb:60:10:de:20:1a:48:c9:4a:c7:7e:a0:52:
                    95:d1:c0:74:15:95:f2:57:a4:20:c4:37:14:3e:0b:
                    2d:69:1f:ac:48:43:c1:05:02:e4:92:2a:65:83:49:
                    4e:0a:27:72:ce:4a:76:43:94:c3:32:e7:9c:87:10:
                    c7:2e:f7:9a:78:3b:b8:17:d4:7a:fe:ad:bf:c6:d4:
                    2b:d5:5c:e8:b4:3d:4e:44:66:a6:ac:fa:af:bb:f3:
                    dd:32:61:8f:45:f5:31:cf:6f:25:a1:d6:46:ed:01:
                    e0:98:42:4a:b8:72:5d:ee:b5:d7:13:fc:35:ad:9f:
                    6f:b4:4e:cf:de:f9:06:a5:ea:57:32:c6:37:4f:08:
                    6a:e7:8a:ba:a2:58:d3:35:35:f5:74:1c:b7:7d:77:
                    d3:8c:08:bc:e8:ed:89:26:7e:db:e5:be:38:00:4b:
                    25:6f:de:97:6e:55:37:ae:70:77:eb:2a:8a:5e:56:
                    69:3e:a3:8e:67:6a:43:1c:e9:41:01:c4:d2:e0:fe:
                    e2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A0:E5:1C:11:11:A9:C4:2F:9E:CC:26:9A:54:60:01:AF:56:7A:07
            X509v3 Authority Key Identifier:
                keyid:86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:75:e9:3a:91:8a:79:93:63:33:cf:6a:1c:02:57:84:ee:2b:
         64:5a:e8:0d:7b:3b:79:4b:23:84:bd:54:42:85:9f:47:97:6d:
         cf:8d:5a:42:38:87:46:d5:b5:8e:86:c9:6f:6a:11:1e:a8:02:
         8d:f4:f9:1f:2a:c0:a7:ff:8c:5f:be:98:00:20:59:fc:13:f3:
         e0:e8:6d:15:52:cb:a4:3a:e4:13:1f:df:10:93:a5:41:7a:45:
         0a:ce:ad:88:a5:c7:27:79:0b:dd:ac:18:fc:0f:14:c5:fc:3d:
         ca:3f:26:fa:21:3b:47:fe:b9:28:bb:13:a0:1d:2d:e4:ab:a0:
         d4:e0:60:f8:15:59:ea:de:ff:6b:c5:60:8e:89:81:ec:a4:f1:
         05:de:bd:19:1f:58:c7:e5:54:b4:54:12:27:8c:04:38:c4:58:
         96:08:0b:b8:9c:a8:69:40:35:ce:6b:74:e1:fe:40:58:de:8d:
         cf:cc:7f:64:04:34:35:6d:36:2f:57:ba:21:41:88:9b:6c:60:
         97:53:b2:56:bc:16:4b:a4:83:a3:89:19:fe:9b:0f:29:79:40:
         88:6c:c2:3b:64:aa:e2:c5:67:80:25:9c:db:a9:d3:ad:96:d8:
         c4:bf:25:ae:b2:a6:d1:1f:52:10:cc:c0:57:89:a0:89:65:96:
         36:e3:29:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:03:50 2026 by rpki-client