Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
File:                     HgeR690MlMNWujc9fg8BYQPUC5I.mft (raw, json)
Hash identifier:          HlsnF3hY4p/Z9FUHzl3QfMuxMf3LQpWfahphyU3PBoQ=
Subject key identifier:   41:FB:B1:95:BF:C8:52:45:A9:3A:75:9E:BC:0B:8B:90:53:94:2B:C6
Authority key identifier: 1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92
Certificate issuer:       /CN=A916D07E/serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
Manifest number:          AB
Signing time:             Mon 02 Mar 2026 01:02:31 +0000
Manifest this update:     Mon 02 Mar 2026 01:02:29 +0000
Manifest next update:     Mon 09 Mar 2026 01:02:29 +0000
Files and hashes:         1: HgeR690MlMNWujc9fg8BYQPUC5I.crl (hash: V8YX/HcNP3LhU9qCAuz3tFEmrIJxyJf2T4NAbYCKxN0=)
                          2: 6014E88A257E11F08DB64644C4F9AE02.roa (hash: F8P/YIAmPajfOLRCSw3O/MamJ0JWaY6aJY2xYJin4yE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl
                          rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D07E, serialNumber=1E0791EBDD0C94C356BA373D7E0F016103D40B92
        Validity
            Not Before: Mar  2 01:02:29 2026 GMT
            Not After : Mar  9 01:02:29 2026 GMT
        Subject: CN=69a4e1a6-5aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:46:7b:0f:10:95:60:39:56:ed:6f:40:44:a6:
                    11:16:fc:b0:ee:b8:91:b0:ce:7c:39:b3:03:7e:52:
                    2c:2b:72:da:eb:20:7d:a2:68:f1:d6:3b:45:dc:b3:
                    97:2e:80:c9:35:04:b6:cd:5b:31:16:b5:37:7d:dc:
                    99:c0:67:bb:3e:4e:22:2f:cb:ff:91:a4:22:48:cf:
                    a8:6b:b6:62:ca:99:e1:5c:d1:b5:f2:88:fe:79:fc:
                    36:b3:8b:a4:db:8e:0d:4b:74:c9:aa:3d:8f:26:81:
                    59:42:52:dc:98:72:39:88:dc:ba:31:d8:58:af:f1:
                    61:a9:1c:b2:2f:93:4a:2f:c3:87:9e:63:32:6c:5c:
                    2a:32:cd:46:b0:9c:d6:be:32:14:52:95:a0:c4:26:
                    30:98:b5:96:31:36:70:28:9f:42:1c:71:ff:29:52:
                    1f:6e:40:6d:9f:a0:27:56:83:80:a6:86:e1:64:0c:
                    6d:4b:ff:f2:5b:da:81:70:cc:b1:2b:9f:52:74:ee:
                    b1:83:6e:14:dc:66:7d:36:b2:53:ca:e7:e0:31:e7:
                    52:a0:70:38:57:01:e3:07:9e:71:38:3e:1b:c6:12:
                    08:d2:75:ff:8f:d0:9d:38:39:7d:e2:db:87:da:0a:
                    9c:d0:71:30:bb:69:41:37:03:ca:0c:32:c7:50:4b:
                    4d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FB:B1:95:BF:C8:52:45:A9:3A:75:9E:BC:0B:8B:90:53:94:2B:C6
            X509v3 Authority Key Identifier:
                keyid:1E:07:91:EB:DD:0C:94:C3:56:BA:37:3D:7E:0F:01:61:03:D4:0B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgeR690MlMNWujc9fg8BYQPUC5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D07E/E023F21E150711F085FB4455C4F9AE02/HgeR690MlMNWujc9fg8BYQPUC5I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d9:96:23:8a:e8:fa:71:04:39:73:04:b0:25:21:d3:41:f4:
         3b:a5:7d:a6:81:9c:6f:19:50:a9:40:f8:55:c8:05:59:2a:15:
         19:5d:85:f7:ce:3c:7e:30:98:b1:ea:92:6f:ec:45:d0:05:01:
         a1:a7:b8:e5:e2:e5:c1:d0:83:a4:fd:5c:a9:9e:73:2d:34:a1:
         2e:74:ef:47:ab:d6:92:94:f3:a2:7b:d8:27:1e:7e:bd:ad:4f:
         15:8f:ec:3a:ef:10:72:8d:5c:7f:1f:f8:f3:8f:21:20:17:6f:
         27:5c:49:70:21:e7:fd:63:28:b6:67:24:ed:db:b5:ef:cc:11:
         69:3c:b1:0b:2c:8b:09:43:2a:1d:bd:e5:d2:ad:f8:5f:94:b7:
         d4:4d:d7:26:1c:b3:7e:5f:e4:15:f1:15:ac:64:c8:e8:f0:e1:
         9f:51:cd:18:29:22:13:b8:3d:6c:ae:31:e5:3d:2d:6c:85:06:
         73:48:21:58:a7:bd:c3:f0:f0:02:cd:5f:99:80:5d:b8:fc:6a:
         7c:e4:74:04:cc:0a:b5:83:ff:91:1d:95:5c:9e:57:ac:13:82:
         21:73:bd:c2:69:31:99:bc:0f:ce:ff:c6:39:98:e1:31:b0:af:
         e0:6b:91:80:c9:8f:22:fc:e0:2a:55:6e:34:3e:84:26:c3:8a:
         3c:6e:83:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQwN0UxMTAvBgNVBAUTKDFFMDc5MUVCREQwQzk0QzM1NkJBMzczRDdFMEYwMTYx
MDNENDBCOTIwHhcNMjYwMzAyMDEwMjI5WhcNMjYwMzA5MDEwMjI5WjAYMRYwFAYD
VQQDEw02OWE0ZTFhNi01YWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0UZ7DxCVYDlW7W9ARKYRFvyw7riRsM58ObMDflIsK3La6yB9omjx1jtF3LOX
LoDJNQS2zVsxFrU3fdyZwGe7Pk4iL8v/kaQiSM+oa7ZiypnhXNG18oj+efw2s4uk
244NS3TJqj2PJoFZQlLcmHI5iNy6MdhYr/FhqRyyL5NKL8OHnmMybFwqMs1GsJzW
vjIUUpWgxCYwmLWWMTZwKJ9CHHH/KVIfbkBtn6AnVoOApobhZAxtS//yW9qBcMyx
K59SdO6xg24U3GZ9NrJTyufgMedSoHA4VwHjB55xOD4bxhII0nX/j9CdODl94tuH
2gqc0HEwu2lBNwPKDDLHUEtNBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEH7sZW/
yFJFqTp1nrwLi5BTlCvGMB8GA1UdIwQYMBaAFB4HkevdDJTDVro3PX4PAWED1AuS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDA3RS9FMDIzRjIxRTE1
MDcxMUYwODVGQjQ0NTVDNEY5QUUwMi9IZ2VSNjkwTWxNTld1amM5Zmc4QllRUFVD
NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hnZVI2OTBNbE1OV3VqYzlmZzhCWVFQVUM1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDA3RS9FMDIzRjIxRTE1MDcxMUYwODVGQjQ0NTVDNEY5QUUwMi9IZ2VSNjkwTWxN
Tld1amM5Zmc4QllRUFVDNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUtmWI4ro+nEEOXMEsCUh00H0O6V9poGcbxlQqUD4VcgFWSoVGV2F9848fjCY
seqSb+xF0AUBoae45eLlwdCDpP1cqZ5zLTShLnTvR6vWkpTzonvYJx5+va1PFY/s
Ou8Qco1cfx/4848hIBdvJ1xJcCHn/WMotmck7du178wRaTyxCyyLCUMqHb3l0q34
X5S31E3XJhyzfl/kFfEVrGTI6PDhn1HNGCkiE7g9bK4x5T0tbIUGc0ghWKe9w/Dw
As1fmYBduPxqfOR0BMwKtYP/kR2VXJ5XrBOCIXO9wmkxmbwPzv/GOZjhMbCv4GuR
gMmPIvzgKlVuND6EJsOKPG6DqQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:52 2026 by rpki-client