Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
File:                     HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json)
Hash identifier:          BCie64ro8HAdtWrlzKcKWVGykK0eGRLFZjxVKKLXplE=
Subject key identifier:   30:A2:31:2D:6C:B9:C9:43:3E:B4:EC:D3:A3:4B:71:A0:52:3C:C6:54
Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
Certificate issuer:       /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Certificate serial:       19F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
Manifest number:          19E0
Signing time:             Thu 16 Apr 2026 16:19:04 +0000
Manifest this update:     Thu 16 Apr 2026 16:19:04 +0000
Manifest next update:     Thu 23 Apr 2026 16:19:04 +0000
Files and hashes:         1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: 8QHBXoZTv0gIpZSPWeJqF5EFv7CI+/1BYgNNSe0dyTE=)
                          2: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: ViCm8rntM/kipc96OmVyQSWm5otXWholJHBWK9um5D0=)
                          3: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: YbJqZlDc5DhntXvk0RSJHoPR1oURQ03ROlcVicrPr9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
                          rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6648 (0x19f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
        Validity
            Not Before: Apr 16 16:19:04 2026 GMT
            Not After : Apr 23 16:19:04 2026 GMT
        Subject: CN=69e10bf8-9452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:4e:09:e0:8e:8a:e4:f1:b3:f0:6a:99:b5:
                    13:4e:dd:53:35:35:3c:9a:0a:f2:c7:78:c2:03:9d:
                    d5:21:db:03:68:a0:9d:09:90:cc:2a:c6:11:aa:6d:
                    cc:ab:b0:bc:bd:bd:31:f5:ce:62:e6:e6:b5:96:37:
                    58:05:cd:ec:c6:dd:b2:c6:79:3b:6f:51:41:57:03:
                    c5:b6:53:95:9e:6c:23:8f:6e:44:d0:4e:49:23:6f:
                    85:ea:91:b9:dd:4c:ec:c6:c2:dc:0a:b0:e3:ea:86:
                    2c:69:55:8f:c9:8d:f2:70:17:15:9c:9d:40:a8:d4:
                    31:f8:e1:7a:21:e2:2a:3a:f4:72:5c:a4:95:37:bc:
                    86:21:fc:ef:0d:d9:07:0a:60:f9:2a:00:ba:30:0c:
                    8e:95:43:27:24:4d:dc:b2:b6:95:9d:c7:03:2a:ae:
                    eb:7e:76:11:e9:26:35:91:83:20:90:0e:fb:e1:94:
                    61:e5:32:b9:9b:c4:f7:46:17:00:80:88:d0:a3:d8:
                    5c:3a:01:3c:70:d4:26:f3:72:d5:44:ce:3e:85:09:
                    2e:a4:44:e8:6a:2d:0f:4f:83:41:96:38:4a:bb:ac:
                    44:d6:47:1a:08:31:4a:49:31:96:e6:44:c8:a0:92:
                    03:b9:25:f4:f4:ef:80:e0:8a:4b:33:2c:47:56:38:
                    7e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A2:31:2D:6C:B9:C9:43:3E:B4:EC:D3:A3:4B:71:A0:52:3C:C6:54
            X509v3 Authority Key Identifier:
                keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3e:16:90:5f:c9:a6:6a:a0:5f:b3:22:67:68:2d:eb:d3:3c:
         b0:1f:6e:43:b5:24:96:59:bd:d5:09:83:c5:60:36:4c:74:ac:
         4f:50:e7:15:d2:07:9b:41:70:d1:64:3b:8e:de:bb:4d:59:31:
         dc:42:f6:59:6b:f3:e2:40:28:38:b5:0f:53:d7:0c:7a:77:1f:
         4b:b6:b1:8f:9c:9c:0b:d3:03:90:60:db:42:c8:d9:7f:8c:1e:
         f9:46:cd:61:62:af:ce:82:b4:79:0f:ba:e1:e3:a5:35:4c:30:
         72:aa:44:03:e0:51:da:b1:5c:ff:24:ee:4a:45:52:d6:31:33:
         09:27:19:96:80:e2:c2:f4:1c:4f:44:cb:7a:06:7a:59:1b:b2:
         c2:3d:73:00:4a:63:1d:54:3f:42:c8:d3:e1:ec:03:18:76:31:
         88:0b:3b:c6:c1:5f:f5:cc:f9:2d:de:9d:b8:ab:e5:b5:4f:a1:
         50:e7:2d:0e:bb:47:f3:c6:4b:86:aa:3f:7d:4c:e1:98:16:1f:
         ac:5e:53:fc:88:86:6f:d1:93:6c:77:b8:2e:ca:39:a7:77:ce:
         cb:10:62:76:9b:2d:29:87:62:9e:93:d9:68:f9:ac:5a:82:a8:
         f4:30:d5:33:42:9e:a1:7c:e0:5c:ba:6b:9b:19:fe:ae:c9:71:
         45:85:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:08 2026 by rpki-client