Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
File:                     HgqTik3H07rU9fll3NVeCymMQts.mft (raw, json)
Hash identifier:          FGJZ87/pGWCyQLZAiJpYmti940BKgs6soYDQ0VAsCKQ=
Subject key identifier:   47:5F:33:ED:60:D8:F0:F1:FB:2E:DA:07:26:05:F6:D9:DF:07:F0:E7
Authority key identifier: 1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB
Certificate issuer:       /CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
Certificate serial:       0EFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
Manifest number:          0EEE
Signing time:             Mon 28 Sep 2026 17:44:37 +0000
Manifest this update:     Mon 28 Sep 2026 17:44:37 +0000
Manifest next update:     Mon 05 Oct 2026 17:44:37 +0000
Files and hashes:         1: HgqTik3H07rU9fll3NVeCymMQts.crl (hash: vgeJ9552VOYIu00oUWXW/Y3qEhIe9VOZWBJgSxbno2o=)
                          2: 7592203EB1B111E999187E66C4F9AE02.roa (hash: uuj0NeXtofK/Wq7L6uOJQ8Z949+GsSsOfpPni85+dcw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl
                          rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 17:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3837 (0xefd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A4F, serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
        Validity
            Not Before: Sep 28 17:44:37 2026 GMT
            Not After : Oct  5 17:44:37 2026 GMT
        Subject: CN=6abaa785-dc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:a7:2d:1b:ab:8b:ca:23:d1:0e:97:11:8b:ab:
                    9d:03:a7:f9:19:e3:c7:9d:ef:d0:ea:c1:65:57:3c:
                    ab:ea:61:1a:50:2f:1d:13:04:08:b7:78:85:f7:18:
                    0d:ec:d5:36:41:fb:1e:25:b3:c8:af:e2:3e:d3:77:
                    a6:59:58:ed:cf:ed:5e:36:d0:34:52:b2:67:b0:63:
                    3b:fb:c8:0e:a4:68:75:87:06:3e:19:a2:ac:10:c7:
                    62:14:47:2b:c4:20:e1:53:97:69:e5:7e:41:b3:b9:
                    ea:b2:7e:1b:3a:d4:5f:cb:4e:7a:61:ad:b2:18:e5:
                    58:77:e8:3b:bb:cc:05:40:3c:1b:fd:b0:fc:65:86:
                    0d:b2:94:92:5f:91:0f:52:63:59:26:d6:21:a1:50:
                    31:cf:99:fb:e7:dd:1a:1f:e1:e6:0d:cb:c8:e0:12:
                    12:05:c3:8e:4f:b8:07:2e:a2:08:7a:07:07:0f:69:
                    8e:02:6a:5b:ff:5f:4c:17:e9:76:c3:c6:db:41:c9:
                    99:1c:c6:0e:04:c5:0c:a5:95:30:94:e4:d7:13:01:
                    97:14:0c:a5:50:ec:64:03:10:e0:4f:6c:dd:00:68:
                    3a:1f:e4:7a:2c:39:9a:1a:eb:3a:80:1d:77:47:e5:
                    c2:f4:b8:d4:70:61:91:79:16:a5:c7:76:58:29:cb:
                    fc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5F:33:ED:60:D8:F0:F1:FB:2E:DA:07:26:05:F6:D9:DF:07:F0:E7
            X509v3 Authority Key Identifier:
                keyid:1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:48:56:49:b0:cc:f9:a4:ad:e0:5c:36:23:c8:36:62:7b:7b:
         89:92:88:ce:d3:f2:5a:5b:a0:d2:f4:df:58:0c:ae:33:bb:36:
         3e:20:fc:08:b8:f9:f5:d3:cc:d0:17:29:e0:b8:4c:cf:bc:6b:
         73:9c:17:e7:80:7e:40:c3:ca:b1:34:13:35:47:f8:77:6e:a8:
         31:23:53:d5:5b:03:91:73:a2:90:f0:4d:ba:53:b3:c1:4b:72:
         65:b1:13:6b:ad:25:9c:51:db:e6:e1:e3:f2:07:01:8f:07:6f:
         4c:1b:8f:97:ea:0c:a3:af:2f:40:a2:03:ab:a3:15:38:cc:ed:
         9f:a0:58:4b:ea:2a:31:f7:36:2d:33:b4:76:58:bf:22:6a:85:
         c9:c1:1c:1f:82:b0:ef:b8:a6:2a:7f:c2:10:75:86:1b:74:65:
         0f:f5:ac:75:e9:b1:a8:71:6d:4b:91:47:47:50:70:3b:b9:de:
         8b:62:d5:b9:5f:04:bf:b1:19:51:03:c9:21:5f:c5:4e:5e:3a:
         04:0e:95:08:e8:bd:07:99:58:9b:40:b1:23:0e:c4:5b:4a:a6:
         d1:a5:f4:3f:c2:90:18:30:1a:81:0e:18:59:e1:ba:84:d7:be:
         9e:33:bd:e3:25:1d:57:ad:ce:99:0b:f7:70:b6:45:1c:fd:ff:
         40:f7:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:57:55 2026 by rpki-client