Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
File:                     HG_z7AmClLQtl58ltpYFkj4czu8.mft (raw, json)
Hash identifier:          Y5wie8FgHdC8YppEGFa6J1/9LRDM26G5jF8+vEASKIM=
Subject key identifier:   7E:81:8B:E1:B2:BF:20:CB:8C:82:84:36:88:3A:9B:74:91:91:34:73
Authority key identifier: 1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF
Certificate issuer:       /CN=A917C81C/serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
Manifest number:          9A
Signing time:             Sat 26 Sep 2026 22:52:02 +0000
Manifest this update:     Sat 26 Sep 2026 22:52:02 +0000
Manifest next update:     Sat 03 Oct 2026 22:52:02 +0000
Files and hashes:         1: HG_z7AmClLQtl58ltpYFkj4czu8.crl (hash: 8gfPzaSUg80IHEQZiqXIi/mnJVJgFicnShxMB2Io7lg=)
                          2: EB9160CCDFD811F08F00FF64536F56BC.roa (hash: F8WI3I+cVK027+UsBVl1Tcfy5kv9U/Wvm6A/E5S0bZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl
                          rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 22:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C81C, serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
        Validity
            Not Before: Sep 26 22:52:02 2026 GMT
            Not After : Oct  3 22:52:02 2026 GMT
        Subject: CN=6ab84c92-9616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:f0:e1:3e:f9:d2:cb:8e:c0:88:96:90:9f:
                    5d:a7:d0:71:17:80:29:6c:cc:3f:6f:b4:c1:03:d0:
                    0b:a6:ed:ab:0f:4e:5a:a7:e2:66:e7:8b:cb:28:5e:
                    89:61:d3:ea:70:d7:70:32:58:95:c9:43:a7:45:d9:
                    f0:95:91:85:4b:79:0a:dc:ef:4b:52:75:d5:6e:82:
                    4e:f6:71:59:5c:18:ef:1e:6c:76:91:c9:e2:4d:af:
                    fe:4e:a5:51:f0:eb:2a:14:2e:37:42:03:e4:2a:40:
                    58:4f:23:69:86:6c:e9:33:9c:03:1c:f3:f0:00:9c:
                    b3:ac:19:7c:ed:f1:5f:47:f3:63:cc:aa:f4:9d:d6:
                    98:bc:fa:e9:ba:15:36:d0:4c:c3:eb:1a:cf:af:cf:
                    91:73:71:1c:e0:ae:82:a4:c7:91:e5:db:dc:b5:b0:
                    13:81:4f:a0:47:08:27:f2:d5:51:c8:8a:a7:e6:9f:
                    ca:2c:07:87:ea:24:1e:74:8a:18:f4:37:00:33:25:
                    bb:27:ce:cb:18:d1:69:bb:1a:9a:24:56:8b:44:dd:
                    42:c2:ca:74:0f:0a:d3:8c:f0:2a:2c:01:00:36:a1:
                    47:c8:c3:4a:1f:3b:d0:e1:ad:ae:d3:4c:d9:b5:c6:
                    8b:fa:0d:d5:0f:a4:70:75:d1:bc:a8:0d:d1:88:32:
                    8b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:81:8B:E1:B2:BF:20:CB:8C:82:84:36:88:3A:9B:74:91:91:34:73
            X509v3 Authority Key Identifier:
                keyid:1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a8:d2:f4:99:6b:a2:5b:f3:fc:9b:72:08:38:cf:2d:be:5c:
         c7:bb:34:d1:2f:68:c6:cf:50:d6:75:36:e5:26:f3:10:d9:4e:
         12:bf:f9:57:34:e2:0e:35:52:d9:db:5d:57:1e:79:2c:4f:50:
         c7:59:5f:18:31:20:8a:b3:eb:7d:7a:43:98:19:1d:ae:0a:cc:
         2e:6b:66:99:f1:68:0b:e5:75:05:ee:f5:82:79:26:99:21:bd:
         0c:14:2b:f0:2f:98:a6:32:a4:e4:36:df:ba:60:c5:bc:e0:13:
         52:bf:85:98:cf:0f:b5:ac:f3:1c:2d:df:77:98:1c:7b:0f:03:
         95:a5:f7:08:22:3d:9d:1e:b3:56:51:fc:ca:36:9c:b9:63:2f:
         40:4b:de:f3:34:f9:c7:d4:d9:84:aa:38:34:2d:49:64:f1:02:
         10:a7:97:e0:cf:c2:47:96:46:e9:e0:95:f3:5a:76:ee:c5:e6:
         71:5b:c3:5e:5a:25:b8:48:8f:8f:89:f0:0b:36:77:8f:9b:14:
         6e:98:ee:42:2b:50:4b:af:2d:d7:fe:d5:81:5d:78:0a:39:d6:
         e8:9c:9a:06:45:c7:6b:51:da:5b:03:19:ce:4e:2b:ba:db:be:
         7b:75:bf:46:55:51:a7:1f:71:d2:ad:79:81:e8:de:cf:21:e7:
         78:84:aa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:30:43 2026 by rpki-client