Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
File:                     SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft (raw, json)
Hash identifier:          EDGPgweOdhcmhy6CPIvticAZtnvnZplZL8C+BOw8aaw=
Subject key identifier:   49:11:76:B6:1B:00:9F:E1:02:2F:E2:6B:E4:3E:A2:20:F7:E3:CC:63
Authority key identifier: 4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB
Certificate issuer:       /CN=A91896D4/serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
Certificate serial:       02F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
Manifest number:          02D4
Signing time:             Mon 21 Sep 2026 01:19:41 +0000
Manifest this update:     Mon 21 Sep 2026 01:19:41 +0000
Manifest next update:     Mon 28 Sep 2026 01:19:41 +0000
Files and hashes:         1: SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl (hash: W08PtCylU2QoyndZGalMbZcAP+3M2KVDTcZTo3o18rQ=)
                          2: C93A47F63ABB11EE8A78BE4CC4F9AE02.roa (hash: RcdZw8pUWX2ZvZ8iTnxEM6UNtvtFB49EdoW64Bkkw8U=)
                          3: 6985BF0062D611EEB5C5721CC4F9AE02.roa (hash: PoqGkXQNYcMBSrW3Jl/FopL8iUygraN/G2t1e13sEIc=)
                          4: CD23AE8C403011EEA773CE47C4F9AE02.roa (hash: PZelJVR91rZQn+1K6DzeKrU/OaplNw2OEalh3VTRehI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl
                          rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758 (0x2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91896D4, serialNumber=4AB7079A9699D2AB9D68DE4AE4327C40BB2C50DB
        Validity
            Not Before: Sep 21 01:19:41 2026 GMT
            Not After : Sep 28 01:19:41 2026 GMT
        Subject: CN=6ab0862d-b062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:75:b4:90:13:67:f6:ce:44:0a:73:64:01:
                    c9:57:bc:13:f5:f2:30:e5:d1:61:d8:13:c0:91:c9:
                    fb:bb:e1:9c:4e:0f:35:23:4c:b8:96:0f:e3:db:0b:
                    43:33:3f:58:c9:22:22:31:76:9d:88:55:75:90:85:
                    45:b8:9d:9e:6f:bd:8c:f8:c7:72:49:7e:f8:ec:cf:
                    2d:ed:70:27:63:b3:29:94:b7:49:4a:2c:25:97:ca:
                    d8:22:a3:fd:e5:89:f3:0f:fa:28:19:7f:e6:88:d1:
                    23:18:d1:45:2a:f5:1b:1d:ed:4a:7c:85:0d:e1:4c:
                    31:f2:b5:4f:16:5c:82:ef:19:31:31:63:87:24:29:
                    dd:10:01:6c:93:3c:e1:f9:18:f1:b9:ec:01:20:7e:
                    c7:e1:3d:04:f6:5a:af:7b:e7:39:63:58:6e:cd:a4:
                    8a:35:9e:ae:cd:b5:86:55:25:c8:ac:e6:d6:cf:f1:
                    d8:1f:70:bc:67:ab:30:5b:d3:2a:de:b4:13:fc:40:
                    ea:11:0d:3a:46:2e:3f:47:6d:c3:1d:a2:a7:e6:fa:
                    83:05:0f:73:1c:09:64:7c:dd:0c:01:68:64:a7:0e:
                    79:05:b1:18:5d:d6:bc:1c:13:ba:3c:bf:49:ad:0d:
                    41:18:da:25:c8:03:a1:c8:ee:64:5a:f2:64:12:0d:
                    9f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:11:76:B6:1B:00:9F:E1:02:2F:E2:6B:E4:3E:A2:20:F7:E3:CC:63
            X509v3 Authority Key Identifier:
                keyid:4A:B7:07:9A:96:99:D2:AB:9D:68:DE:4A:E4:32:7C:40:BB:2C:50:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrcHmpaZ0qudaN5K5DJ8QLssUNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91896D4/5E9E64347B9611ED8BDFE311C4F9AE02/SrcHmpaZ0qudaN5K5DJ8QLssUNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ea:53:f2:41:4c:13:07:01:24:c1:ef:38:2f:f4:08:d9:cc:
         fb:d7:da:20:6b:06:c9:f7:a8:97:ef:c0:3d:5a:00:4d:2a:c2:
         d4:ad:84:aa:37:80:d1:cb:e3:01:04:dd:38:1d:86:bb:a0:86:
         8d:01:02:3d:b6:f4:d9:6d:c8:5b:6c:55:40:5b:b6:ec:86:4e:
         34:e4:b6:67:48:1d:88:cc:f5:f4:5b:db:c6:3a:6e:e1:cc:c4:
         46:95:55:4d:ec:c5:ec:fe:a8:57:ca:e0:48:23:11:8f:73:6c:
         f0:ac:01:77:f5:f7:b1:9c:49:6a:a8:dc:43:7e:c4:6b:80:9d:
         1e:50:84:32:f0:8e:fd:e4:6c:74:33:1a:9d:0b:98:94:3d:86:
         df:4a:cd:1e:6a:6b:66:91:c4:bc:53:53:c1:23:33:bd:c1:c4:
         a1:e2:90:22:2e:a5:04:67:86:a9:39:48:3e:7f:8b:11:24:af:
         cc:d3:3f:b0:93:77:75:14:6f:8a:95:43:0c:e7:44:0a:68:19:
         a7:a8:fd:a8:d3:b2:22:6b:e1:b4:24:e7:90:3c:56:7f:ff:cc:
         34:74:06:bc:fd:3d:15:8c:f6:e8:ae:c9:d4:1e:9b:2b:26:48:
         c9:60:9b:d8:de:47:8c:f3:4d:8d:2a:f3:25:35:d6:42:91:a6:
         b2:bc:f5:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk2RDQxMTAvBgNVBAUTKDRBQjcwNzlBOTY5OUQyQUI5RDY4REU0QUU0MzI3QzQw
QkIyQzUwREIwHhcNMjYwOTIxMDExOTQxWhcNMjYwOTI4MDExOTQxWjAYMRYwFAYD
VQQDEw02YWIwODYyZC1iMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoRd1tJATZ/bORApzZAHJV7wT9fIw5dFh2BPAkcn7u+GcTg81I0y4lg/j2wtD
Mz9YySIiMXadiFV1kIVFuJ2eb72M+MdySX747M8t7XAnY7MplLdJSiwll8rYIqP9
5YnzD/ooGX/miNEjGNFFKvUbHe1KfIUN4Uwx8rVPFlyC7xkxMWOHJCndEAFskzzh
+RjxuewBIH7H4T0E9lqve+c5Y1huzaSKNZ6uzbWGVSXIrObWz/HYH3C8Z6swW9Mq
3rQT/EDqEQ06Ri4/R23DHaKn5vqDBQ9zHAlkfN0MAWhkpw55BbEYXda8HBO6PL9J
rQ1BGNolyAOhyO5kWvJkEg2fSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkRdrYb
AJ/hAi/ia+Q+oiD348xjMB8GA1UdIwQYMBaAFEq3B5qWmdKrnWjeSuQyfEC7LFDb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTZENC81RTlFNjQzNDdC
OTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBxdWRhTjVLNURKOFFMc3NV
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NyY0htcGFaMHF1ZGFONUs1REo4UUxzc1VOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTZENC81RTlFNjQzNDdCOTYxMUVEOEJERkUzMTFDNEY5QUUwMi9TcmNIbXBhWjBx
dWRhTjVLNURKOFFMc3NVTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJepT8kFMEwcBJMHvOC/0CNnM+9faIGsGyfeol+/APVoATSrC1K2EqjeA0cvj
AQTdOB2Gu6CGjQECPbb02W3IW2xVQFu27IZONOS2Z0gdiMz19Fvbxjpu4czERpVV
TezF7P6oV8rgSCMRj3Ns8KwBd/X3sZxJaqjcQ37Ea4CdHlCEMvCO/eRsdDManQuY
lD2G30rNHmprZpHEvFNTwSMzvcHEoeKQIi6lBGeGqTlIPn+LESSvzNM/sJN3dRRv
ipVDDOdECmgZp6j9qNOyImvhtCTnkDxWf//MNHQGvP09FYz26K7J1B6bKyZIyWCb
2N5HjPNNjSrzJTXWQpGmsrz1HQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:37:45 2026 by rpki-client