Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
File:                     g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json)
Hash identifier:          HYmRsPi9d7v/kuozgnfGTvpaRtYaeyNt9QbWLVbPYs4=
Subject key identifier:   C0:6C:69:3C:1C:23:0E:C5:1F:20:B6:BF:96:CE:18:D2:66:1A:11:89
Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Certificate issuer:       /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Certificate serial:       021E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
Manifest number:          0203
Signing time:             Mon 02 Mar 2026 01:57:18 +0000
Manifest this update:     Mon 02 Mar 2026 01:57:16 +0000
Manifest next update:     Mon 09 Mar 2026 01:57:16 +0000
Files and hashes:         1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: sU5d7jrk7YFldlfDNWSioS4AZUyuFHhM5f3NvFaiVcc=)
                          2: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 1di8rNGyqV1ndDBfMBfKTjWY7rtHJTy/ZCp+HJPdtTI=)
                          3: 046B33A4431C11EE8DDA391AC4F9AE02.roa (hash: 2IMnLKkDtPnRMRm7EMhHOB0THYlzNJsg+gB0GBMnX4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
                          rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
        Validity
            Not Before: Mar  2 01:57:16 2026 GMT
            Not After : Mar  9 01:57:16 2026 GMT
        Subject: CN=69a4ee7e-d7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:2b:48:24:29:6e:cf:3a:b8:55:ff:c1:44:
                    7e:42:7f:a9:e1:9d:c2:ed:48:8c:aa:41:a9:17:71:
                    24:d0:ce:e3:1d:28:f1:a1:0f:a5:8e:f7:11:9b:08:
                    ab:1e:e5:49:0c:46:6f:d5:4a:60:9f:6d:99:31:a3:
                    89:57:d3:98:3a:33:fe:9e:47:0e:03:87:c6:94:62:
                    a4:22:46:fc:10:0a:de:a3:26:2a:4a:4c:72:a4:cd:
                    06:ec:49:48:91:4c:e0:03:80:db:19:97:f5:2c:82:
                    dc:21:46:ce:9f:4c:d3:b7:fb:39:9d:0e:c2:f7:a6:
                    58:fc:e0:37:b6:07:02:60:51:1d:e4:47:4a:af:e2:
                    b9:69:48:08:27:46:18:95:8e:af:dc:de:75:12:d5:
                    7d:d4:5c:5c:29:1b:72:bc:9d:8e:d9:33:96:91:62:
                    fb:98:89:50:54:a4:71:bf:68:06:21:fa:1f:0e:04:
                    fa:95:8a:63:9c:22:bd:8a:63:b3:7b:a3:e5:3d:43:
                    db:2b:8e:7f:fb:66:85:7b:da:9b:b0:f8:24:32:61:
                    3b:60:06:83:25:ed:70:a2:67:d6:29:99:55:72:45:
                    81:6a:da:8c:eb:f4:e8:5c:c7:83:45:6f:d9:df:95:
                    75:73:0d:06:c4:4d:17:fe:80:79:f1:de:62:89:41:
                    55:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6C:69:3C:1C:23:0E:C5:1F:20:B6:BF:96:CE:18:D2:66:1A:11:89
            X509v3 Authority Key Identifier:
                keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:85:05:99:be:0c:94:39:2f:81:f3:cc:18:1e:bd:e6:72:f4:
         a2:42:41:e3:f7:b3:6b:96:59:df:8e:38:24:75:17:06:b6:25:
         8e:2b:4f:90:e3:e7:fd:69:8e:23:0e:e8:b4:c1:26:1b:3c:18:
         58:ae:2e:8e:6a:ea:09:fc:b7:2e:f9:d4:fc:25:b7:96:f9:be:
         ee:c2:c2:88:21:c8:dd:b8:c8:15:67:92:94:c6:f3:4b:36:63:
         cc:6e:4c:16:8a:b2:63:ed:24:19:a5:fa:89:86:62:fd:73:55:
         07:a7:44:11:4a:68:74:60:fd:b9:f2:76:e0:b6:90:2c:71:6b:
         24:74:7a:57:ce:45:45:fd:67:9f:89:a2:37:6e:7c:8f:37:9f:
         4a:20:a9:36:a2:e9:f4:9a:6d:38:b1:a9:1a:35:e9:75:78:3b:
         a2:67:76:bf:7f:7f:19:c4:45:35:ee:1a:ce:a7:43:b0:0c:35:
         76:17:72:a6:df:a2:e3:56:11:9d:98:ab:c3:de:3d:71:25:0e:
         c4:d1:e4:15:1c:a9:53:5d:71:f6:3d:6c:da:44:54:be:99:37:
         e2:bb:10:ab:fc:4f:b8:36:c4:16:73:be:75:31:d2:90:59:93:
         a4:e4:c9:4c:31:69:7e:c7:f0:ae:79:74:a3:4a:3e:b7:6f:29:
         23:73:ae:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE5OTYxMTAvBgNVBAUTKDgzODZCRTg2MUJEQkRCNkQwMTY1MDg3REMwNDRBMDdG
QTRENEYwODkwHhcNMjYwMzAyMDE1NzE2WhcNMjYwMzA5MDE1NzE2WjAYMRYwFAYD
VQQDEw02OWE0ZWU3ZS1kN2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqsgrSCQpbs86uFX/wUR+Qn+p4Z3C7UiMqkGpF3Ek0M7jHSjxoQ+ljvcRmwir
HuVJDEZv1Upgn22ZMaOJV9OYOjP+nkcOA4fGlGKkIkb8EAreoyYqSkxypM0G7ElI
kUzgA4DbGZf1LILcIUbOn0zTt/s5nQ7C96ZY/OA3tgcCYFEd5EdKr+K5aUgIJ0YY
lY6v3N51EtV91FxcKRtyvJ2O2TOWkWL7mIlQVKRxv2gGIfofDgT6lYpjnCK9imOz
e6PlPUPbK45/+2aFe9qbsPgkMmE7YAaDJe1womfWKZlVckWBatqM6/ToXMeDRW/Z
35V1cw0GxE0X/oB58d5iiUFVkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBsaTwc
Iw7FHyC2v5bOGNJmGhGJMB8GA1UdIwQYMBaAFIOGvoYb29ttAWUIfcBEoH+k1PCJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk5Ni8zMkM2OEE1RTI3
OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIyMEJaUWg5d0VTZ2Y2VFU4
SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c0YS1oaHZiMjIwQlpRaDl3RVNnZjZUVThJay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTk5Ni8zMkM2OEE1RTI3OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIy
MEJaUWg5d0VTZ2Y2VFU4SWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApIUFmb4MlDkvgfPMGB695nL0okJB4/eza5ZZ3444JHUXBrYljitPkOPn/WmO
Iw7otMEmGzwYWK4ujmrqCfy3LvnU/CW3lvm+7sLCiCHI3bjIFWeSlMbzSzZjzG5M
FoqyY+0kGaX6iYZi/XNVB6dEEUpodGD9ufJ24LaQLHFrJHR6V85FRf1nn4miN258
jzefSiCpNqLp9JptOLGpGjXpdXg7omd2v39/GcRFNe4azqdDsAw1dhdypt+i41YR
nZirw949cSUOxNHkFRypU11x9j1s2kRUvpk34rsQq/xPuDbEFnO+dTHSkFmTpOTJ
TDFpfsfwrnl0o0o+t28pI3OuEA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:31 2026 by rpki-client