Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
File:                     HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json)
Hash identifier:          +/NsgyB00GBrlNMybXph5be0QTUnAyE4Onxt9xaBeoM=
Subject key identifier:   71:92:3E:64:53:05:6A:41:B9:B8:94:3F:80:FD:6D:9F:BD:21:FE:85
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Certificate issuer:       /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial:       0A69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
Manifest number:          0A47
Signing time:             Sun 20 Sep 2026 19:37:59 +0000
Manifest this update:     Sun 20 Sep 2026 19:37:58 +0000
Manifest next update:     Sun 27 Sep 2026 19:37:58 +0000
Files and hashes:         1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: 37IPEcP0PQ+3ioLB5wUijRZuzqfw4N7/CCPBGdqZw3c=)
                          2: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: PEyE0w8+UrcKJlHY3jaK16cYhVK4lg74ijcsWV2DoxU=)
                          3: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: WcxNaiIGqzItQBb7CYbwvBMMYMGcLD8tEl0Q7aIbezo=)
                          4: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: f4XaB+bRmsoNFuDMRRMiph6D0qfKs6SQvSg9M2XJC3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
                          rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2665 (0xa69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
        Validity
            Not Before: Sep 20 19:37:58 2026 GMT
            Not After : Sep 27 19:37:58 2026 GMT
        Subject: CN=6ab03616-253a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:94:2f:fd:2c:92:ef:cd:b5:35:cd:7d:30:
                    a4:60:2c:e0:e3:fe:fe:61:30:ff:fd:16:83:b5:64:
                    10:51:71:ef:b3:5b:1e:a3:76:b3:52:3e:d1:ce:b4:
                    1e:05:40:7f:97:4b:d2:eb:02:d3:83:73:d0:5f:27:
                    44:63:c8:82:42:9f:73:4a:e7:04:1b:e8:35:50:ba:
                    6b:7f:2b:01:d5:b6:3b:00:8d:5c:9a:88:55:4f:c2:
                    41:df:85:90:49:d8:57:4c:16:1a:6e:5b:72:ec:66:
                    2c:53:5d:3d:4b:3c:1c:be:ee:bd:42:35:d1:6f:e9:
                    ae:7e:f4:43:02:54:53:1e:f1:c1:da:a8:8e:52:b7:
                    44:58:f5:be:d8:5e:82:5d:a9:33:9a:be:a5:ca:5c:
                    30:83:69:7a:b6:8e:08:85:a6:2a:2a:a8:89:76:7e:
                    06:98:52:0c:a5:5d:c9:a7:ec:d4:f3:6e:d1:c3:3c:
                    05:11:1f:49:9b:4b:7e:22:ce:57:1f:0e:16:da:15:
                    f8:12:a5:7d:08:a5:a8:e1:58:40:04:ae:3f:6f:19:
                    e9:33:c0:1d:d2:ec:a6:ee:9e:71:28:69:bc:bd:63:
                    aa:b1:19:df:15:aa:ef:db:d7:1c:e9:46:2c:2c:35:
                    47:a3:0b:0d:88:8e:d6:68:4e:66:bf:da:89:52:d9:
                    13:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:92:3E:64:53:05:6A:41:B9:B8:94:3F:80:FD:6D:9F:BD:21:FE:85
            X509v3 Authority Key Identifier:
                keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e4:58:7b:d5:94:98:95:e3:35:c9:27:93:36:e0:1e:60:d3:
         03:35:49:79:2e:50:de:f7:67:5c:ec:0a:a3:d9:b6:d5:4d:fc:
         e0:f9:9e:04:f4:55:14:9a:fb:9c:52:80:1d:03:6f:3b:c0:d8:
         c8:96:9c:18:8a:ed:49:d9:ab:e1:f1:42:71:af:c3:26:ff:7f:
         11:c2:04:cd:d6:4b:9a:5d:09:b3:5e:48:d0:1b:9f:6c:1c:bd:
         41:99:e8:82:6f:9e:f7:5f:df:0b:63:bd:ea:a0:b1:fb:73:a1:
         2e:b6:57:b7:e8:d7:56:ca:72:83:c5:74:6c:97:0e:e3:fb:b6:
         0d:b1:e1:91:bf:dc:9a:c2:d4:a7:00:72:77:57:7a:bd:a9:63:
         6b:a7:96:e2:de:95:09:ac:b1:9a:99:52:08:c5:04:dd:6d:c8:
         4e:3c:63:a7:42:e3:14:0e:d3:a6:f8:40:3b:38:50:bd:da:d8:
         ff:69:9f:58:a5:59:af:df:1e:ae:42:c1:1d:8f:6f:4a:9d:50:
         2e:12:4e:a9:d5:9f:00:c3:27:ef:a8:40:6a:a6:3f:82:4d:a7:
         f8:27:cf:d6:f7:56:42:d1:36:d9:65:50:f0:8d:81:13:69:1e:
         fd:1b:cb:f6:b8:c6:ba:44:82:b4:24:75:2e:8f:8a:11:10:f5:
         99:89:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:57:21 2026 by rpki-client