Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
File:                     hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json)
Hash identifier:          cqZVWySrV4ugPH/BI7EoWPKLDjTy52BeYxwYSBGaHzs=
Subject key identifier:   6E:16:10:41:97:4C:10:74:88:0D:87:4A:7B:A5:4F:C8:AA:C1:3D:91
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Certificate issuer:       /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
Manifest number:          0160
Signing time:             Fri 25 Sep 2026 05:19:01 +0000
Manifest this update:     Fri 25 Sep 2026 05:19:01 +0000
Manifest next update:     Fri 02 Oct 2026 05:19:01 +0000
Files and hashes:         1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: YRyCwN7PnFyr1M3k8qYxvu/G2eanbFYQmNykJgFYL1w=)
                          2: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: n9XHNHcl2xF8ubtL4a2OwVIihOJ0QV9E2Gddb2c8vlo=)
                          3: 1A3A1E2C287D11F18C83C945A7833773.roa (hash: ZCfKBgXebATm3jCXx6esyXYyxCluZLc0GUaxOph0UXs=)
                          4: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: O/afFCUP8vi3DtNxbtCLXq4PUJjWlL9Mty/w2HiZ0No=)
                          5: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: d33D0nn4vSuDr9mrd9PxLM5FRlHIJ8B/2JN7+OeYbXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
                          rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
        Validity
            Not Before: Sep 25 05:19:01 2026 GMT
            Not After : Oct  2 05:19:01 2026 GMT
        Subject: CN=6ab60445-e94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3d:56:15:e7:a0:5c:cf:46:30:3f:2d:0a:fe:
                    63:6b:19:62:47:de:d8:df:5c:b5:63:1e:75:b5:f3:
                    09:03:f2:e8:ac:73:af:d4:21:60:39:b4:a4:19:91:
                    92:38:30:63:cb:c7:af:2d:bf:82:2b:5c:13:33:d0:
                    eb:bf:78:66:0b:72:4e:45:c0:09:5d:25:ec:79:df:
                    c5:18:dd:1f:09:4c:43:5c:59:c7:24:74:3a:92:01:
                    ab:c5:3a:11:f4:97:10:cf:f5:57:f6:71:77:4a:74:
                    f1:c5:f8:35:3d:aa:ad:b0:dd:ec:6d:85:d5:54:9f:
                    1a:4a:0d:49:ca:24:c3:1c:20:3c:2b:14:1c:a9:36:
                    9c:df:a0:b7:34:f9:6a:cf:1f:f1:df:9d:56:09:4d:
                    f9:c0:be:7b:9a:97:bd:29:c0:2c:97:ca:5f:e6:b1:
                    ea:3f:b8:c2:68:17:cd:96:2b:b0:f5:56:58:de:d4:
                    8d:14:90:02:0e:1d:15:8f:36:31:72:8f:7b:1c:90:
                    c1:67:73:ad:75:9d:2b:99:76:f3:3d:0c:07:f7:52:
                    a8:b8:26:03:1b:ab:c6:c4:67:a4:d5:f2:89:a8:2c:
                    3e:fb:32:cc:ed:6c:2d:8f:0c:d0:19:5d:8c:5d:de:
                    34:0a:d1:0f:78:14:15:77:2b:88:6b:6a:7d:4e:a1:
                    4c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:16:10:41:97:4C:10:74:88:0D:87:4A:7B:A5:4F:C8:AA:C1:3D:91
            X509v3 Authority Key Identifier:
                keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:15:31:34:f4:2e:91:45:45:cd:6d:d7:b9:18:e8:03:75:d0:
         c6:93:0c:d0:c2:ff:3b:a8:b6:3d:e7:14:56:94:ff:35:80:a9:
         17:51:40:6d:f5:ac:47:f4:71:d8:65:3f:4d:a5:1e:6b:12:0f:
         21:0a:0f:4b:2f:df:61:41:3b:c0:ca:86:22:59:a4:1b:b6:be:
         6d:3f:95:f1:1c:2d:fb:c8:f0:e4:f9:92:82:d4:89:76:8d:b6:
         31:49:12:5f:d8:86:2b:28:4b:e5:4b:ce:cb:a2:ac:31:cd:ac:
         e6:d7:d4:6d:2f:6a:02:9d:3e:fa:f3:3e:7f:21:56:c3:83:f5:
         aa:3f:ae:69:05:83:bc:2a:ea:dd:d4:12:18:33:fe:bf:b5:5a:
         13:fa:e6:be:34:78:ca:4d:d7:eb:e2:4a:41:c9:4a:c1:52:22:
         7c:d9:63:7d:3f:f1:9a:5b:09:5a:18:21:06:fd:37:d4:e6:e1:
         b7:09:df:58:a4:1d:a3:9b:48:d3:95:cf:b9:07:9f:a9:80:a5:
         c5:cb:f8:43:f5:33:5e:ca:42:b8:25:73:c8:54:c8:1f:87:55:
         7c:c7:51:8f:08:dd:f8:6f:4c:77:6b:ec:f8:91:68:b5:73:36:
         8e:bb:b6:f4:dd:0a:7d:86:29:08:47:38:4c:40:93:d2:fd:f9:
         e9:a2:a9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:27:44 2026 by rpki-client