Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
File:                     hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json)
Hash identifier:          eYm+qUeFK0OTE4puuGiLu/3FveJbQYkF+Q2lZU2ycM0=
Subject key identifier:   9C:C5:D9:B6:F3:4D:FE:E4:05:EE:F6:4D:DD:34:0E:29:19:BB:BA:75
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Certificate issuer:       /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
Manifest number:          010C
Signing time:             Fri 17 Apr 2026 05:53:38 +0000
Manifest this update:     Fri 17 Apr 2026 05:53:37 +0000
Manifest next update:     Fri 24 Apr 2026 05:53:37 +0000
Files and hashes:         1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: uRBkI/nUNcjnT1FZakb/F/pMUnKnT6MblQ5YlkZ2Zhk=)
                          2: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: HYHec9orOca+00gsDqMx8Gss9C7gqHvPJgzKMMmNDKk=)
                          3: 1A3A1E2C287D11F18C83C945A7833773.roa (hash: Tw9tkubBBNCNa0WzdkiGoAB9GeB7p8eEnqNQk5A660Q=)
                          4: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: j2Hz+mynGpqLJnmZlqehevWYxoqbcW99ZISJiOfwTiY=)
                          5: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: wy1fO8emrrb11LIF29YjzsQF2VR/akidMRTHMxAcTfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
                          rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
        Validity
            Not Before: Apr 17 05:53:37 2026 GMT
            Not After : Apr 24 05:53:37 2026 GMT
        Subject: CN=69e1cae2-1099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:f6:a9:0a:a7:c7:6e:5d:2a:2a:69:3b:40:
                    5b:7a:36:f1:05:0f:37:b7:9e:e0:11:d1:4b:04:3e:
                    e7:f6:a2:9c:17:7d:a7:e4:46:0f:37:f4:90:53:fd:
                    dd:bc:18:09:74:46:0c:d5:5b:25:aa:84:55:d1:e6:
                    8d:8c:c7:14:17:fd:9b:0b:30:c6:68:fa:9b:66:81:
                    06:a6:29:da:87:1b:00:de:11:d4:81:88:e9:9c:67:
                    6a:a7:df:e2:8e:df:cf:ae:bd:cc:da:2a:08:8c:8a:
                    8a:78:25:bd:6e:01:23:af:a7:de:38:d8:43:16:45:
                    90:d8:09:fa:20:66:ea:fb:5d:c0:cb:a0:86:93:28:
                    14:be:43:bf:ed:dc:41:b1:e2:ea:84:6c:aa:14:c5:
                    11:73:2e:ca:06:4a:bf:8c:51:ba:c1:2a:0b:0b:b5:
                    d4:3a:18:ba:85:23:a5:49:e0:24:4a:27:a8:24:c2:
                    27:f1:f1:53:c3:19:c7:c6:2a:a8:83:11:18:ab:d6:
                    eb:c9:a4:d9:40:2d:10:23:f9:e2:6a:68:21:69:90:
                    e1:35:e9:c6:63:ca:1c:ef:e5:91:fd:80:63:6e:90:
                    67:70:26:88:d8:f7:13:91:ef:d9:49:7d:1b:5b:a7:
                    60:bb:f8:12:61:18:cf:30:b2:6a:6c:ae:39:74:98:
                    77:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C5:D9:B6:F3:4D:FE:E4:05:EE:F6:4D:DD:34:0E:29:19:BB:BA:75
            X509v3 Authority Key Identifier:
                keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:17:d9:1d:2c:d8:5a:36:77:bc:b7:df:c7:03:bd:8b:f4:66:
         2a:3f:2e:a0:91:54:50:2c:7e:f1:e1:b6:4d:00:f0:02:ac:f2:
         fa:b5:b5:ed:79:c1:6a:a5:7f:7a:b7:41:2e:36:9f:e9:06:2c:
         f1:98:fd:1a:72:f0:23:4c:9a:1c:e4:39:e1:9a:16:eb:e1:21:
         db:c1:c0:00:33:59:d0:c4:1b:63:e6:ed:11:93:e1:ee:40:3c:
         53:a4:18:62:c3:8f:e8:a8:c5:a9:83:f3:5a:18:3f:07:44:f2:
         4c:ff:b8:90:79:94:78:cc:e8:2f:f3:24:76:4e:a2:83:07:8e:
         00:e2:61:32:c0:64:fa:66:d1:0f:cc:25:cd:e4:8d:7e:27:f9:
         99:4b:4f:89:6d:24:e1:b7:8f:92:11:e9:9a:2c:b5:0c:48:63:
         98:73:41:9a:d2:7b:3d:68:19:c8:fa:e8:c4:7e:63:00:e7:05:
         c5:b7:4d:34:9c:f9:de:70:74:dc:01:f4:04:5d:8d:57:de:38:
         53:1d:0e:c7:55:59:28:a0:4c:73:0c:82:ad:a4:c9:58:66:6b:
         03:a4:7b:9a:ee:de:b0:ce:a3:35:89:74:a0:de:97:83:a7:cd:
         3d:11:55:e3:93:52:9b:20:05:2c:dd:ea:41:98:1f:ba:8b:a0:
         70:87:14:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:25 2026 by rpki-client