Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
File:                     1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json)
Hash identifier:          MKRCUTTbkfBvKXhOmuA+SBvM3/sJNhSC9kxpe+8rmAk=
Subject key identifier:   34:09:B4:FB:0D:29:E4:9B:74:FA:90:32:A3:68:DF:BC:81:6F:C0:B0
Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
Certificate issuer:       /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Certificate serial:       040C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
Manifest number:          0405
Signing time:             Mon 19 Oct 2026 00:31:21 +0000
Manifest this update:     Mon 19 Oct 2026 00:31:21 +0000
Manifest next update:     Mon 26 Oct 2026 00:31:21 +0000
Files and hashes:         1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: j55Sbt2ie5fFHU8nlbFSjgvsBxadxs/H3UrvZ2XL2jA=)
                          2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: I/3jw2SL7oFfJMZX+8eB8I+ObagDtYG05+5xid9Ie/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl
                          rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 00:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1036 (0x40c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
        Validity
            Not Before: Oct 19 00:31:21 2026 GMT
            Not After : Oct 26 00:31:21 2026 GMT
        Subject: CN=6ad564d9-ddff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cc:c3:3e:1f:b0:7e:3b:68:50:a5:e4:04:36:
                    d8:eb:49:a9:a8:ae:fe:e9:7d:93:65:9e:58:f2:6c:
                    42:c2:40:2d:a3:e8:32:4f:30:8a:fc:7e:f7:50:bd:
                    81:e3:9c:e5:31:21:b1:6b:9e:5a:6c:24:64:4f:2a:
                    e3:1a:fa:fa:c9:b3:e9:31:52:9c:a0:05:34:dc:26:
                    f0:2c:81:2b:41:b5:5f:ec:9d:eb:e6:db:03:0f:00:
                    7c:a4:e7:82:ff:f1:e5:d7:f1:3d:b4:95:de:92:d8:
                    9c:16:70:e5:b7:64:b4:ac:f2:7e:55:c5:21:97:20:
                    cb:1c:b5:34:52:ad:3b:54:71:37:f8:9d:0f:26:e1:
                    74:3f:e6:89:f2:7d:8e:e8:7d:73:22:8f:3e:25:62:
                    fd:49:5a:56:f3:57:96:2b:18:f5:bd:a4:83:a2:78:
                    1e:12:29:28:69:51:a0:eb:1e:91:6e:98:2f:3d:74:
                    52:3d:7c:a3:17:93:d6:99:95:fd:d7:45:79:e9:b5:
                    1e:bb:da:fa:55:2d:14:66:16:b0:c5:8e:6e:60:62:
                    fc:bd:e8:3e:54:39:34:8b:07:c0:53:30:68:ff:57:
                    e8:0f:da:be:50:03:de:5a:0e:c2:7e:08:14:9e:22:
                    bd:14:8c:b2:47:77:f1:b7:28:09:b9:30:e4:72:0e:
                    c2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:09:B4:FB:0D:29:E4:9B:74:FA:90:32:A3:68:DF:BC:81:6F:C0:B0
            X509v3 Authority Key Identifier:
                keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ad:d5:34:17:2f:3e:a8:e8:7d:20:05:5d:31:5a:43:22:5e:
         96:40:89:9f:b3:3b:2c:f5:c7:60:83:f5:4c:27:1a:77:5d:fd:
         4c:3f:62:ae:99:b7:85:b0:2e:bd:1d:5d:1d:fd:aa:61:1a:d1:
         5f:a7:6d:64:23:26:1f:c8:a0:83:dc:30:2c:43:f8:f1:19:4d:
         a9:06:32:b2:1b:41:6b:db:0a:1a:6e:4b:8e:da:8e:02:f7:03:
         be:d3:f4:59:66:b8:83:8e:eb:64:94:a6:33:a3:b2:04:75:2e:
         ee:4c:6e:25:61:6c:98:a0:6b:3c:68:a6:72:db:2d:eb:c0:1c:
         25:cd:89:95:63:f1:9b:a6:5e:95:ba:e5:54:53:a4:14:05:cd:
         1c:06:2a:e0:4c:6a:dd:2f:85:3a:8a:14:29:2c:e0:6c:bd:8a:
         71:1d:66:6c:aa:41:d6:f3:69:3a:45:59:39:ef:4f:a8:33:ea:
         37:e1:af:92:c8:ff:63:10:8f:ff:ac:fe:8b:e1:e2:80:19:ca:
         66:a6:ef:c7:8d:84:19:6f:9c:e0:9d:c4:e1:62:c8:77:64:fd:
         ce:ad:6b:e7:b7:96:5e:7d:18:c7:b9:a5:b0:b1:c2:b9:98:ef:
         c3:e5:09:db:dd:09:20:f6:d4:52:33:f5:70:a2:83:29:ec:07:
         30:7f:f3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:22:44 2026 by rpki-client