Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft
File:                     hnoHFJZqnX2LIC37HeIhPALANic.mft (raw, json)
Hash identifier:          6qbbPpe35s3BAsPYuooYw+yJwjnD0mU+L1/fPOEKIxk=
Subject key identifier:   DD:2A:2B:AB:9F:5C:09:E1:80:9C:94:C2:55:2A:D0:D7:3F:A2:E1:4F
Authority key identifier: 86:7A:07:14:96:6A:9D:7D:8B:20:2D:FB:1D:E2:21:3C:02:C0:36:27
Certificate issuer:       /CN=A919FD74/serialNumber=867A0714966A9D7D8B202DFB1DE2213C02C03627
Certificate serial:       0CDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft
Manifest number:          0CD1
Signing time:             Tue 22 Sep 2026 18:21:41 +0000
Manifest this update:     Tue 22 Sep 2026 18:21:40 +0000
Manifest next update:     Tue 29 Sep 2026 18:21:40 +0000
Files and hashes:         1: hnoHFJZqnX2LIC37HeIhPALANic.crl (hash: 0DlgZMbMOPm0Z8rTaR3IZQvmNyKK7oqp5VKSmZd9CKU=)
                          2: D1DB990C1A3811EAB6F9C83DC4F9AE02.roa (hash: 7Dz9hu6gjsKF7rOCaXHWUeixpnR4qVyHb9xN6ykXLfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.crl
                          rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3293 (0xcdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FD74, serialNumber=867A0714966A9D7D8B202DFB1DE2213C02C03627
        Validity
            Not Before: Sep 22 18:21:40 2026 GMT
            Not After : Sep 29 18:21:40 2026 GMT
        Subject: CN=6ab2c734-8fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:b1:6b:0b:60:d6:16:a7:68:33:a7:5e:f4:
                    12:51:54:2b:dc:2b:2b:c2:c7:1d:16:65:1f:ce:9e:
                    1e:f3:65:b3:49:57:48:e0:84:2a:20:6a:2b:f0:9f:
                    39:c6:68:29:06:d2:bc:80:fa:12:b6:4d:d4:31:aa:
                    83:9e:1f:9d:2e:33:46:18:ef:71:a9:6d:a0:4a:4c:
                    28:26:fd:23:23:6a:c9:89:79:4e:ad:32:ad:fd:ba:
                    da:db:91:ef:79:fc:e8:b1:4f:2e:2e:04:8c:2c:a7:
                    9b:ce:c8:74:bb:e6:2d:5a:62:10:b4:ea:b0:73:e8:
                    72:71:14:98:3e:2d:c5:77:6f:fd:64:0d:ec:34:90:
                    4f:58:1d:8c:e0:3f:ce:7c:c3:47:64:23:60:a2:46:
                    df:2e:6f:69:fc:b3:e4:bc:7b:af:73:7a:58:ed:e3:
                    c8:ce:04:2d:65:18:9b:3a:66:bd:6f:7b:aa:30:f4:
                    b5:6d:2c:2b:af:e8:3a:43:b7:e4:55:d0:0e:f1:82:
                    62:f3:73:5b:ef:08:bf:d0:22:39:ee:e8:a7:ad:84:
                    59:cc:24:d4:a8:92:0f:46:8b:14:a0:23:07:95:94:
                    c2:99:6d:91:07:86:ae:45:7d:54:99:3f:e4:bb:f5:
                    3e:3d:1c:94:6a:4f:30:e1:0b:86:5e:c5:31:2d:36:
                    63:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2A:2B:AB:9F:5C:09:E1:80:9C:94:C2:55:2A:D0:D7:3F:A2:E1:4F
            X509v3 Authority Key Identifier:
                keyid:86:7A:07:14:96:6A:9D:7D:8B:20:2D:FB:1D:E2:21:3C:02:C0:36:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnoHFJZqnX2LIC37HeIhPALANic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FD74/5367B6BE1A3811EAA0E8A23DC4F9AE02/hnoHFJZqnX2LIC37HeIhPALANic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:72:5e:4f:0d:d8:8b:53:5d:37:a8:68:53:59:41:3d:c3:3a:
         a5:e2:07:c7:f8:04:4b:95:70:cb:65:46:c6:ba:3a:ad:60:d3:
         54:d5:02:4b:e9:26:02:27:41:4d:c0:7a:35:53:f4:77:44:0a:
         15:76:b9:ef:88:fc:94:44:c2:0f:2a:57:40:00:b0:46:99:cd:
         ce:8d:02:e0:1d:de:d2:88:c2:2e:5a:1b:87:89:ec:d0:46:78:
         24:4e:e7:f2:94:63:4c:1a:7e:19:54:00:6e:65:39:1d:0e:70:
         0d:0f:d3:3f:46:04:28:a8:06:59:15:e6:db:ea:83:b3:66:0a:
         3a:f5:cf:6c:4a:40:b9:b6:63:49:8d:cd:07:bd:c0:f6:0f:f9:
         ed:60:15:d3:9f:c2:7b:36:35:09:d2:f1:0a:35:44:7d:0e:75:
         d0:26:55:f7:0e:4e:74:23:dd:87:71:0f:39:ad:d4:3c:81:b4:
         79:4a:9a:5e:23:ee:08:31:8f:6d:5e:39:26:35:db:a2:56:61:
         95:e0:6f:8f:38:ac:44:ba:85:75:db:d8:76:51:f3:72:98:6e:
         94:da:57:bf:1a:10:e4:c9:39:55:d0:b2:e6:1a:09:cd:ac:49:
         52:16:07:68:32:f3:f0:db:38:41:2b:cf:fc:02:c9:24:d2:a7:
         7c:43:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:46:30 2026 by rpki-client