Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
File:                     hlng_trNtpATntXTNVh0di16GJ0.mft (raw, json)
Hash identifier:          +UEAJ0Tw20FX8vFk9MaSJe1059TMi7UUvHSSc3/x8mM=
Subject key identifier:   41:F5:3A:A4:FA:F9:BB:4E:AC:97:B2:4F:6D:62:AC:6F:61:01:41:3B
Authority key identifier: 86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
Certificate issuer:       /CN=A91AC0BB/serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
Manifest number:          13
Signing time:             Fri 17 Apr 2026 08:46:45 +0000
Manifest this update:     Fri 17 Apr 2026 08:46:45 +0000
Manifest next update:     Fri 24 Apr 2026 08:46:45 +0000
Files and hashes:         1: hlng_trNtpATntXTNVh0di16GJ0.crl (hash: IvVfFVDl4oddm4NAQahJ+FRxLgu+lNNJq58Bm3ysX8g=)
                          2: 76DAAFAA251911F182F11CF1C0833773.roa (hash: uwccILNOfn3op7dK+stqfjkg9anKckOvjcXt+VX9yxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC0BB, serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
        Validity
            Not Before: Apr 17 08:46:45 2026 GMT
            Not After : Apr 24 08:46:45 2026 GMT
        Subject: CN=69e1f375-6f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:02:03:2a:5e:2c:88:40:0a:89:ec:85:ce:
                    42:2a:c8:88:73:32:a5:c1:81:5c:0f:cc:5e:8d:10:
                    fe:92:d6:bc:e0:0a:8d:d8:a1:8f:01:eb:c5:a1:a0:
                    5e:f6:47:49:32:ff:41:5d:c6:3d:92:ae:09:89:d0:
                    47:03:b3:28:cc:75:01:35:c2:be:a1:fd:e7:14:24:
                    99:c6:ec:6d:c1:88:ff:cc:f3:80:c4:32:4b:42:ba:
                    63:8f:f2:7b:7b:a0:a0:c2:ce:43:50:a3:48:34:05:
                    1d:4e:20:d0:28:65:46:5c:37:b9:fb:07:b7:0f:f4:
                    32:e0:ae:ad:13:f1:ba:52:73:54:5a:40:c1:a3:1a:
                    bd:02:d8:6b:49:76:91:35:ac:3a:cc:16:b7:fa:10:
                    b2:31:39:29:7f:21:42:a0:e5:85:31:b3:c7:93:2b:
                    15:a3:c3:38:4e:d0:90:e0:5c:36:64:f3:ff:ac:b0:
                    c1:78:55:d0:ad:4b:e9:41:4b:6e:07:74:be:9d:12:
                    01:7f:4d:9d:0b:ff:d6:06:1d:ae:7a:0c:4f:9b:91:
                    56:05:19:de:34:f0:21:f0:15:a9:09:53:c7:6a:77:
                    6a:d5:26:bc:5e:c1:3a:d1:73:86:1b:54:cf:3c:ee:
                    c2:2c:63:2e:c7:43:cc:9f:55:b2:de:93:01:14:b2:
                    00:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F5:3A:A4:FA:F9:BB:4E:AC:97:B2:4F:6D:62:AC:6F:61:01:41:3B
            X509v3 Authority Key Identifier:
                keyid:86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8c:8a:c7:13:04:a4:c5:3d:de:5d:41:99:a5:39:a5:70:22:
         38:d4:48:f0:65:7a:32:b4:8c:95:32:1e:bb:4c:f0:fb:90:be:
         ed:31:b5:e8:ae:a6:9a:24:bf:5c:6e:0d:a5:05:ae:7c:38:70:
         f7:83:c5:5e:14:85:c2:2c:09:31:65:b5:bc:a8:3d:a1:c7:71:
         a8:e2:85:ec:52:90:97:68:69:46:95:0a:4a:64:c1:0f:f8:41:
         a8:1a:19:de:75:28:00:52:86:ce:5f:6e:18:7d:c3:9d:76:a3:
         b9:eb:d3:45:33:7c:ad:6a:e8:d8:f0:da:01:55:9c:df:53:88:
         6d:7b:41:14:12:91:3f:f3:35:ae:5a:93:e7:b0:bf:ea:ca:e7:
         22:ac:13:37:df:c1:63:94:23:26:1f:7e:4b:f6:9b:7a:2b:fb:
         55:0f:8a:87:68:ab:35:b3:0d:cd:f0:31:56:4f:67:a7:7c:52:
         78:a6:1f:3d:ae:e0:56:7f:e9:64:b6:02:51:c7:37:f4:0f:d3:
         bc:a6:67:4e:ed:a4:1e:10:d4:58:cd:da:5f:39:96:43:a0:2e:
         c1:8f:8d:e7:96:2a:05:87:0d:ee:1b:5e:36:50:5e:7e:32:36:
         48:89:3e:2d:c5:cf:55:48:e0:52:37:c7:23:f2:92:17:95:4e:
         1e:ac:a2:10
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzBCQjExMC8GA1UEBRMoODY1OUUwRkVEQUNEQjY5MDEzOUVENUQzMzU1ODc0NzYy
RDdBMTg5RDAeFw0yNjA0MTcwODQ2NDVaFw0yNjA0MjQwODQ2NDVaMBgxFjAUBgNV
BAMTDTY5ZTFmMzc1LTZmNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMRAIDKl4siEAKieyFzkIqyIhzMqXBgVwPzF6NEP6S1rzgCo3YoY8B68WhoF72
R0ky/0Fdxj2SrgmJ0EcDsyjMdQE1wr6h/ecUJJnG7G3BiP/M84DEMktCumOP8nt7
oKDCzkNQo0g0BR1OINAoZUZcN7n7B7cP9DLgrq0T8bpSc1RaQMGjGr0C2GtJdpE1
rDrMFrf6ELIxOSl/IUKg5YUxs8eTKxWjwzhO0JDgXDZk8/+ssMF4VdCtS+lBS24H
dL6dEgF/TZ0L/9YGHa56DE+bkVYFGd408CHwFakJU8dqd2rVJrxewTrRc4YbVM88
7sIsYy7HQ8yfVbLekwEUsgA5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQfU6pPr5
u06sl7JPbWKsb2EBQTswHwYDVR0jBBgwFoAUhlng/trNtpATntXTNVh0di16GJ0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMEJCLzA5OTEyNzI4MjRE
MTExRjE4QkNFMTJFMEE5ODMzNzczL2hsbmdfdHJOdHBBVG50WFROVmgwZGkxNkdK
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaGxuZ190ck50cEFUbnRYVE5WaDBkaTE2R0owLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD
MEJCLzA5OTEyNzI4MjREMTExRjE4QkNFMTJFMEE5ODMzNzczL2hsbmdfdHJOdHBB
VG50WFROVmgwZGkxNkdKMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBdjIrHEwSkxT3eXUGZpTmlcCI41EjwZXoytIyVMh67TPD7kL7tMbXorqaaJL9c
bg2lBa58OHD3g8VeFIXCLAkxZbW8qD2hx3Go4oXsUpCXaGlGlQpKZMEP+EGoGhne
dSgAUobOX24YfcOddqO569NFM3ytaujY8NoBVZzfU4hte0EUEpE/8zWuWpPnsL/q
yucirBM338FjlCMmH35L9pt6K/tVD4qHaKs1sw3N8DFWT2enfFJ4ph89ruBWf+lk
tgJRxzf0D9O8pmdO7aQeENRYzdpfOZZDoC7Bj43nlioFhw3uG142UF5+MjZIiT4t
xc9VSOBSN8cj8pIXlU4erKIQ
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:42:15 2026 by rpki-client